This policy explains how AUFER SOLUTIONS S.L. processes personal data obtained through auferiberia.es, its forms and communications relating to requests for information, quotations and business relationships.

1. Data controller

Controller: AUFER SOLUTIONS S.L.
Tax ID: B67284323
Address: Ctra. de Molins de Rei a Sabadell, km 13, unit 42, Pol. Ind. Can Roses, 08191 Rubí (Barcelona), Spain
Data-protection email: info@auferiberia.es
Telephone: +34 937 128 698

AUFER SOLUTIONS S.L. operates under the trade names Aufer Solutions and Aufer Surface Tech, which are not separate legal entities. AUFER SOLUTIONS S.L. is the data controller.

AUFER SOLUTIONS S.L. has not appointed a data protection officer because this is not, in principle, mandatory for the processing described. Enquiries and requests to exercise rights may be sent to the email address above.

2. Data processed and source

Data provided by the data subject. Name, company, position or professional relationship, telephone number, email address, content of the enquiry, data contained in attachments and any other information voluntarily provided when contacting us or requesting a quotation. This includes communications received by email and telephone.

Business-relationship data. Data required to prepare and manage quotations, orders, deliveries, commissioning, technical support, training, invoicing, collections, payments and communications with customers, potential customers, suppliers and professional contacts.

Technical and browsing data. IP address, date and time of access, requested URL, browser, device, security logs and, where consent has been given, identifiers and usage data obtained through the measurement services described in the Cookie Policy.

3. Purposes and legal bases

Answering enquiries and preparing quotations. Managing forms, emails, calls and requests for information or quotations. The legal basis is taking pre-contractual steps at the data subject’s request and, where the enquiry is not aimed at entering into a contract, the legitimate interest in responding and maintaining professional communication.

Managing the contractual and business relationship. Processing orders, deliveries, technical services, warranties, invoicing, collections, payments and after-sales support. The legal basis is performance of a contract where the data subject is a party to it. For contact persons at customers, suppliers or other organisations, the basis is the legitimate interest in maintaining the professional relationship with the organisation they represent, in accordance with Article 19 of Spanish Organic Law 3/2018. Compliance with commercial, tax and accounting legal obligations also applies.

Sending marketing communications. Sending information about products or services where requested or consented to. In existing customer relationships, communications concerning similar products or services of our own may be sent under the conditions permitted by the LSSI-CE, always providing a simple, free way to object. The basis will be consent or, where legally applicable, legitimate interest.

Protecting and maintaining the website. Preventing abuse, investigating incidents, retaining technical records and ensuring availability and security. The legal basis is AUFER SOLUTIONS S.L.’s legitimate interest in protecting its systems and services.

Measuring website use. Producing usage statistics through the Google services described in the Cookie Policy, only after consent has been obtained. The legal basis is consent, which may be refused or withdrawn without affecting access to essential functions.

4. Mandatory nature of the data

Fields marked as mandatory are required to manage the request. If they are not provided, AUFER SOLUTIONS S.L. may be unable to respond or provide the requested service. Anyone providing third-party data declares that they are entitled to do so and that they have informed those persons where required.

5. Recipients and processors

Data is not sold or disclosed to third parties for their own commercial purposes. It may be disclosed to public authorities, regulators, courts, financial institutions or other recipients where necessary to comply with a legal obligation, perform a contractual relationship or establish, exercise or defend legal claims.

Service providers may also have access to the data when providing AUFER SOLUTIONS S.L. with web hosting, email, IT maintenance, website support, administrative management or analytics services. Where applicable, these providers act as processors and are subject to a contract and confidentiality obligations.

Disclosure to the manufacturer. Where required to perform a supply or technical service, the professional contact data strictly necessary for manufacturing, configuration, warranty or support of the supplied equipment may be disclosed to the manufacturer.

Where Google services are accepted, Google Ireland Limited and other Google group entities may be involved in accordance with their terms and policies.

6. International transfers

Some technology providers, particularly Google, may process information outside the European Economic Area. Where an international transfer occurs, a valid mechanism under the GDPR will be applied, such as an adequacy decision—including the EU–US Data Privacy Framework where applicable—or the standard contractual clauses approved by the European Commission, together with any required supplementary safeguards.

Manufacturers in the graphic-arts catalogue. The manufacturers whose products AUFER SOLUTIONS S.L. distributes in its graphic-arts catalogue are established in the European Union. Any data disclosed to them for supply, warranty or technical support does not constitute an international transfer.

Transfer to China. This website contains information about corona-treatment systems whose manufacturer is established in the People’s Republic of China, a country without a European Commission adequacy decision. If an enquiry submitted through this website concerns such equipment and handling it requires data to be disclosed to the manufacturer, only the professional contact details strictly necessary for that purpose—name, company, position, telephone number or email address—will be transferred. Special-category data will never be transferred.

This transfer is based on the standard contractual clauses approved by the European Commission and incorporated into the contract between AUFER SOLUTIONS S.L. and the manufacturer. Information about the safeguards applied may be requested at info@auferiberia.es.

If you prefer your data not to be disclosed to the manufacturer, please state this when making your enquiry. AUFER SOLUTIONS S.L. will then assess whether the supply or service can be handled without that disclosure and will inform you of any resulting limitations.

7. Retention periods

Enquiries with no subsequent relationship. For the time required to respond and follow up and, as a general rule, for up to twelve months after the enquiry is closed, unless it must be retained to deal with a claim.

Contractual and business relationships. For as long as they remain in force and afterwards for the applicable statutory periods and the periods required to address liabilities. Commercial and accounting records will generally be retained for six years, without prejudice to other tax or statutory periods.

Marketing communications. Until consent is withdrawn or the right to object is exercised. A minimal suppression record may be retained to demonstrate that no further communications are sent.

Security and technical logs. For the period strictly necessary to detect and manage incidents and, unless justified, no longer than twelve months.

Analytics and cookie consent. User and event data for measurement services is configured with a maximum retention period of fourteen months. Cookies and evidence of the user’s choice will be retained for the period stated in the Cookie Policy, without exceeding twenty-four months before a new decision is requested.

8. Data-subject rights

You may request access to your data, rectification, erasure, restriction of processing, object to processing and data portability where applicable. You may also withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, send a request to info@auferiberia.es or to the registered office, stating the right you wish to exercise and the information required to identify the request. Where there are reasonable doubts about identity, proportionate additional information may be requested. A response will be provided without undue delay and in all cases within the statutory period.

If you believe that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es/.

9. Automated decisions and profiling

AUFER SOLUTIONS S.L. does not make decisions producing legal or similarly significant effects based solely on automated processing of data collected through this website. Where consented to, web analytics is used for statistical purposes and not to make individual decisions producing legal effects for visitors.

10. Children

The website is intended for professionals and businesses, not children. Information from children under fourteen is not knowingly requested. If data from a child is found to have been received without the necessary lawful basis, it will be deleted as soon as reasonably possible.

11. Security and updates

AUFER SOLUTIONS S.L. applies technical and organisational measures appropriate to the risk to protect the confidentiality, integrity and availability of data. This policy may be updated when processing activities, providers, services or applicable law change. The current version is the one published on the website.

Last updated: 20 August 2026. This translation is provided for information. In the event of any discrepancy, the Spanish version shall prevail.