Data Protection Policy
Socías y Rosselló, S.L. (hereinafter referred to as the Company) is firmly committed to protecting the personal data obtained from data subjects (hereinafter referred to as the Interested Parties), whether through non-electronic means — such as printed forms, contracts, or declarations (hereinafter referred to as Documents) — or electronically through our website www.sociasyrossello.es
(hereinafter referred to as the Website), as well as through, among others, SYR’s web applications, software, and digital tools (hereinafter referred to as the Platforms).
In accordance with the provisions of the European General Data Protection Regulation (EU) 679/2016 (GDPR), this policy applies to:
Our objectives are to:
Ensure transparency regarding the nature of the personal data we collect through non-electronic means (via Forms) or electronically through the Website and/or the Applications.
Ensure transparency in the use of the personal data collected.
Facilitate the exercise of rights by data subjects.
We hereby establish this Data Protection Policy.
The protection of your personal data is important to us. Our goal is to process your personal data lawfully, appropriately, and transparently.
1. DATA CONTROLLER
Socías y Rosselló, S.L., established within the territory of the European Union, is subject to the General Data Protection Regulation (EU) 679/2016 (GDPR) and to any future regulations enacted under the provisions of the aforementioned Regulation in the Member State where it is domiciled.
Data Controller
We inform you that the personal data you provide through non-electronic means (via Forms) or electronically through the Website and/or the Applications will be used for the purposes detailed below by Socías y Rosselló, S.L. (SYR), a company with registered office at Gremio Herreros, 38, 07009, Palma de Mallorca (Tax ID: B07036569), in its capacity as the Data Controller.
2. PERSONAL DATA WE COLLECT AND PURPOSES
To the extent necessary, SYR collects, processes, records, stores, and transfers personal data provided by data subjects through non-electronic means (via Forms) or electronically through the Website and/or the Applications, in the course of activities such as, among others: visiting the Website; using Applications; completing electronic or non-electronic registration Forms; reporting incidents; contacting SYR; submitting job applications; clicking on social media buttons; providing comments (e.g., regarding Forms, products, Applications, Website, or customer service); responding to surveys; and other similar activities.
Personal data may be collected on an optional or mandatory basis. When the provision of personal data is mandatory, this will be duly indicated. If a data subject refuses or fails to provide personal data marked as mandatory, SYR will be unable to carry out the requested process or activity.
For example, when a data subject wishes to submit a registration form, SYR requires certain personal information in order to process the registration request. If the data subject wishes to register but does not provide the mandatory personal data, SYR will not be able to accept or process the registration request.
SYR may collect personal data with or without the consent of the data subject in the following circumstances:
When required to comply with a legal obligation;
When necessary for the performance or execution of a contract to which the data subject is a party;
When a legitimate interest, public interest, or vital interest exists that overrides the rights of the data subject;
When an authority has requested SYR to process personal data.
SYR may only perform further processing of your personal data:
When the purpose of such additional processing is compatible with the purpose for which your personal data were originally collected; or
When you provide your consent for additional processing for a new purpose that is not compatible with the purpose for which your personal data were originally collected.
See below, in Sections 2.1 and 2.2, the personal data we collect and the purposes for which we collect them.
2.1 PERSONAL DATA WE OBTAIN FROM YOU OR FROM THIRD PARTIES
Depending on the purpose of each processing activity and to the extent necessary, we may ask you to provide different types of personal data, including but not limited to: name, surname(s), date and place of birth, title, address, telephone number, mobile number, email address, language, country, nationality, identity document, driver’s license number, national registration number, passport number, curriculum information, company, profession, client number, URLs of personal or social media pages, credit card information, preferences, interests, and comments.
We may also use personal data that you have provided to third parties, such as service providers, or personal data that are publicly available — for example, widely known personal data, personal data visible on your own website or blog, or data published on your public social media profiles.
SYR may also obtain personal data from third parties as a result of mergers, acquisitions, or other corporate restructuring operations.
