Privacy Policy
Processing of personal data through www.banatria.com
This is an English translation. The Spanish version prevails in case of any discrepancy.
1. Data controller
BANATRIA, S.L., Tax ID (N.I.F.) B93833887, with registered office at C/ Los Prados, 166, Edificio Impulsa, 33203 Gijón, Asturias, Spain, is the controller of the processing of personal data described in this Policy. Contact: info@banatria.com.
2. Scope of this policy
This Policy applies to personal data processed through the Website, in particular data provided through the contact form and technical processing strictly linked to its security. The website is currently informative: it has no user registration, makes no sales, uses no analytics or advertising tools and does not track browsing.
3. Data we process
Through the form we may process: name, email address, subject and content of the message. In addition, to prevent abuse of the form, the system processes the IP address and the email address in order to generate temporary hash identifiers. BANATRIA does not request special categories of personal data through the form and asks Users not to include them unless strictly necessary and an appropriate legal basis exists.
4. Purposes of processing
The data will be processed to: (i) receive, handle and answer enquiries, requests for information and communications; (ii) handle requests relating to a possible contractual or pre-contractual relationship; (iii) maintain the security and integrity of the form and prevent spam, fraud, automated submissions and other abuse; and (iv) establish, exercise or defend legal claims where necessary.
5. Legal bases
Where the enquiry seeks information, a quotation, collaboration or steps prior to a possible contractual relationship, the processing is based on taking pre-contractual steps at the request of the data subject, in accordance with Article 6(1)(b) GDPR. For general or corporate enquiries that do not relate to a pre-contractual relationship, the processing is based on BANATRIA's legitimate interest in responding to the communications it receives, in accordance with Article 6(1)(f) GDPR. The prevention of spam, fraud and abuse is likewise based on BANATRIA's legitimate interest in preserving the security and integrity of its systems and communication channels. Where information must be kept to deal with liabilities or claims, the processing is based on compliance with legal obligations and/or BANATRIA's legitimate interest in establishing, exercising or defending legal claims.
6. Mandatory data
The fields marked as required in the form must be completed for the enquiry to be processed. If they are not provided, BANATRIA may be unable to respond properly. Users guarantee that the data they provide is true, accurate and up to date and that, where they provide data about third parties, they have a sufficient legal basis to do so.
7. Retention periods
Enquiry data will be kept for as long as necessary to receive, handle and answer the enquiry and carry out any follow-up reasonably linked to its content. Once handling is complete, the data may be kept duly blocked or restricted for the applicable statutory limitation periods solely to deal with possible liabilities, after which it will be deleted. The hash identifiers used to prevent abuse of the form are kept for a maximum of one hour and are deleted automatically when that period ends.
8. Recipients and data processors
BANATRIA will not disclose personal data to third parties except where there is a legal obligation, where necessary to establish, exercise or defend legal claims, or where necessary to fulfil a request from the data subject. To operate the Website and manage communications, certain providers may access data on BANATRIA's behalf. In the current configuration, these providers include IONOS, as hosting and infrastructure provider, and Microsoft 365, as the service used to manage corporate email, including info@banatria.com. When acting on BANATRIA's behalf, they do so as data processors subject to the safeguards required by Article 28 GDPR.
9. International transfers
Some technology providers may provide services using infrastructure or sub-processors located outside the European Economic Area. Where processing involves an international data transfer, BANATRIA will require it to be based on a valid mechanism under Chapter V of the GDPR, such as an adequacy decision, standard contractual clauses approved by the European Commission or another legally recognised safeguard, as applicable.
10. Rights of data subjects
Data subjects may exercise, where applicable, their rights of access, rectification, erasure, objection, restriction of processing and portability, as well as any other rights recognised by applicable law. Requests may be sent to info@banatria.com or to BANATRIA's registered office, stating the right to be exercised and providing, where necessary, sufficient information to verify the identity of the requester. Where processing is based on legitimate interest, the data subject may object on grounds relating to their particular situation, under the terms of Article 21 GDPR.
11. Complaints to the supervisory authority
Anyone who considers that the processing of their data infringes applicable law may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), without prejudice to any other administrative or judicial remedy available to them.
12. Security and confidentiality
BANATRIA will apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk and to protect data against unauthorised destruction, loss, alteration, disclosure or access. Access to the data will be limited to the people and providers who need to process it for the purposes described and who are bound by the corresponding obligations.
13. Minors
The Website is not specifically aimed at minors and is not intended to knowingly collect their personal data. If BANATRIA becomes aware that it has received data from a minor without a sufficient legal basis, it will take reasonable steps to delete it.
14. Automated decision-making and profiling
BANATRIA does not, through the Website, take decisions based solely on automated processing that produce legal effects concerning the data subject or similarly significantly affect them, nor does it use form data to build commercial or behavioural profiles.
15. Third-party links
The Website may contain links to third-party sites. This Policy does not apply to processing carried out by those third parties, who are responsible for providing their own privacy information.
16. Updates to this policy
BANATRIA may update this Policy to adapt it to regulatory, technical or organisational changes or to changes in the processing carried out. The current version and the date of the last update will be permanently available on the Website.
17. Language
This Policy may be published in Spanish and English. In the event of any discrepancy between the versions, the Spanish version shall prevail, unless a mandatory rule provides otherwise.
Last updated: October 2026