Privacy & legal

Privacy policy

Additional information on data protection

What we do — and don't do — with your personal data on this website is explained here.

This policy sets out how the personal information of everyone who interacts with KERAjet S.A. through this website will be processed and protected. Please read every section of the Legal Notice, the cookie policy and this privacy policy before using this website.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights, KERAjet informs you that, by accepting this Privacy Policy, you give your express, informed, free and unambiguous consent for the Data you provide — which is subject to the technical and organisational security measures required by current regulations — to be processed by KERAjet as data controller.

Who is responsible for this website?

Data controller: KERAjet S.A. Trading name: KERAjet Tax ID (NIF): A12514998 Address: Pol. Indust. Supoi, 8, Avda. Boverot, 24, Almazora, 12550 Castellón de la Plana, Spain. Email: kerajet@kerajet.com

What personal data does this website collect?

For the purposes set out in this Privacy Policy, KERAjet S.A. collects and processes the following categories of Personal Data, depending on the products or services you request through this website:

Identification data: name. Contact data: email address, mobile phone number. Browsing data: IP address, device type and identification, browser type, the domain through which you access the website, navigation data, activity on the website.

On what legal basis is this data processed?

We process your personal data on the following legal bases:

Performance of a contract with KERAjet S.A., to provide services, publish listings and manage the services requested. User consent in relation to contact, subscribing to content and sending commercial communications by email, cookies or messaging systems. The legitimate interest of the data controller in protecting users of the KERAjet S.A. website from abuse and fraud in the use of our services.

For what purposes will your data be processed?

This website has several forms; in each case the information collected is used as follows:

Contact form: also used for enquiries, suggestions or professional contact. In this case, the email address or phone number provided will be used to reply and to send the information the user requests through the website. Comment form: personal data entered in the comment form is used exclusively to moderate and publish those comments.

How long is personal data kept?

The retention period for personal data will vary depending on the service contracted. In any case it will be the minimum necessary, and may be kept for up to:

4 years: Spanish Law on Social Order Infractions and Sanctions (obligations regarding registration, deregistration, contributions, salary payment…); Arts. 66 et seq. of the General Tax Law (accounting records…). 5 years: Art. 1964 of the Civil Code (personal actions with no special time limit). 6 years: Art. 30 of the Commercial Code (accounting books, invoices…). 10 years: Art. 25 of the Law on the Prevention of Money Laundering and Terrorist Financing.

Prospective customer data: retained for the duration of the commercial relationship and, once it ends, for a further two years, unless the user requests earlier deletion.

What rights do you have regarding the use of your data?

Anyone has the right to obtain confirmation as to whether KERAjet S.A. is processing personal data concerning them.

Data subjects have the right to:

Request access to their personal data. Request its rectification or erasure. Request its cancellation. Request the restriction of its processing. Object to its processing. Request data portability.

Where you have given consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

If you believe your data protection rights have been infringed, particularly where you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority via its website: https://www.aepd.es/es

To exercise these rights, you may write to kerajet@kerajet.com

A form for exercising these rights is available on request by email, or you may use the forms produced by the Spanish Data Protection Agency or by third parties.

These forms must be electronically signed or accompanied by a copy of your national ID document.

If you are represented by someone else, a copy of their ID must be attached, or the form must carry their electronic signature.

Forms may be submitted in person, by post, or by email to the controller's address shown at the start of this text.

Google Ads remarketing

Google Ads is Google's platform for advertisers who want to promote themselves on Google. kerajet.com uses Google Ads, Google's advertising platform, to create campaigns and ads shown on other websites. When creating an ad, the audience can be segmented by:

Location Demographic data (age, gender, etc.) Interests (activities, hobbies, etc.) What they buy online and through other channels Etc.

Data obtained through Google Ads is subject to this privacy policy from the moment the user leaves their data in this website's form to join the newsletter. Information from Google will never be used for a different purpose.

Breach notification

KERAjet S.A. applies security measures appropriate to the level of risk to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction, taking into account the risks involved in processing and the nature of the personal information. Nevertheless, if KERAjet S.A. determines that service data has been misappropriated (including by a KERAjet S.A. employee), exposed through a security breach, or improperly acquired by a third party, KERAjet S.A. will inform you immediately of that security breach, misappropriation or improper acquisition.

Who will your data be shared with?

Many of the tools used on this website to manage data are contracted from third parties. To provide services strictly necessary for the business, KERAjet S.A. shares data with the following providers under their respective privacy terms:

External service providers (for example, payment processing, order processing, analytics, marketing campaign management, website management, and email distribution, among other similar service providers) so they can carry out business functions on behalf of KERAjet S.A.

The web development, maintenance and hosting companies may occasionally have access to this website. They have signed service agreements obliging them to maintain the same level of privacy applied to the processing carried out on this website.

Any international transfer of data resulting from the use of tools or service providers will comply with the Privacy Shield framework, which guarantees that American software companies comply with European data protection policies on privacy, secrecy and data security.

Segmentation and profiling

The personal data recorded at the time of contact, interaction with the website and any other data provided during browsing — including information supplied by cookies regarding browsing habits — will be used to segment or categorise users for purposes related to general administration, information, marketing of advertising space, analysis of proposals requested by users/customers, statistical study of the services and content used, tastes and preferences, and surveys or forms.

Profiling, through the analysis of your automated individual decisions, consists of using your Personal Data to assess certain personal aspects, such as the analysis and prediction of your economic situation, personal preferences, interests, behaviour, location, movements and attitudes. The logic applied to obtain these profiles uses statistical procedures, and the consequence of this processing through profiling is the sending of personalised communications of interest to you with content related to website design and creation.

The legal basis for processing your data for the purposes indicated, and for the automated individual decision-making involved in profiling, is the consent given when ticking the box referred to above.

The data we use to build profiles and show to advertisers does not identify individual users — it is only shown as a chart of the type of audience we have, by age, country, gender, etc.

Confidentiality and data security

kerajet.com is committed to using and processing user personal data in a manner that respects its confidentiality, in line with its stated purpose, and to fulfilling its obligation to safeguard it and adopt all measures needed to prevent unauthorised alteration, loss, processing or access, in accordance with current data protection regulations.

This website has an SSL certificate. This security protocol ensures your data travels intact and securely — that is, the transmission of data between a server and the web user, in both directions, is fully encrypted.

kerajet.com cannot guarantee the absolute impregnability of the Internet, nor, therefore, that data will not be breached through fraudulent third-party access.

With regard to the confidentiality of processing, KERAjet S.A. will ensure that anyone authorised by KERAjet S.A. to process customer data (including its staff, collaborators and providers) is subject to an appropriate duty of confidentiality, whether contractual or statutory.

Should a security incident occur, KERAjet S.A. will, upon becoming aware of it, notify the Client without undue delay and will provide timely information about the Security Incident as it becomes known, or when the client reasonably requests it.

Accuracy and truthfulness of data

As a user, you are solely responsible for the truthfulness and accuracy of the data you submit to kerajet.com, and you release KERAjet S.A. from any liability in this regard. Users guarantee and are responsible, in all cases, for the accuracy, currency and authenticity of the personal data provided, and undertake to keep it duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

Revocability

The consent given, both for processing and for the transfer of data subjects' data, may be revoked at any time by notifying KERAjet S.A. under the terms set out in this Policy for exercising ARCO rights. This revocation will never have retroactive effect.

Changes to the privacy policy

KERAjet S.A. reserves the right to amend this policy to adapt it to legislative or case-law developments, as well as to industry practices. In such cases, it will announce the changes introduced on this page with reasonable notice before they take effect.