Privacy Policy

At Neolith, we work to ensure privacy in the processing of your personal data. Below you will find our Privacy Policy, where you can clearly learn how we collect, use and safeguard the data of people who contact our organization:

• Data controller

• Purposes and legal basis for data processing

• Data retention period

• Call recording

• Disclosure of your data

• Social media

• Your rights

• Third-party data

• International transfers

• Responsibility for your personal data

• Measures taken when processing personal data

 

 

Data controller

Any data subject who provides Neolith with personal data through this website or by other means (for example, social media) is hereby informed that their data are processed by:

Thesize Surfaces, S.L.U., (hereinafter “Neolith”), with Tax ID No. B85171023 and registered office at Pol. Ind. Cami Fondo, C/ Ibers, 12550 Almazora (Castellón), Spain. Telephone: 964652233. https://www.neolith.com/

For any matter relating to the processing of your personal data, you may contact Neolith's Legal & Compliance Department at lopd@thesize.es, by post at the following address: Pol. Ind. Cami Fondo, C/ Ibers, 12550 Almazora (Castellón), or by telephone at +34964652233.

 

 

Purposes and legal basis for data processing

At Neolith, data are processed for the following purposes, depending on the reason for which you provided them to us, and on the following legal basis:

Processing purposes	Legal basis
To contact the sender of the information, respond to their request, application or query, manage the publication of queries and comments, and carry out subsequent follow-up.	The legal basis for responding to your request or query and carrying out subsequent follow-up is the consent of the person providing the data. Providing the data is voluntary; however, if you do not provide them, we will be unable to respond to the request, query or complaint. Therefore, communicating your personal data for these purposes is a necessary requirement for us to handle requests submitted through this channel.
Where applicable, to manage your order and provide the service contracted by the user, including invoicing and collection. Customer data may be used to prepare statistical reports that help expand and improve Neolith's products or services. In all cases, no personal data will be included in the statistical reports produced. These data will not be shared by Neolith with any third party and will be stored on the entity's servers where the information entered by the customer into the contracted product is stored.	The legal basis for processing your data is the performance of the corresponding commercial transaction. Providing the data is necessary; otherwise, the requested services or products cannot be supplied. In all cases, the processing of customer data to prepare statistical reports is based on the company's legitimate interest, which is considered overriding insofar as no data other than those provided by users will be processed, and solely for the purpose of improving the services offered by the entity. In addition, the statistical reports will not contain users' personal data, as they will be anonymized.
To manage and monitor the customer and supplier portfolio, as well as any incident that may arise in the relationship with them.
Where applicable, to manage the user's registration and participation in events and activities organized by Neolith.
To send commercial communications about our products or services, as well as events and activities we organize, including competitions and prize draws. Based on the information provided, we may create commercial profiles in order to offer you products and services suited to your interests.	The legal basis for sending commercial communications to users who are not customers is the consent that has been expressly requested and provided, which may be withdrawn at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before its withdrawal.
Where applicable, to assess and manage your curriculum vitae for recruitment processes suited to your professional profile and to carry out the actions necessary for personnel selection and hiring.	The legal basis for processing curriculum vitae is the consent granted by the candidate when submitting it to participate in recruitment processes.
To send surveys to assess user satisfaction with Neolith products and services, learn their opinion of them and determine areas in which the Company can improve. For these purposes, Neolith may contact the user to test products and analyze new products the entity may develop.	The legal basis for sending surveys and carrying out product testing by customers is the company's legitimate interest. This legitimate interest is considered overriding because only the contact details of the entity's customers will be processed, solely so that they may express their opinions about Neolith's products or services. The information obtained will be deleted once the corresponding report has been prepared, and that report will under no circumstances contain personal data. In all cases, authorization to process your data for this purpose is voluntary, and refusal would only mean that you would not receive these surveys or be selected for the product tests requested by the Company. Nevertheless, we remind you that you have the right to object to this processing of your data through any of the means described in this Policy.
Video surveillance of the premises	Certain Neolith premises have video surveillance systems intended to ensure the safety of people, property and facilities. Images captured by the video surveillance systems are processed to control access to the premises, protect Neolith's property and facilities, and facilitate the investigation of incidents that may affect such property or facilities. The processing of images is based on Neolith's legitimate interest in ensuring the safety and condition of people, property and facilities, in accordance with Article 6.1(f) of Regulation (EU) 2016/679 (GDPR) and Article 22 of Organic Law 3/2018. Only images captured by the video surveillance cameras and, where applicable, the date and time of the recording are processed. The images may be disclosed only when legally appropriate, including to: law enforcement agencies; courts and tribunals; the Public Prosecutor's Office; and other competent public authorities where there is a legal obligation. Likewise, technology providers or security companies engaged by Neolith may access the images as data processors. They will act in accordance with the controller's instructions and under the corresponding data processing agreements.

