Privacy Policy

Welcome to Irudek 2000 S.L. Your trust and privacy are our top priorities. This guide provides an overview of how we handle your personal data. For more details, scroll down to our detailed Privacy Notice.

Who handles your data?

Irudek 2000 S.L., part of the Bunzl Group, is the guardian of your personal information and ensures that it is processed with care and respect.

What data do we collect?

We collect a variety of data to provide and improve our services, including:

• Personal identification and contact details
• Account registration information
• Order and delivery information
• Payment details
• Usage data and feedback
• Technical browsing, device and security verification form interaction data

Why do we need your data?

We process your data to provide you with the products and services you like, improve our offering and comply with legal requirements. Our processing is based on:

• Consent (to send newsletters, etc.)
• Contractual necessity (to fulfil our agreements with you)
• Legal obligations (to comply with applicable laws)
• Legitimate interests (to improve our services)

Who do we share your data with?

We share your data with trusted partners such as financial institutions, IT and security service providers and, for legal reasons, always ensuring the protection of your data.

International data transfers:

Your data may be transferred internationally within the Bunzl Group or to trusted third parties, always with strict safeguards such as European Commission adequacy decisions, standard contractual clauses or other legal bases that ensure the protection of your data.

Need more information?

Our detailed list of data processors and business partners, together with their purposes, is available for your review. If you have any questions or need to exercise your rights, contact us using the information provided in the “Contact Us” section.

Keeping your data secure:

We employ robust security measures to protect your data against unauthorised access, loss or misuse. However, the security of your data also depends on the precautions you take.

Your rights:

You have rights regarding your personal data, including access, correction, deletion and the right to object to or restrict processing.

If you wish to exercise your rights as a data subject, please use the information provided in the Contact Us section of the Privacy Notice below.

Contact information:

IRUDEK 2000 S.L. (B20649505)
Erribera Industrigunea 8A
20150 Aduna (Guipuzcoa)
rgpd@irudek.com

Updates to this Notice:

We may update this notice to reflect changes in our practices. Continued use of our services means that you accept these changes.

IRUDEK 2000 S.L.

PRIVACY NOTICE

INTRODUCTION

Welcome to Irudek 2000 S.L. Your privacy is very important to us. We know that when you provide us with your personal information, you trust us to take good care of it. We promise to keep your information secure. This Privacy Notice is here to inform you how we collect, use and protect your personal information. We want to make sure you understand everything, so that you know exactly what happens to your data while you are with us and even afterwards. Here we will explain what we do with your information, who we may share it with and what choices you have regarding your own data.

WHO IS RESPONSIBLE FOR YOUR DATA?

Irudek 2000 S.L. is the company responsible for processing personal data as described in this Privacy Policy. Irudek 2000 S.L. is part of the Bunzl Group. Bunzl is an international leader in the distribution of non-food consumables. Bunzl is present on 4 continents and has representation in 32 countries with more than 250 distribution centres and more than 22,000 employees (for more information, please visit: www.bunzl.com/)

Please note that, in this Privacy Notice, we address our role as data controller. This means that we determine the purposes for which and the manner in which personal data is or will be processed.

It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we collect or process personal data about you, so that you know how and why we use such information.

If you have questions about how we process personal data or wish to exercise your rights as a data subject, please use the information provided in the Contact Us section below.

WHEN DOES THIS PRIVACY POLICY APPLY?

This Privacy Policy applies when you use the Irudek 2000 S.L. website and the services described in our General Terms and Conditions. If you apply through our website for a position at Irudek 2000 S.L., the privacy policy for applicants will apply.

Our website may contain links to other websites with different privacy policies. Please note that any personal information you provide on those websites will be subject to their own privacy policy.

WHY DO WE NEED YOUR DATA AND HOW DO WE USE IT?

To use or process your personal information, we need to have a good legal reason: this is what we call a “legitimate legal basis”. It is like having a set of rules that say it is okay for us to collect and use your data, but only in certain ways and for specific reasons. This is how it works.

