Calle Espigol, 6, Vilafant, 17740, Girona, Spain
|

Privacy Policy

Home / Privacy Policy
Legal Notice

Privacy Policy

Introduction

IBAZUR IBERICA SL (VAT: B17638891) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you visit our website or use our services. We process your data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).

Data Controller

IBAZUR IBERICA SL, Calle Espigol, 6, 17740 Vilafant, Girona, Spain. Email: info@ibazuribericaplastics.com. Phone: +34 602 413 856. VAT: B17638891. Registered in the Mercantile Registry of Girona.

Information We Collect

We may collect the following categories of personal data:

  • Personal identification information — name, email address, phone number, company name, and job title provided through our contact form or direct communications.
  • Communication data — records of enquiries, quote requests, messages, and correspondence exchanged with our team.
  • Usage data — browsing behavior, pages visited, time spent on our website, referring URLs, and device information collected automatically.
  • Cookie data — information stored via cookies and similar tracking technologies. Please see our Cookie Policy for detailed information.

How We Use Your Data

We process your personal data for the following purposes:

  • To respond to enquiries, provide quotes, and communicate regarding our products and services.
  • To process and fulfill orders for recycled plastic materials, including logistics, invoicing, and shipping.
  • To communicate about our products, services, industry updates, and market intelligence relevant to your business.
  • To improve our website, optimize user experience, and analyze traffic patterns.
  • To comply with legal and regulatory obligations applicable to our operations in Spain and the EU.

Legal Basis for Processing

We process your personal data under the following legal bases as defined by the GDPR:

  • Contractual necessity — processing required to fulfill a contract or take steps at your request before entering into a contract (e.g., providing a quote, processing an order).
  • Legitimate interests — processing necessary for our legitimate business interests, such as improving our services, direct marketing to existing customers, and ensuring website security, provided your rights do not override these interests.
  • Consent — processing based on your freely given consent, particularly for non-essential cookies and direct marketing communications. You may withdraw consent at any time.
  • Legal obligations — processing required to comply with applicable laws, such as tax, accounting, and regulatory reporting requirements under Spanish and EU law.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Spanish and EU law. Generally:

  • Contact and enquiry data is retained for up to 2 years after our last interaction.
  • Contractual and transactional data is retained for the duration of the business relationship plus 5 years as required by Spanish commercial and tax regulations.
  • Usage and analytics data is retained for up to 26 months in accordance with AEPD guidelines.
  • Data processed based on your consent is retained until you withdraw consent.

Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data with trusted service providers who assist us in operating our business, including:

  • IT service providers and cloud hosting platforms.
  • Logistics and freight forwarding partners for order fulfillment.
  • Payment processing services for transactional purposes.
  • Professional advisors including legal and accounting firms.

All third-party service providers are bound by strict data processing agreements and confidentiality obligations in compliance with Article 28 of the GDPR.

International Transfers

As an export company serving clients worldwide, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) adopted by the European Commission.
  • Adequacy decisions by the European Commission for specific countries.
  • Binding corporate rules or other approved transfer mechanisms.

You may request a copy of the appropriate safeguards by contacting us at info@ibazuribericaplastics.com.

Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — you may request confirmation of whether we process your data and obtain a copy of the data held.
  • Right to rectification — you may request correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten") — you may request deletion of your data where it is no longer necessary or you withdraw consent.
  • Right to restrict processing — you may request limitation of processing under certain circumstances.
  • Right to data portability — you may request transfer of your data to another controller in a structured, commonly used format.
  • Right to object — you may object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent — you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint — you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These include encryption (SSL/TLS), secure server infrastructure, access controls, regular security assessments, and staff training on data protection principles. While we strive to protect your data, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

Contact Us

For any privacy-related enquiries, requests to exercise your GDPR rights, or questions regarding this policy, please contact us:

We will respond to your request within the legally required timeframe (generally 30 days, extendable by up to two months for complex requests).

Updates

This Privacy Policy was last updated June 2026. We reserve the right to update or modify this policy at any time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.