Data subjects may exercise their rights in accordance with the section entitled "Your rights" in this Policy.

 

 

Data retention period

• Data used to manage the customer relationship and the invoicing and collection of services will be retained for as long as the contract remains in force. Once that relationship has ended, where applicable, the data may be retained for the period required by applicable law and until any liabilities arising from the contract become time-barred. Statistical reports relating to market research may be retained indefinitely, although they do not include personal data.

• Data used for the management of queries and requests will be retained for the time necessary to respond to them, for a maximum period of one year after they have been resolved.

• Data used for participation in studies, games, competitions, events, activities, prize draws and promotions will be retained for the duration of such activities and, where applicable, in accordance with their specific terms, to manage their operation and subsequently until any potential liabilities arising from them become time-barred.

• Data used to send commercial communications about our products or services will be retained indefinitely until, where applicable, you inform us that you wish them to be deleted.

• Data contained in curriculum vitae for recruitment processes will be retained for a period of two years from the date of application for a specific position.

• Data obtained as a result of surveys sent by Neolith, as well as tests carried out by users on the Company's current or future products, will be stored until the entity prepares the corresponding statistical report on the results obtained. This report will not include personal data.

• Data obtained through the video surveillance systems installed at certain premises will be retained for a maximum period of 30 days from the date they are captured.

However, where the images must be retained to provide evidence of acts that threaten the integrity of people, property or facilities, or where they must be made available to law enforcement agencies or the competent judicial authority, they may be retained for the period strictly necessary for those purposes.

 

 

Call recording

Calls may be recorded in order to handle your request and analyze them with the aim of improving the responses provided and offering a more personalized service.

Your data will be processed on the basis of the entity's legitimate interest, which is considered overriding due to the need for tools that allow us to assess and improve the quality of the responses we provide and the decisions you make on the basis of those responses. Calls may also be recorded to enhance security and provide evidence concerning the services or products requested and those offered by us.

The recording will be retained for a minimum period of 12 months and, in all cases, until your request has been processed or your query answered. If new data are collected by telephone as a result of a complaint, contract, change of product or service, etc., the recording will be retained as evidence of the collection of those data for as long as any legal liability may arise from the relationship maintained. Information relating to the assessment of decisions made by users on the basis of the responses provided is retained for a period of 12 months.

 

 

Disclosure of your data

The data will be disclosed to the following entities:

1. To the companies of the Neolith Group to which Neolith belongs, in particular the subsidiaries directly or indirectly owned by TheSize Surfaces S.L., Tax ID No. B85171023, all of which operate in the industrial sector, for the centralized management of our activities and the fulfillment of internal administrative purposes, including the processing of customers' personal data. Likewise, where you have given us your consent, your data may be transferred to these companies so that they can send you commercial communications that may be of interest to you, taking your customer profile into account.

2. To the agencies that help carry out advertising and marketing campaigns, market research and surveys.

3. To the financial institutions through which collections and payments are managed.

To the competent Public Administrations in the cases provided for by law and for the purposes defined therein.

 

 

Social Media

If you become our friend or follower on social media, we will process your data to keep you informed of our activities and promotions through those channels. These data will be processed on the legal basis of your consent and retained for as long as you remain our friend or follower. You may withdraw your consent at any time, although this will not affect the lawfulness of processing carried out beforehand. Providing data for this purpose is voluntary; however, if you do not provide them, you will not be able to become our friend or follower on the social networks on which we have a presence.

Where user registration is carried out through social media, the personal data we process will come from the relevant social network, to which the data subject will previously have provided those data for the purposes set out in its corresponding privacy policies. The categories of data we collect from the relevant social network are those included in our registration form that you have provided to that social network. If additional data beyond those supplied by the social network are essential to complete registration on our website, you must provide them separately in our registration form, subject to the privacy terms set out in this Privacy Policy.

Our Portals may include social media features, such as the Facebook “Like” button, LinkedIn, Twitter or other widgets. These social media companies may recognize you and collect information about your visit to our Portals, and may set a cookie or use other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies. We also offer you targeted advertising through social media platforms, including Facebook, Instagram, Twitter and LinkedIn. These companies have interest-based advertising programs that allow us to target advertisements to users who have shown an interest in our Portals while on the social media platform, or to groups of other users who share similar characteristics, such as similar commercial interests and demographic data. These advertisements are governed by the privacy policies of the social media companies that provide them. In these cases, Neolith does not know the personal data of the campaign recipients; it only agrees with the social network on the market segment it wishes to target to promote its services and products.