• When you say it is okay (Consent): if you tell us that we can use your information for something, such as sending you newsletters, that is a green light for us.
• To fulfil our agreement with you (Contractual necessity): when you buy something from us or register for a service, we need to use your information to deliver what you have requested. This could be sending you your purchase or providing you with access to a service.
• Because the law requires it (Legal obligation): Sometimes, the law requires us to use your data in certain ways, such as keeping financial records or complying with legal requests.
• When we have a good reason (Legitimate interests): If we have a fair and necessary reason to use your data, such as improving our services or ensuring that our website is secure, we may do so. We balance our interests with your rights to ensure that your privacy is not unfairly affected.

For every piece of personal information we collect and use, we have a clear reason – purpose – for doing so. It is as if every time we ask for your data, we have to tell you exactly why we need it and what we are going to do with it. This ensures that we are always transparent with you and that we use your information responsibly.

But that is not all. In addition to telling you why we use your data (the purpose), we must also make sure that we have the legal right to do so (the legal basis). It is like having both the reason and the permission to use your data in certain ways.

In the following table, we break down exactly what data we may use, what we do with your data and why, together with the legal basis for each activity. This way, everything is clear and transparent, and you can feel confident knowing exactly how and why your information is being used.

HOW DO WE SHARE DATA WITH OTHERS?

We want you to know that your personal data is in good hands with us. There are times when we need to share your information with other trusted parties in order to provide our services or comply with our legal obligations. Don’t worry, we are very selective about who we share your data with and make sure that it is always protected.

Below is a quick overview of who may need access to your data and why:

• Financial and legal partners: This includes banks, insurance companies and our advisers on financial, tax, legal and accounting matters. They help us manage our business responsibly and securely.
• Training and development experts: Sometimes, we work with specialists to improve our team’s skills and services, which means sharing information to tailor training programmes.
• IT and security service providers: These are the technology experts who keep our systems running smoothly and securely. Sharing data with them means you get a better and safer experience.
• Corporate changes: If we are involved in a merger, acquisition or sale, data may be transferred as part of the business assets, but we will always keep you informed.
• Distribution partners: To ensure that the products you order reach you quickly and safely, we share the necessary details with our distribution partners. This collaboration helps us streamline the delivery process, ensuring that your products reach you without any problems.

And, of course, if required by law or public safety, we may need to share information with public authorities or governments. But even in that case, we will only share what is absolutely necessary.

Your trust is important to us, so we promise never to sell your personal data or use it for anything similar to cross-context behavioural advertising. Your privacy is our priority and we are here to keep your data secure while providing you with our best services.

INTERNATIONAL DATA TRANSFERS

Due to the multinational nature of our company, the data we process about you may be transferred to or accessed by BUNZL, our affiliates and trusted third parties in different countries around the world. Your personal data may be transferred to a country other than where you live if necessary for the purposes we have mentioned in this Privacy Notice. We take the protection of your rights during these transfers seriously. That is why we only send your personal data to places where:

• The European Commission has decided that there is an adequate level of data protection. You can consult the list of countries here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
• There are strong safeguards for the transfer of your personal data, such as:
  • Standard contractual clauses;
  • Codes of conduct;
  • Certification mechanisms;
• Or, if the transfer is permitted under applicable data protection laws.

We carry out these international transfers in order to continue providing you with the best possible services, regardless of where you or we are located in the world. You can find the countries to which we may transfer your data in Appendix 2.

WHEN WILL MY DATA BE DELETED?

We will store your personal data for as long as necessary for the purposes mentioned in this Privacy Notice, especially for the fulfilment of our contractual and legal obligations. We may also store your personal data for other purposes if the law allows us to store it for particular purposes, including for the defence against legal claims.

If you close your customer account, we will delete all data that we have stored about you. If it is not possible or necessary to completely delete your data for legal reasons, the relevant data will be blocked from further processing.

What does blocking mean?

