PRIVACY POLICY

1. Data controller

The controller of the data you provide to us is:

• Codelift Servicios S.L. — tax ID B67088195
• Address: Passatge dels Alps, 8, nau 4, 08940 Cornellà de Llobregat, Barcelona, Spain
• Data protection contact: info@code-lift.es

2. What data we process and where it comes from

We process only the data you give us when you contact us or request technical documentation, plus the browsing data generated by the cookies you have authorised.

• Identification and professional contact data: name, company, job title, email, phone.
• The content of your request: project description, installation characteristics, attached documentation.
• Browsing data: IP address, device and browser type, pages visited (only if you accept analytics cookies).

3. Purposes and legal basis

Each processing activity has its own lawful basis:

• Answering enquiries and preparing quotations — performance of a contract or pre-contractual measures at your request (art. 6(1)(b) GDPR).
• Sending the catalogue or requested technical documentation — consent or pre-contractual measure (art. 6(1)(a) / 6(1)(b) GDPR).
• Managing the commercial relationship and complying with accounting, tax and warranty obligations — legal obligation (art. 6(1)(c) GDPR).
• Sending commercial communications about our own products to customers — legitimate interest (art. 6(1)(f) GDPR and art. 21.2 LSSI); to non-customers, prior consent (art. 6(1)(a) GDPR).
• Site analytics and measurement — consent given through the cookie notice (art. 6(1)(a) GDPR).

4. Retention periods

Data from enquiries that do not lead to an order is kept for a maximum of 2 years from the last contact. Data from contractual relationships is kept for the term of the contract and then blocked for the applicable statutory limitation periods (up to 6 years for accounting and commercial matters, plus the periods applicable to product liability). Cookie consent is stored for a maximum of 12 months.

5. Recipients and international transfers

We do not sell or disclose personal data to third parties. Only the providers needed to deliver the service access it, acting as processors under an art. 28 GDPR agreement: email provider, web hosting provider and, where applicable, analytics provider.

Where a provider is located outside the European Economic Area, the transfer relies on a European Commission adequacy decision or on Standard Contractual Clauses with supplementary measures.

Data may also be disclosed to public authorities and courts where legally required.

6. Your rights

You may exercise your rights of access, rectification, erasure, restriction of processing, objection, data portability and not to be subject to automated decision-making, and you may withdraw consent at any time without affecting the lawfulness of processing carried out beforehand.

To do so, write to info@code-lift.es stating the right you are exercising and proving your identity. We will reply within one month. If you believe your request was not handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security and accuracy of data

We apply technical and organisational measures appropriate to the risk to protect data against loss, unauthorised access or alteration. You undertake to provide accurate, up-to-date data and to inform any third parties whose data you send us (for example, colleagues at your company) of the content of this policy.

8. Cookies

The use of cookies and similar technologies is described in the cookie policy, where you can also change or withdraw your consent at any time.