When you interact with our Portals through various social networks, such as when you connect to our Portals via Facebook, click the “Like” button on our social networks, follow us, or share our content on Facebook, Twitter, LinkedIn or other social networks, we may receive information from those social networks, including information about your profile, the user ID associated with your social media account, and any other information you allow to be shared with third parties on the social network.

If Neolith obtains users' prior consent, it may carry out the following actions, processing for this purpose the data that users have registered on social media:

• Carry out direct advertising campaigns aimed at social media users on its own behalf, for example by sending private messages.

• Obtain information about users on social media by first cross-referencing its database with the social network for the purpose of carrying out a commercial campaign.

Consent may be withdrawn at any time, although this will not affect the lawfulness of data processed beforehand.

 

 

Your rights

You may exercise your rights of Access, Rectification, Erasure, Objection, Restriction of processing or Data Portability.

You must specify which of these rights you wish to exercise and, where necessary to verify the applicant's identity, supporting identification documentation may be required. If you act through a legal or voluntary representative, you must also provide a document proving the representation and the representative's identification document.

All the rights mentioned may be exercised through the contact methods listed in the “Data controller” section of this Privacy Policy.

In the event of any infringement of your rights, particularly where you have not obtained satisfaction in exercising them, you may lodge a complaint with the Spanish Data Protection Agency (contact details available at https://www.aepd.es/) or another competent supervisory authority. You can also obtain further information about your rights by contacting those bodies.

 

 

Third-party data

If you provide third-party data, you assume responsibility for informing those third parties in advance of everything set out in Article 14 of the General Data Protection Regulation, under the conditions established in that provision.

Privacy Agreement for the WhatsApp Group

1. Joining the WhatsApp Group

When you register for our WhatsApp group, we use the required data or any additional information you provide to send you regular messages in the WhatsApp group, based on your consent, in accordance with Article 6(1)(1)(a) of the GDPR. Participation in the WhatsApp group is voluntary and may be terminated at any time.

2. Unsubscribing and Deletion of Data

You may unsubscribe from the WhatsApp group at any time by leaving the group. After you unsubscribe, we will delete your data unless you have explicitly consented to the continued use of your data in accordance with Article 6(1)(1)(a) of the GDPR, or unless there is another legal basis for further data processing, of which we will inform you in this statement.

3. Tracking in the WhatsApp Group

If you have given us your explicit consent in accordance with Article 6(1)(1)(a) of the GDPR to analyze your behavior in the WhatsApp group, we will analyze your usage behavior by measuring, storing and evaluating interactions within the group. This is done to optimize future messages and campaigns ("Group Tracking"). You may also opt out of group tracking at any time by sending a message to the data controller. Your data will be stored for as long as you are a member of the WhatsApp group and group tracking remains active.

4. Inclusion of the WhatsApp Privacy Policy

Because the transmission and management of messages and group communications are handled by WhatsApp, we inform you that WhatsApp's privacy policies also apply. You can consult them at the following link: WhatsApp Privacy Policy.

Withdrawal of Consent
You may withdraw your consent to the processing of your data at any time with effect for the future. Consent may also be withdrawn by sending a message to the data controller. Please note that, after your consent has been withdrawn, no further messages will be sent through the WhatsApp group.

International data transfers

Neolith uses Salesforce platforms to send communications and surveys to recipients. Personal data collected through communications or surveys will be stored on platforms owned by these providers, which store their data in the United States, resulting in an international transfer of data.

In all cases, these entities provide appropriate data protection safeguards by applying the Standard Contractual Clauses approved by the European Commission for international data transfers. For more information:

https://security.salesforce.com/es/general-data-protection-regulation

Responsibility for your personal data

The user is responsible for ensuring that the information provided through this website is truthful. For these purposes, the user is responsible for the accuracy of all data communicated and will keep the information provided properly updated so that it reflects their actual circumstances. The user will be responsible for any false or inaccurate information provided and for any damage this causes to the owner of this website or to third parties.

Measures taken when processing personal data

At Neolith, we adopt all necessary security measures to guarantee the confidentiality, integrity and availability of your data, implementing the technical, organizational and legal measures needed to protect them against third parties. To this end, the technical and organizational security measures necessary to prevent alteration, loss, unauthorized processing or access have been implemented, in accordance with applicable regulations.