If data is blocked, access rights restrictions and other technical and organisational measures are applied to ensure that only a few employees can access the relevant data. These employees may also use the blocked data only for the above purposes (for example, to submit it to the tax office in the event of a tax inspection).

Blocking will occur, for example, in the following cases:

• Your order and payment data and, perhaps, other details are generally subject to various legal retention obligations. The law requires us to retain this data for tax audits and financial audits for strictly specified periods of time. Only then can we permanently delete the data in question.
• Even if your data is not subject to any legal retention obligation, we may, in cases permitted by law, refrain from immediate deletion and instead initially block the data. This applies especially in cases where we may need the data in question for subsequent contractual processing or for legal prosecution or defence (for example, in the event of claims). The decisive criterion for the duration of the blocking is then the statutory limitation period. Once the relevant limitation periods have expired, the data in question will be permanently deleted.

HOW DO WE KEEP YOUR PERSONAL DATA SECURE?

Your privacy and the security of your personal data are of the utmost importance to us. We are committed to protecting the information you share with us. To this end, we have implemented a variety of security measures designed to prevent your personal data from being lost, misused, accessed without permission, altered or disclosed.

This is what we do to keep your data secure:

• Strong security practices: we use state-of-the-art security measures to ensure that your data is managed securely.
• Limited access: only staff, agents and contractors who genuinely need to know your information for business reasons can access it. They are all trained in data protection and understand the importance of keeping your information secure.
• Continuous monitoring: We continuously monitor and update our security practices to address new and changing threats.

However, we want to remind you that no system is 100% secure. While we do everything possible to protect your data, there is always a risk when it travels over the Internet. We encourage you to keep this in mind and take your own precautions to protect your information online. Unfortunately, we cannot be responsible for any data breach that occurs outside our control.

Remember that your security is a team effort. If you have any questions about how you can help keep your data secure or if you would like more information about our security measures, please do not hesitate to contact us. Your peace of mind is our priority.

YOUR RIGHTS

Under certain circumstances, by law you have the right to:

• Request access to your personal information (commonly known as a “data subject access request”). This allows you to receive a copy of the personal information we hold about you and check that we are processing it lawfully.
• Request correction of the personal information we hold about you. This allows you to correct any incomplete or inaccurate information we hold about you.
• Request deletion of your personal information. This allows you to ask us to delete or erase personal information where there is no good reason for us to continue processing it. You also have the right to ask us to delete or erase your personal information where you have exercised your right to object to processing (see below).
• Object to processing of your personal information where we rely on a legitimate interest (or that of a third party) and there is something about your particular situation that makes you want to object to processing on this ground. You also have the right to object where we process your personal information for direct marketing purposes.
• Request restriction of processing of your personal information. This allows you to ask us to suspend the processing of personal information about you, for example, if you want us to establish its accuracy or the reason for processing it.
• Request the transfer of your personal information to another party.
• Right to human intervention. If personal data is used to make automated decisions about you as a data subject (for example, profiling), you have the right to be informed of the logic used by the system to make those decisions and to be able to request human intervention to override such automated decisions.

If you submit a data subject request, we will respond within 30 days, unless the complexity or volume of requests requires an extension. In such cases, we may extend our response time by up to two additional months and will notify you of this extension and the reasons for it within the initial 30-day period.

If you wish to review, verify, correct or request deletion of your personal information, object to the processing of your personal data or request that we transfer a copy of your personal information to another party, please contact us.

Please note that some of these rights are subject to certain limitations or exceptions. All requests will be assessed on a case-by-case basis. You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your access request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

HOW TO CONTACT US?

If you have any questions or concerns about the processing of your data or the content of this Privacy Notice, please do not hesitate to contact rgpd@irudek.com

RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

If you have any complaints regarding the processing of your personal data, please do not hesitate to contact us at the address indicated in the previous section.

If you are not satisfied with our response to your complaint, or if you believe that our processing of your data is contrary to the requirements of applicable data protection legislation, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos): https://www.aepd.es/