Privacy policy

 “Demaq Galicia” is fully committed to complying with Spanish and European regulations on the protection of personal data, and guarantees full compliance with the obligations established, as well as the implementation of the security measures provided in the General Data Protection Regulation (GDPR) (EU) 2016/679 of 27 April, and in the Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD, hereinafter referred to as LOPDGDD).

In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through contact forms or by sending emails, and that such data will be processed by “Demaq Galicia”, Data controller, whose details are as follows:

  • Corporate Name: Demaq Galicia, S.L.U.
  • Tax ID (CIF): B27323138
  • Registered Office: P.I. Sete Pontes, P30c – 27800, Vilalba, Lugo, España
  • Phone: +34 982 511 726
  • Email: demaq@demaq.com

COLLECTION AND PROCESSING OF PERSONAL DATA

Personal data refers to any information relating to an individual: name, email, address, phone number, tax ID (NIF/NIE), etc. Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet service provider.

“Demaq Galicia”, as the Data Controller, has the obligation to inform Users of its website about the collection of personal data that may take place, either through sending emails or by completing forms included on the website.

Only the data necessary to perform the contracted service or to adequately respond to the user’s information request will be collected. The data collected is identifying data and corresponds to a reasonable minimum required to carry out the activity. In particular, no specially protected data is collected at any time. Under no circumstances will the data be used for any purpose other than that for which it was collected.

Contact/Email Forms

Purpose: To respond to your request for information submitted through our contact form(s).

Legal basis: The legal basis legitimizing this processing is the User’s consent, which can be revoked at any time.

Data sharing: Personal data will be processed via servers managed by IMGLO, which will act as the Data Processor.

Support form

Purpose: To provide you with the requested technical assistance.

Legal basis: The legal basis legitimizing this processing is the User’s consent, which can be revoked at any time.

Data sharing: Personal data will be processed through the servers of this website, managed by IMGLO, which will act as the Data Processor.

MINORS

Only individuals over 14 years old may provide personal data on this website. As required by the LOPD and GDPR, in the case of minors under 14, parental or guardian consent is mandatory for us to process their personal data.

Furthermore, only individuals over 18 years old may contract our services. For minors under 18, parental or legal guardian consent is mandatory for us to provide the offered services, unless the minor is legally emancipated.

SECURITY MEASURES

Users of the “Demaq Galicia” website are informed that technical and organizational security measures have been adopted to prevent loss, misuse, alteration, unauthorized access, and theft of data, thereby ensuring the confidentiality, integrity, and quality of the information contained on the site, in accordance with current data protection regulations. The personal data collected in the forms are processed solely by the staff of “Demaq Galicia” or by designated Data Processors.

The “Demaq Galicia” website also features SSL encryption, allowing users to securely submit their personal data through the website’s contact or registration forms.

ACCURACY OF DATA

The User declares that all information provided by them is true and correct and agrees to keep it updated. The User will be responsible for the accuracy of their data and will be solely liable for any conflicts or disputes that may arise from providing false information. It is important that, in order for us to maintain up-to-date personal data, the User informs Demaq Galicia whenever any changes occur.

DATA SHARING

“Demaq Galicia” will not transfer or disclose your data to any third party, except in cases legally permitted or when strictly necessary to provide a service. Specifically, data may be shared with:

  • Technology or IT service providers
  • Payment service providers
  • Courier and parcel companies
  • Third parties or intermediaries acting as service providers on our behalf (management, consultancy, etc.)

Data transfers will be carried out respecting the strictest confidentiality, using necessary measures such as signing non-disclosure agreements or adhering to the privacy policies established on their respective websites. The User may refuse the transfer of their data to the Data Processors by submitting a written request through any of the previously mentioned channels.

Furthermore, in cases where it is necessary, Client data may be transferred to certain authorities in compliance with a legal obligation: Spanish Tax Agency, Labor Inspection, etc.

EXERCISE OF USER RIGHTS

The LOPD and the GDPR grant data subjects the possibility of exercising a series of rights related to the processing of their personal data. To do so, the user must contact us by email at demaq@demaq.com , or by written communication to the address shown in our Legal Notice, properly identifying themselves. This communication must include the following information: the user’s full name, the purpose of the request, address, and supporting identification data.