2.1.1. Purposes of Personal Data Collection
Once collected, we use the aforementioned personal data for various purposes, which include the following:
Business Administration and Customer Management
SYR must be able to duly and properly fulfill its contractual obligations and carry out the necessary regulatory and accounting processes. Accordingly, SYR requires certain personal data provided by data subjects through non-electronic means (via Forms) or electronically through the Website and Applications.
In accordance with Regulation (EU) 679/2016, for the performance of contracts, the consent of a data subject who is or will be a party to a contract is not required.
With regard to customer relationship management and the provision of customer service, SYR uses personal data (e.g., name, country, nationality, email address, customer number, credit card information) for the following purposes:
To assess the feasibility of selling products or providing services to a customer before entering into a contract;
To process written requests, product and service orders, and return requests submitted by customers;
To identify and contact customers for the purpose of offering discounts;
To inform customers about their consumer rights and any additional services related to the purchased product or service;
To inform customers about promotional campaigns and events organized by Socías y Rosselló and send corresponding invitations;
To manage access to SYR’s facilities, Website, and Applications;
To organize and carry out maintenance work for customers and installers;
To notify customers when maintenance dates are approaching.
Product Distribution
SYR uses personal data for product distribution and, in particular, to:
Optimize sales and services by preparing customized offers for clients;
Improve and streamline the distribution of our products and services;
Organize and provide training sessions for customers, installers, employees, and subcontractors.
Supplier Administration
SYR uses personal data to maintain records of suppliers of goods and/or services, to register and manage orders, commercial expenses, and invoices issued by suppliers.
Direct Marketing
As a leading company in the distribution of materials for electricity, lighting, plumbing, hardware, construction, appliances, decoration, air conditioning, and heating, SYR is able to offer you personalized information tailored to your needs (for example, using your transaction data). SYR may inform you about services, offers, and suggestions related to your purchase.
SYR uses personal data collected directly, publicly available personal data (e.g., information available online, through search results or social networks), or personal data received from third parties (e.g., Internet Service Providers) for direct marketing purposes and to attract new customers.
SYR also engages in direct marketing to organize internal events, trips, presentations, meetings with employees, customers, and business partners.
SYR carries out direct marketing through various means, including, but not limited to: mobile text messages, surveys, email, the Website, online advertisements, database marketing, Applications, and events.
SYR conducts direct marketing on the basis of its legitimate business interests.
SYR may also carry out direct marketing based on the express consent of the data subject. If you do not wish to receive personalized offers, you should withhold your consent for direct marketing when requested.
SYR is committed to ensuring that all information relating to direct marketing is provided in a clear and appropriate manner, using the recipient’s preferred communication channel, in order to minimize inconvenience.
Improvement of Product and Service Quality
SYR uses personal data collected through Forms, job applications, surveys, inquiries, comments, and feedback sent to SYR to improve its products and services; to conduct further surveys; to develop analytical, risk, and marketing models; and to prepare statistics.
SYR also uses transactional data to develop global models and conduct analysis.
The processing of personal data for statistical purposes is justified by SYR’s commitment to implementing strategic options that enhance its market competitiveness and enable it to offer you better products and services.
Personal data may also be used to evaluate, simplify, and improve SYR’s processes — for example, to optimize campaigns, procedures, and sales both online (through the Website and/or Applications) and offline.
Recruitment and Staff Selection
For recruitment purposes, SYR collects personal data such as, among others, name, email address, phone number, curriculum information, and social media profile URLs from candidates participating in open recruitment processes, international internships, or academic placements.
The personal data provided by candidates (through Forms, by registering and creating a personal account on the Website, or through the Applications) are used to process applications, contact candidates for activities related to human resources management, manage the recruitment process (e.g., by inviting candidates to interviews or assessments), and prepare employment contracts.
SYR undertakes to delete from its files the personal data of candidates who are not hired at the conclusion of the selection process, unless there is a legitimate reason to retain them.
Personnel Administration and Payroll Management
SYR uses personal data for the administration of its staff, particularly to:
Manage and keep records of employment contracts and payroll;
Pay salaries;
Keep records of attendance and employee training-related travel;
Communicate with health insurance companies;
Provide employees with insurance, corporate assets, and performance-related benefits.
