Copyright © 2015. All Rights Reserved by GRAM PRECISION S.L.
Thank you for your interest in our company. Protecting your privacy is very important to us. Below we provide detailed information on how your data is processed.
GRAM PRECISION S.L. (hereinafter, “Gram Group”) informs users that it complies with current legislation on the protection of personal data, the privacy of users, and the confidentiality and security of data, adopting the necessary technical and organizational measures to prevent the loss, misuse, alteration, unauthorized access and theft of the personal data provided, taking into account the state of technology, the nature of the data and the risks to which they are exposed.
You can visit our website without providing any personal data. Each time a website is accessed, the web server automatically stores what is known as a server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and logs the access.
The services, content access, and product offerings on this website are exclusively intended for individuals over 18 years of age. Therefore, anyone who provides their personal data declares that they are of legal age. The use of gram-group.com and the provision of personal data by minors is prohibited.
This access data is analyzed exclusively to ensure the smooth operation of the website and to improve our offerings. In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard our legitimate interests in the proper presentation of our website, which prevail in the context of a balancing of interests. All access data will be deleted no later than seven days after the end of your visit to the website.
Gram Group will process the data in accordance with the quality principles required by Organic Law 15/1999 of December 13 on the Protection of Personal Data (LOPD), confidentially and with the security measures required by Royal Decree 1720/2007 of December 21, which approves the Regulation implementing Organic Law 15/1999 of December 13 on the protection of personal data (RLOPD).
User Information on the Existence of a File and Request for Consent to Automated Data Processing:
In relation to the personal data provided by the CONTRACTING PARTY in the forms that may exist on the website, the SERVICE PROVIDER strictly complies with the current regulations established in Organic Law 15/1999 of December 13 on the Protection of Personal Data and related legislation, and informs the CONTRACTING PARTY that said data will be included in a file for automated processing. The CONTRACTING PARTY gives their consent to this processing by accepting these General Conditions of Contract (CGC).
As part of processing on our behalf, an external provider supplies hosting and website display services. This serves to safeguard our legitimate interests in the correct presentation of our website, which prevail over our own interests. All data collected as part of the use of this website or in the forms provided for this purpose in the online shop, as described below, is processed on their servers. Processing on other servers only takes place to the extent described here.
This service provider is located in a country of the European Union or the European Economic Area.
We collect personal data if you voluntarily provide it to us as part of your order or when you contact us (for example, via a contact form or by email). Mandatory fields are marked as such because in these cases we need the data to process the contract or handle your inquiry, and you cannot submit the order or contact us without providing them. The data collected can be seen in the respective input forms. We use the data you provide in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract processing and handling your inquiries. If you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data for the purpose of opening the customer account. After the contract has been fulfilled or your customer account deleted, further processing of your data will be restricted and it will be deleted after the retention periods required by tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this as permitted by law and about which we inform you in this statement. Deletion of your customer account is possible at any time and can be done by sending a message to the contact option described below or via a designated function in the customer account.
Purpose of Processing: The SERVICE PROVIDER collects certain personal data entered by the CONTRACTING PARTY in the form to formalize the purchase of the products. The SERVICE PROVIDER informs that this data will be managed automatically. The SERVICE PROVIDER will process this data for billing and product delivery, as well as for periodically sending offers and commercial information to the CONTRACTING PARTY, only if the CONTRACTING PARTY expressly authorizes it. In any case, the data collected and processed by the SERVICE PROVIDER are only the essential ones for the purposes indicated above.
Mandatory Data Entry: Fields marked with an asterisk in the existing forms are those that require a mandatory response, and failure to fill them in will result in the impossibility of submitting the inquiry or completing the specific order.
The mere fact that the User submits their personal data to Gram Group implies the User’s consent to its inclusion in the file and its corresponding processing.
The User guarantees that the personal data provided to Gram Group is true and is responsible for communicating any modifications to them so that they correspond to their current situation at all times.
Gram Group will process the data in accordance with the quality principles required by Organic Law 15/1999, of December 13, on the Protection of Personal Data (LOPD), confidentially and with the security measures required by Royal Decree 1720/2007, of December 21, approving the Regulation for the development of Organic Law 15/1999, of December 13, on the protection of personal data (RLOPD).
The personal data provided on the Website will be recorded in a file owned by Gram Group, duly declared and registered in the General Data Protection Register, for the purpose of carrying out the provision of the services offered, as well as to send by any means, including email, offers of products and services of our company, improve the commercial relationship, and manage the requests made by our clients.
The User may revoke the consent given, without retroactive effect, and exercise the rights of access, rectification, cancellation, and opposition by writing with a copy of their ID or other identification document to GRAM PRECISION S.L., C/ Travesía Industrial, 11, 08907, L’Hospitalet de Llobregat.
If you have any questions or comments about how GRAM PRECISION S.L. uses user data, contact us.
In order to fulfill the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, we transfer your data to the transport company commissioned with the delivery to the extent necessary for the delivery of the ordered goods. Depending on the payment service provider you select in the order process, we transmit the payment data collected for payment processing to the credit institution responsible for payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle the shipment for us (drop shipment).
Email advertising with newsletter subscription
If you subscribe to our newsletter, we will use the data necessary for this purpose or the data you provide separately to send you our email newsletter regularly based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
You may unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. Once you have unsubscribed, we will delete your email address unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, as permitted by law and as explained in this statement.
We use so-called cookies on various pages to make visiting our website attractive, to enable the use of certain functions, to display suitable products, or to conduct market research. This serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in an optimized presentation of our offering in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your end device and allow us to recognize your browser on your next visit (persistent cookies). The duration of storage can be found in the cookie settings overview of your web browser.
