Privacy policy

1. Data controller

• Controller: Talleres Esteban Garcia Maquinaria, S.L. (single-member company).
• Tax identification number: B84783711.
• Registered address: 44 Calle Doñana, La Fraila III Industrial Estate, 28970 Humanes de Madrid, Madrid, Spain.
• Email for privacy enquiries and the exercise of rights: comercial@tegamaq.es.
• Telephone: +34 91 765 05 03.

2. Data we may process

The website currently has no contact form, user registration or purchasing area. If someone contacts us voluntarily by email or telephone, we may process their identity and contact details, company, professional role and the technical or commercial information included in the enquiry.

Accessing the website may generate minimum technical data such as IP address, date and time, browser, device and security logs required to deliver the page, prevent abuse and maintain the infrastructure.

3. Purposes and lawful bases

• Answering enquiries, assessing requirements and preparing proposals or quotations: taking pre-contractual steps requested by the data subject.
• Managing commercial, technical and contractual relationships: performance of a contract and related obligations.
• Maintaining professional communications with customers, suppliers and partners: legitimate interest in managing the business relationship, without prejudice to the right to object.
• Maintaining website security, availability and integrity: legitimate interest in protecting systems and preventing fraudulent use.
• Meeting tax, accounting and commercial obligations or responding to authorities: compliance with a legal obligation.

4. Recipients and service providers

We do not sell or disclose personal data for advertising. Providers delivering services required by TEGAMAQ may access data, including web hosting, security and content-delivery providers, IT support and email services. Corporate email is currently provided through OVHcloud, and final website deployment is planned on Cloudflare infrastructure. These providers operate under their terms and, where applicable, as processors.

Data may also be disclosed to public authorities, courts, law-enforcement bodies or other organisations where legally required.

5. International transfers

Some technology providers may process information in countries outside the European Economic Area. Where applicable, safeguards recognised by data-protection law will be used, such as adequacy decisions, standard contractual clauses or other valid mechanisms.

6. Retention

Enquiries are retained for the time required to answer them and provide the reasonably requested follow-up. Data connected with a commercial or contractual relationship is retained while that relationship remains active and subsequently for the periods required to meet legal obligations or address potential liabilities. Technical logs are kept only for the period needed for service security and operation.

7. Your rights

You may request access, rectification, erasure, objection, restriction of processing and, where applicable, portability of your data. You may also withdraw consent without affecting the lawfulness of prior processing.

To exercise these rights, email comercial@tegamaq.es, state the right you wish to exercise and provide only the information needed to verify your identity where necessary. You may lodge a complaint with the Spanish Data Protection Agency at www.aepd.es if you believe processing does not comply with the law.

8. Security and automated decisions

We apply reasonable technical and organisational measures to protect information from unauthorised access, loss, alteration or disclosure. We do not profile website users or make automated decisions that produce legal effects concerning them.

9. Children

The website is intended for a professional and industrial audience and is not designed to collect children's data. If personal data relating to a child is received without authorisation, it will be removed as soon as reasonably possible.

10. Changes to this policy

This policy will be updated whenever the website's processing activities, providers or features change. In particular, it must be reviewed before forms, analytics, advertising, external video players or other technologies that process additional data are introduced.