Accounting
SYR uses personal data for accounting purposes and in particular to:
Maintain transaction records;
Issue invoices related to sales and services rendered;
Complete tax returns and related documentation in order to comply with tax obligations;
Produce statistics based on transaction records (for example, number of transactions completed and by area);
Comply with applicable legislation and regulatory requirements at national, European, and international levels.
Claims and Legal Disputes
We may use personal data as evidence and to establish, exercise, and defend the rights of SYR or its representatives (e.g., in disputes) before any jurisdiction in any country — for example, to defend SYR against acts of unfair competition or to claim payment of outstanding invoices.
Fraud or Crime Prevention
We may also use personal data to prevent, detect, and investigate crimes and cybersecurity risks, either when there is a legitimate interest or when required by a public authority.
Business and Corporate Governance
SYR transfers and/or shares the personal data collected with its business partners only when necessary and for the purpose of preparing periodic reports on results and other business aspects, business plans, and corporate strategies.
SYR processes the personal data of European Union citizens lawfully collected, except where there is a legal impediment (e.g., a confidentiality obligation or a prohibition under data protection legislation).
SYR is committed to applying appropriate measures to protect personal data in the context of intra-group communication, in accordance with the provisions of Regulation (EU) 679/2016.
2.2. PERSONAL DATA WE OBTAIN FROM YOUR USE OF THE WEBSITE AND/OR APPLICATIONS
2.2.1. Purposes of Collecting Personal Data
When you visit the Website and/or the Applications, SYR collects certain personal data about you for the following purposes:
To facilitate the use of the Website and/or the Applications.
By collecting certain personal data (e.g., IP address, connection information), SYR can tailor the Website and/or the Applications to better suit your needs.
Through the use of cookies, SYR automatically collects certain personal data such as, among others: device information (e.g., IP address, browser type), connection information (e.g., search queries), and geolocation information (e.g., via Wi-Fi access point). This data helps to improve usability and enhance your user experience.
Example: To simplify the login process, we store your username and password via a cookie so that you do not have to re-enter your login credentials each time you visit us. SYR uses various types of cookies — essential, functional, social media plug-in tracking, third-party advertising, and analytical cookies.
Please read more about cookies, the types we use, and why we use them in our Cookie Policy.
Monitoring user interests and preferences.
On the Website and/or the Applications, SYR may systematically and periodically track personal data, based on your consent or legitimate interest, through automated decision-making technologies and cookies. We do this to evaluate specific personal aspects related to individuals — in particular, to analyze their economic situation, personal preferences, interests, reliability, behavior, location, or timing (geolocation).
For more information, please refer to our Cookie Policy.
3. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
Where necessary, we may transmit or disclose the personal data we collect to any natural or legal person, subcontractors, or business partners who act as third parties in relation to SYR. SYR does not sell or transfer personal data to third parties for their own benefit.
Except in cases of legitimate interest of the third party, whenever it is necessary to transmit or disclose personal data to third parties, SYR will ensure that a data processing agreement is signed with such third party, in accordance with Regulation (EU) 679/2016, requiring the third party to comply with the principles and provisions of that Regulation and to implement appropriate security measures.
4. DATA RETENTION AND CRITERIA
SYR does not retain your personal data indefinitely. We use your personal data only as long as necessary to fulfill the purposes described above. Once such purposes no longer exist, we commit to deleting the personal data — except where retention is required by national, European, or international law.
The starting point for the retention period is the statutory retention period (often ten years, extending until the end of the contract or the termination of the commercial relationship). This period may be extended where necessary for the exercise of our rights.
Where legislation does not specify a retention period, the retention duration may be determined according to, among others, the following criteria: duration of the contract and legal obligations; business and organizational needs; long-term commercial relationships; direct marketing execution; or statistical purposes.
Certain aspects can only be properly evaluated over a longer period of time. For this reason, some types of personal data may require a longer retention horizon (e.g., data necessary for the development of marketing and risk models).