You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or whether to exclude the acceptance of cookies for certain cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers at the following links:
If cookies are not accepted, the functionality of our website may be limited.
Use of Google Analytics 4 for website analysis
If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, this website uses Google Analytics 4, a web analysis service of Google LLC (www.google.com), for the purpose of website analysis. Google Analytics 4 uses methods such as cookies that make it possible to analyze your use of the website. The information automatically collected about your use of this website is generally transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. The data collected in this context will be deleted once the purpose and use of Google Analytics by us has ended.
Google LLC is based in the USA and is certified under the EU-US Privacy Shield. The current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
You may revoke your consent at any time with future effect by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. This will prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google.
As an alternative to the browser plugin, you can click on this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie will be stored on your end device. If you delete your cookies, you will be asked to give your consent again.
Google reCAPTCHA
To protect against misuse of our web forms and spam, we use the Google reCAPTCHA service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google) in some forms on this website. This service prevents abusive activities on the website by means of manual entry checks, blocking automated software (so-called bots). In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard our legitimate interests in the protection of our website and in its smooth presentation, which prevail within the context of a balancing of interests.
Google reCAPTCHA uses embedded website code, so-called JavaScript, as part of its verification methods, which allow analysis of your use of the website, such as cookies. The information automatically collected about your use of this website, including your IP address, is generally transmitted to a Google server in the USA and stored there. In addition, other cookies stored in your browser by Google services are analyzed by Google reCAPTCHA. No personal data from the form’s input fields is read or saved.
Google is certified under the EU-US Privacy Shield. The current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield. You can prevent Google from collecting the data generated by JavaScript or cookies and related to your use of the website (including your IP address) and from processing such data by disabling the execution of JavaScripts or the installation of cookies in your browser settings. Please note that this may restrict the functionality of our website.
More information on Google’s data protection policy can be found here.
Google fonts
The script code “Google Fonts” from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google), is integrated into this website. This serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in the consistent presentation of content on our website in accordance with Art. 6 para. 1 lit. f) GDPR. In this context, a connection is established between the browser you are using and Google’s servers. Google is thus informed that our website has been accessed via your IP address. Google is certified under the EU-US Privacy Shield. The current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield. You can find more information about Google’s data processing in Google’s privacy policy.
Our online presence on LinkedIn
Our presence on social networks and platforms serves to improve direct communication with our customers and prospects. There we provide information about our products and current special offers. When you visit our online profiles on social media platforms, your data may be automatically collected and stored for purposes of market research and advertising. These data are used to create user profiles using pseudonyms. These profiles can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. For this purpose, cookies are generally placed on your device. These cookies store the behavior of visitors and user interests. This serves, in accordance with Art. 6 para. 1 lit. f GDPR, to safeguard our legitimate interests in an optimized presentation of our offering and effective communication with customers and prospects, which prevail in the context of a balancing of interests. If the respective operators of the social media platforms request your consent (agreement) to data processing—e.g., via a checkbox—the legal basis for processing is Art. 6 para. 1 lit. a GDPR.
If the aforementioned social media platforms are based in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This is based on the EU-US Privacy Shield. The current certificate of the respective company can be viewed here. For detailed information on data processing and use by the providers on their websites, as well as contact options and your rights in this regard and settings options to protect your privacy, in particular opt-out options, please refer to the providers’ privacy policies linked below. If you need further assistance, feel free to contact us.
Data processing is based on a joint responsibility agreement pursuant to Article 26 GDPR, which you can view here.
LinkedIn: https://www.linkedin.com/legal/privacy-policy
Opt-out option:
LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
As a data subject, you have the following rights:
If you have any questions about the collection, processing or use of your personal data, or if you wish to request information, rectification, restriction or erasure of data, or to revoke any consent you may have given, or object to a specific use of your data, please contact us directly using the contact details provided in our legal notice.
Obligation to Provide Data: Fields marked with an asterisk* in the existing forms are those that require a mandatory response. If not completed, it will not be possible to submit the inquiry or complete the specific order.
Rights of Access, Rectification, Cancellation and Objection: The CONTRACTING PARTY who enters their personal data in the registration forms may exercise their rights of access, rectification, cancellation and objection at any time by sending a postal letter to Gram Group – C/ Travesía Industrial, 11, 08907, L’Hospitalet de Llobregat, including in both cases a copy of the data subject’s ID card. The SERVICE PROVIDER reiterates its absolute commitment to respect and confidentiality in the collection and processing of the CONTRACTING PARTY’s personal data, and declares its commitment not to transfer them to third parties without the prior consent of the data subjects.
Security: The SERVICE PROVIDER guarantees the absolute confidentiality and privacy of the personal data collected and has therefore adopted essential security measures to prevent their alteration, loss, unauthorized processing or access, and thus to ensure their integrity and security, especially those provided for in Royal Decree 994/1999 of 11 June, approving the Regulation on the security measures for automated files containing personal data. The SERVICE PROVIDER shall in no case be liable for any incidents that may arise concerning personal data where such incidents are the result of an attack or unauthorized access to systems in such a way that it is impossible to detect with the security measures in place, or where they are due to negligence on the part of the CONTRACTING PARTY in safeguarding their access credentials or personal data.
Accuracy of the Data: The CONTRACTING PARTY is responsible for the accuracy of the data provided, undertaking not to enter false data and to amend them if necessary.
If we process personal data as explained above to safeguard our legitimate interests that prevail in the context of a balancing of interests, you may object to such processing with future effect. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is for other purposes, you have the right to object only if there are grounds relating to your particular situation.
Once you exercise your right to object, we will stop processing your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing is for the establishment, exercise or defence of legal claims.
This does not apply where the processing is for direct marketing purposes. In that case, we will stop processing your personal data for that purpose.