The exercise of rights must be carried out by the User themselves. However, these rights may also be exercised by an authorized person acting as the User’s legal representative, providing documentation that proves such representation.

The User may request the exercise of the following rights:

  • Right to request access to personal data, which is the right to obtain information on whether your personal data is being processed, the purpose of such processing if applicable, as well as any information available about the source of the data and any communications made or planned regarding it.
  • The right to request rectification, if personal data is incorrect or inaccurate, or the deletion of data that is deemed inadequate or excessive.
  • You have the right to request the limitation of your data processing, in which case only the data strictly necessary for the exercise or defense of claims will be retained by “Demaq Galicia.”
  • Right to object to processing: This refers to the data subject's right to prevent the processing of their personal data or to stop such processing in cases where consent is not required, when the data files are used for commercial prospecting, or when the purpose is to make decisions concerning the data subject solely based on automated processing of their data, unless processing must continue for legitimate reasons or for the exercise or defense of possible claims.
  • Right to data portability : If you wish for your data to be processed by another company, “Demaq Galicia” will provide you with your data in an exportable format.

In the event that consent has been given for a specific purpose, the User has the right to withdraw consent at any time, without affecting the lawfulness of processing based on the consent given prior to its withdrawal, The user has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal

We are committed to exercising all these rights within the maximum legal period (1 month).

If a User believes there is an issue with the way “Demaq Galicia” is handling their data, they may submit their complaints to the Data Protection Officer or to the relevant data protection authority, with the Spanish Data Protection Agency being the competent authority in the case of Spain.

DATA RETENTION

The personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the information request, or until the consent given is revoked.

The personal data of Clients will be processed until the contractual relationship ends. The retention period of personal data will be the minimum necessary, and may be maintained for up to:

  • 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registrations, deregistrations, contributions, salary payments…); Arts. 66 et seq. General Tax Law (accounting books…).
  • 5 years: Art. 1964 Civil Code (personal actions without a special limitation period).
  • 6 years: Art. 30 Commercial Code (accounting books, invoices…).
  • 10 years: Art. 25 Law on the Prevention of Money Laundering and Terrorist Financing.
  • No time limit: aggregated and anonymized data.

In the case of processing candidate data (CVs), Demaq Galicia may store your curriculum vitae for a maximum of two years to include it in future recruitment processes, unless the candidate indicates otherwise.

SOCIAL MEDIA

“Demaq Galicia” has profiles on some of the main social media platforms (LinkedIn). The purpose of data processing by “Demaq Galicia” is to inform its followers about its activities, using the tools provided by the respective social media platform, and to offer a personalized user support service. Users should be aware that the use of these social media platforms is subject to their respective terms of use and privacy policies. “Demaq Galicia” recommends that users review these terms and privacy policies before using the links or applications provided.

Under no circumstances will “Demaq Galicia” extract data from social media unless the user has explicitly and specifically given consent for this purpose. In addition, “Demaq Galicia” is not responsible for the privacy practices of these social media platforms or their applications, particularly regarding confidentiality, personal data processing, and content.

PERSONNEL SELECTION

By submitting electronic communications to Demaq Galicia with the purpose of participating in the personnel selection process, the applicant authorizes us to review the documents provided (e.g., CV), all content directly accessible through Internet search engines (e.g., Google), profiles maintained on professional social networks (e.g., LinkedIn), data obtained during assessment tests, and information disclosed during the job interview, for the purpose of evaluating their application and, if applicable, offering a position.

CONFIDENTIALITY

The information provided by the User shall, in all cases, be considered confidential and may not be used for purposes other than those described herein. “Demaq Galicia” undertakes not to disclose or reveal any information regarding the User’s intentions, the reasons for the requested advice, or the duration of its relationship with the User.

VALIDITY

This Privacy and Data Protection Policy was drafted on 06 April 2026. It may be subject to change in accordance with updates in legislation and case law, and it is the responsibility of the data subject to read the updated version of the document in order to be aware of their rights and obligations at any given time.