Accessing and using the website https://www.arema.com/ (hereinafter, the “Website”) grants the visitor of the Website the status of user and implies the total acceptance without reservation by the user of the conditions of use in force at all times.

We consider the privacy of individuals, both visitors to our website and any other individuals who provide information through it, important. The data of these individuals are processed by AGUA, RESIDUOS Y MEDIO AMBIENTE, S.A. (hereinafter AREMA) as part of the provision of services (hereinafter, “you” or “the user,” and in the plural, “you” or “the users”). In this regard, AREMA is committed to processing your data in accordance with the applicable personal data protection regulations in force at all times. Specifically, AREMA will comply with the principles established in Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, as well as those of Regulation (EU) 2016/679 of April 27, 2016, of the European Parliament and of the Council regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data.

In this context, AREMA informs you of its Privacy Policy to make users aware of the processing of their data, as well as the fundamental principles of personal data protection that it applies. To do this, please refer to the sections indicated below:

1. Who is the Data Controller for the user’s personal data?

Identity of the Data Controller: AGUA, RESIDUOS Y MEDIO AMBIENTE, S.A. VAT number: A60833027. Postal address: C/Pont Major, s/n, 17007, Girona Phone: 972 21 45 50. Email: rgpd@rubau.com

2. What are the main purposes of processing the user’s personal data?

• Execution and/or maintenance of any contractual relationship and/or service management.
• Attention and management of requests, issues, and/or queries made by users through www.arema.com or the enabled contact channels.
• Sending information, advertising, and commercial promotion of products, services, and activities of interest related to comprehensive construction services by any means, including electronic means (email or equivalent means, such as SMS, mobile phones, etc.).
• Knowing your opinion and assessment and keeping you informed of activities, news, special offers, and promotional activities of interest related to comprehensive construction services.

3. What is the legal basis for processing your data?

We will process your data when necessary to execute any contractual relationship or when the user has given their consent.

In this regard, if the data provided in the corresponding forms belong to a third party, the user is solely responsible for properly obtaining the third party’s consent to information regarding the aspects reflected in the Legal Notice and Privacy Policy of the Website.

4. How long will we keep your data?

They will be kept for no longer than necessary for the aforementioned purposes of processing, as well as as long as there are legal prescriptions that determine their custody and when it is no longer necessary for it or you request the deletion of your data. To this end, appropriate security measures will be applied to ensure the anonymization of the data or their complete destruction.

5. Who may be recipients of the data communication?

We inform you that we never transfer, sell, or exchange your personal data with third parties. However, your data may be transferred to competent authorities and/or bodies in cases where there is a legal obligation or to other companies in the RUBAU Group or to third-party providers whose intervention is necessary for the aforementioned purposes.

6. What are your rights when you provide us with your data?

• Right to request access to personal data: you may ask AREMA if it is processing your data, and if so, access them.
• Right to request rectification if the data is inaccurate, or complete the data we have incomplete.
• Right to request the deletion of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• Right to request the limitation of their processing: in this case, we will only keep them for the exercise or defense of claims.
• Right to object to processing: AREMA will stop processing personal data, except if they must continue to be processed for legitimate reasons or for the exercise or defense of possible claims.
• Right to data portability: if the user wants their data to be processed by another data controller, AREMA will facilitate the transfer of their data to the new data controller.
• Right not to be subject to a decision based solely on automated processing of personal data.

If you have given consent for a specific purpose, you can withdraw it at any time without affecting the legality of the processing based on the prior consent.

To exercise your rights, please notify AREMA in writing at C/Pont Major, s/n, 17007, Girona, indicating your name, surname, address, or send an email to: rgpd@rubau.com. If there are doubts about your identity, it may be necessary to provide a photocopy of your ID card or equivalent document proving your identity and considered valid in law. For this, you can use the models and forms on the various rights available on the Spanish Data Protection Agency’s official page (https://www.aepd.es/reglamento/derechos/index.html).

We inform you of the right to file a complaint with the Control Authority, specifically, with the Spanish Data Protection Agency (https://sedeagpd.gob.es/sede-electronica-web/vistas/formNuevaReclamacion/reclamacion.jsf), and other competent public bodies for any claims arising from your personal data.

7. Links

The Website may contain links to other websites. Please note that we are not responsible for the privacy and data processing of other websites. This Privacy Policy applies exclusively to information collected on the Website. We recommend that you read the privacy and data processing policies of other websites linked from our Website or that you visit in any other way.

8. Social networks

AREMA has a presence on some of the main social networks on the Internet and acts as the data controller regarding the data published by AREMA.

AREMA will process the data on each social network according to the rules established for this purpose by each social network. Therefore, and until otherwise indicated by AREMA, we may inform our followers on the corresponding social network about our activities, events, and other related topics, including follower support, through the channels provided by the social network for this purpose.

AREMA will not extract personal data from social networks unless the user gives us their express consent.

9. Modifications and integrity of our Privacy Policy

We will only use your personal data as established in the Privacy Policy that is in force at the time we collect your personal data. AREMA reserves the right to modify this Privacy Policy at any time, publishing such modifications on our website, so we recommend that each time you visit it, access the Privacy Policy. In the event that any clause of this Privacy Policy is annulled or considered null, the rest of the conditions will not be affected, retaining their full validity and effectiveness, in accordance with the current regulations applicable at all times.

By using our website, the user acknowledges that they have read this Privacy Policy and our Legal Notice.

Last update date: October 2023