Privacy policy GW Heating Systems SL.

GW Heating Systems SL. ("we"), based in Spain, is responsible for processing personal data as outlined in this Privacy Policy.

GW Heating Systems SL. considers the careful handling of personal data of the utmost importance. Personal data is processed and secured with care. In doing so, we comply with the requirements of the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect and use your data in accordance with the GDPR.

In this Privacy Policy, we explain which personal data we collect, how we use it, and for what purpose. We recommend that you read this Privacy Policy carefully. This Privacy Policy applies to our website, www.gwheatingsystems.com, related websites, and services.

Last updated: January 5, 2025


Use of personal data


When you use the websites and services provided by GW Heating Systems SL., you may share personal data with us. We collect and use personal data that you or your organization directly provide to us. We will not use personal data for purposes other than those described in this statement unless you have given prior consent.


Types of Data Collected


When you use our services, we may collect the following data:

    • First and last name
    • Address details
    • Phone number
    • Email address
    • IP address
    • Other personal data you actively provide, such as by creating a profile, corresponding, or contacting us by phone
    • Data about your activities on our website
    • Data on browsing behavior across different websites (e.g., as part of an advertising network)
    • Internet browser and device type
    • Bank account number


Purposes of Processing


We generally process your personal data for the following purposes:

  • Processing payments
  • Sending newsletters and/or promotional material
  • Contacting you by phone or email if necessary to provide our services
  • Informing you about changes to our products or services
  • Analyzing website behavior to improve the website and tailor offerings to your preferences
  • Complying with legal obligations, such as tax filing requirements

We process your data based on legitimate interests or your consent, which you can withdraw at any time.


Data Retention


We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Generally, we retain data for website visitors for 12 months.


Your Rights


You have the right to access the data we process about you. You can request a copy of this data and contact us to update or correct it if necessary. You can also object to data processing or request the deletion of your data at any time. We will respond promptly, in compliance with the GDPR. If you are dissatisfied with our response, you can file a complaint with the relevant supervisory authority.


Sharing with Third Parties


We do not share your data with others without your consent unless necessary for fulfilling agreements or complying with legal obligations.


Data Transfers


We may transfer your data outside the EEA as required. Appropriate safeguards will be implemented to protect your data. For transfers to the United States, we ensure compliance with the Privacy Shield.


Analytics


Data may be stored for statistical analysis, using tools like Phoenix Analytics and Google Analytics, to optimize our services. Where possible, this data will be pseudonymized.


Cookies


We aim to provide you with relevant and personalized information in a user-friendly way. To achieve this, we use various types of cookies on our websites. For example, we place cookies that are necessary for the site to function properly, such as enabling comments, spam filter operations, video playback, and caching to improve website speed. We also use analytical cookies that do not infringe on your privacy.

In general, cookies are stored for the duration of the browser session. Additionally, your IP address may be stored in the log files of our web server when you use our services. This is necessary for the proper management and security of our services. We do not use your IP address to track or record your online behavior. Typically, we cannot associate your IP address with your name, address, or other identifying information unless you provide us with such information and continue using the same IP address.

You can opt out of cookies by configuring your internet browser to no longer store cookies. Additionally, you can delete any previously stored information through your browser's settings.


Security


    We ensure that your personal data is protected against loss or unlawful processing. We have implemented the following technical and organizational measures, among others:
    • Logical access control, use of passwords, and possibly a second factor;
    • Data encryption;
    • Pseudonymization of data;
    • Use of Virtual Private Servers (VPN) accessible with an SSH key;
    • Transfers exclusively over SSL;
    • Purpose-bound access restrictions;
    • Monitoring of authorized permissions.


Websites and Third-Party Services


Our Services include activities related to providing software that allows our clients to build their own professional websites. Our clients determine what types of data they collect on or through their websites. We process such data solely on behalf of our clients. If you have any questions about the information our clients collect on or through their websites, please contact the organization that set up the website.

Our clients also decide which other services or plugins they use. This Privacy Policy does not apply to such other services, plugins, or third-party websites accessed via links. We cannot guarantee that these third parties will handle your personal data securely and reliably. We recommend that you read the privacy policies of these parties.