As indicated earlier, SYR is committed, whenever possible, to working with aggregated, anonymized, or pseudonymized data, and in all cases to remove any link to identifiable individuals as soon as possible.
5. YOUR RIGHTS AS A DATA SUBJECT AND HOW TO EXERCISE THEM
If you have any questions regarding the protection of your personal data or the exercise of your rights, you may contact Socías y Rosselló S.L. at any time by sending a written request via postal mail or through the online form available in all “Contact” sections of the Website and/or Applications.
Once your personal data are being processed, you are entitled, as a data subject, to exercise various rights as described below. Please provide as much detail as possible when exercising your rights. SYR can only respond properly to requests that are sufficiently specific.
To verify your identity and prevent unauthorized access, we may ask you to attach a valid identity document to your request.
Right of Access
You may access your personal data.
If you wish to access the personal data processed by SYR or learn more about:
The purposes of our processing;
The categories of personal data concerned;
The categories of recipients to whom personal data have been or will be disclosed;
The envisaged retention period or the criteria used to determine it;
The rights available to you as a data subject;
The rights you may exercise in relation to our processing;
The existence of automated decision-making systems, including profiling, and their anticipated consequences;
and any other available information about the processing of your personal data, please send an email to info@sociasyrossello.es
.
We will use the personal data you provide in this form solely to verify and process your request.
When you exercise your right of access, SYR will provide you with the most complete list or a copy of your personal data possible.
Right to Rectification, Erasure, and Restriction of Processing
If certain personal data held by SYR about you are not (or are no longer) accurate, or if you wish to add to the data you have provided, you may request rectification or completion at any time by sending an email to info@sociasyrossello.es
.
If you wish SYR to delete your personal data, we will process your request unless a legal or legitimate interest prevents such deletion. To request deletion of your personal data, please email info@sociasyrossello.es
.
You may also request to restrict the processing of your personal data at any time by emailing info@sociasyrossello.es
.
Right to Data Portability
If your personal data were collected electronically, you may request data portability and receive your personal data yourself, or have them transmitted to a third party, by sending an email to info@sociasyrossello.es
.
Right to Withdraw Consent
Please note that whenever you have given SYR your consent to process your personal data, you may withdraw such consent at any time by following the same procedure used to grant it.
If you wish to withdraw your consent, you can do so at any time by sending an email to info@sociasyrossello.es
.
Right to Object to Automated Decision-Making
If you disagree with the way SYR relies on legitimate interest to process certain personal data, you may object by sending an email to info@sociasyrossello.es
.
We are obliged to process such objections unless there are legitimate or legal grounds not to do so (for example, an objection may be rejected if the processing of personal data is carried out to combat fraud).
If you disagree with the use of automated decision-making systems for direct marketing purposes carried out by SYR, you may object at any time by sending an email to info@sociasyrossello.es
.
If you disagree with the way SYR processes your personal data, or if you have any questions regarding such processing, you may contact the Data Protection Authority of your country of residence at any time.
6. DATA PROTECTION OFFICER
The contact details of SYR’s Data Protection Officer are as follows:
Email address: dirinfo@sociasyrossello.es
Postal address: (For the attention of) Data Protection Officer of SYR, Gremio Herreros, 38, 07009, Palma de Mallorca.
7. MINORS
SYR does not process personal data of individuals under 16 years of age through its Website or Applications, nor does it make commercial offers to them or attempt to contact them, unless consent has been given by their legal representative.
8. SECURITY MEASURES FOR THE PROTECTION OF PERSONAL DATA
SYR has implemented appropriate security measures to preserve the integrity and security of personal data and to prevent the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, as well as unauthorized disclosure or access to such data, in accordance with the provisions of Regulation (EU) 679/2016.
9. SUBSEQUENT CHANGES TO THIS DATA PROTECTION POLICY
SYR is committed to continually improving its efforts in the field of personal data protection. This Data Protection Policy may be subject to modifications or updates as a result of future legislative developments at the national, European, or international level.
SYR will inform you of any substantial changes to this Data Protection Policy, whether by electronic or non-electronic means (for example, through the Website, during your first visit after an update, or whenever this Policy is revised).
