Privacy Policy
At ISINAC Acoustic World S.L.U. we understand that it is essential to maintain a transparent relationship with you; therefore, below we present our Privacy Policy, so that at all times you are duly informed about how we collect and securely process any data you provide us.
Your data will be processed in compliance with current legislation and, specifically, in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) relating to the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as Organic Law 3/2018 of December 5 on Personal Data Protection and Guarantee of Digital Rights.
A careful reading of our Privacy Policy will provide you with the necessary information to know what destination we will give to the data you provide us.
Who is responsible for the processing of your data?
If you, or an authorized person, have provided us with your data, we inform you that ISINAC Acoustic World S.L.U., with tax ID (CIF): ESB27853381, is responsible for the processing thereof. These data will be processed in accordance with the provisions of current regulations on personal data protection.
There may be other data controllers in the processing activities we carry out; in that case, we will always inform you who the controller of such data is, as well as their identification details.
The Website may include hyperlinks or links that allow access to third-party web pages other than http://www.isinac.com, and which therefore are not operated by ISINAC Acoustic World S.L.U. The owners of such websites will have their own data protection policies, being themselves, in each case, responsible for their own processing and privacy practices.
At ISINAC Acoustic World S.L.U. we are committed to complying with the obligation of secrecy of personal data and our duty to safeguard them. To this end, we adopt the necessary measures to prevent their alteration, loss, processing, or unauthorized access in accordance with the provisions of the Regulation.
Where do we inform?
From ISINAC Acoustic World S.L.U. we inform through the website http://www.isinac.com in the section corresponding to the privacy policy. More information in “Legal Notice”.
What personal data do we process?
The personal data we process are:
- Those that you decide to provide us voluntarily
- Data derived from the communications you maintain with us.
- Information corresponding to your own browsing in the case of Online Services (IP address or information derived from cookies or similar devices (you can view our Cookie Policy on the website).
- Information that is available in publicly accessible sources, to which we may legitimately have access.
- Data derived from the contractual or pre-contractual relationship you maintain with us, including your image, always informing you in this case of the possibility of capturing your image.
- Those that third parties provide to us, provided there is a legitimate basis for doing so or having obtained your consent for it.
- Third-party data that you provide to us, prior consent of the third party in question.
You can check more information in the activity register section of this privacy policy.
How do we process the data?
At ISINAC Acoustic World S.L.U. we always process your personal data in strict compliance with current legislation. In addition, we inform you that we have appropriate technical and organizational measures to guarantee an optimal level of security, thereby ensuring that only authorized persons will have access, that we will keep them intact, avoiding any intentional or accidental loss, and that we have reinforced data processing systems and services.
However, since ISINAC Acoustic World S.L.U. cannot guarantee the impregnability of the internet nor the complete absence of hackers or others who fraudulently access personal data, it commits to notifying you without undue delay when a personal data security breach occurs that is likely to entail a high risk to the rights and freedoms of natural persons. Following the provisions of Article 4 of the GDPR, a personal data security breach means any security breach that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.
Operations, management, and technical procedures that we carry out in an automated or non-automated manner and that enable the collection, storage, modification, transfer, and other actions on personal data are considered personal data processing.
What is the legal basis for the processing?
The basis for the legitimacy of the processing of Personal Data will be that resulting from the contractual or pre-contractual relationship, the employment relationship, or any other required for data processing, such as explicit consent.
How do we manage electronic communications?
In accordance with the provisions of Law 34/2002 of July 11, on Information Society Services and Electronic Commerce, and Directive 2002/58/EC, we inform you that you may receive communications and commercial information through this electronic communication system (emails, automated form response systems, and other communication systems) when you have given us your consent or when they are commercial communications concerning products or services similar to those previously provided by the person responsible for processing your data.
In the event that you do not wish to receive communications and information of this nature, you can notify us through this same channel by indicating in the subject "COMMERCIAL COMMUNICATIONS UNSUBSCRIBE" so that your personal data is removed from our database. Your request will be processed within 1 month of sending. In the event that we do not receive an express response from you, we will understand that you accept and authorize our entity to continue making the aforementioned communications
In the event of receiving such communications through these means, we inform you that the messages are addressed exclusively to their recipient and may contain privileged or confidential information. If you are not the intended recipient, we notify you that unauthorized use, disclosure, and/or copying is prohibited under current legislation.
How long do we keep your data?
Personal data relating to natural persons that we at ISINAC Acoustic World S.L.U. collect by any means will be kept as long as the interested party does not request its deletion. Likewise, they will be kept as long as the relationship that originated the data processing is maintained, respecting in any case the legal retention periods. Once this period has concluded, the personal data will be deleted from all systems of ISINAC Acoustic World S.L.U.
Will your data be communicated to third parties?
There will be no assignment, transmission, or transfer of personal data, except for those already informed, other than as a consequence of a legal obligation. If your data is requested by requirement of the Public Administration or Autonomous Institutions within the scope of the functions expressly attributed to them by law, it will be transmitted.
If there is an assignment, transmission, or transfer of personal data outside the previously foreseen cases, you will be informed in advance so that, if applicable, you can give us your consent.
However, in order to organize ourselves properly, have good operations and procedures that guarantee good management, it may be necessary for ISINAC Acoustic World S.L.U. to hire the services of advisors, professionals, or other service companies to process data under our instructions.
This processing on behalf of third parties is regulated in a contract that is in writing or in some other legally permitted manner that allows proof of its celebration and content, expressly specifying that the data processor will process the data in accordance with our instructions and will not apply or use them for a purpose other than that appearing in said contract, nor will they communicate them, not even for their conservation, to other persons.
What are your rights?
Data protection regulations grant you the following rights:
- Right of access: It is the User's right to obtain confirmation as to whether or not ISINAC Acoustic World S.L.U. is processing their personal data and, if so, to obtain information regarding their specific personal data and the processing that ISINAC Acoustic World S.L.U. has carried out or is carrying out, as well as, among others, available information on the origin of said data and the recipients of the communications made or planned thereof.
- Right of rectification: It is the User's right to have their personal data modified if it turns out to be inaccurate or, taking into account the purposes of the processing, incomplete.
- Right to erasure ("the right to be forgotten"): It is the User's right, provided that current legislation does not establish otherwise, to obtain the erasure of their personal data when these are no longer necessary for the purposes for which they were collected or processed; the User has withdrawn their consent to the processing and this lacks another legal basis; the User objects to the processing and there is no other legitimate ground to continue with it; the personal data have been unlawfully processed; the personal data must be erased in compliance with a legal obligation; or the personal data have been obtained as a result of a direct offer of information society services to a minor under 14 years of age. In addition to erasing the data, the Data Controller, taking into account available technology and the cost of its implementation, shall take reasonable steps to inform controllers who are processing the personal data of the data subject's request to erase any links to those personal data.
- Right to restriction of processing: It is the User's right to limit the processing of their personal data. The User has the right to obtain restriction of processing when they contest the accuracy of their personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but the User requires them for the establishment, exercise, or defense of legal claims; and when the User has objected to processing.
- Right to data portability: In the event that the processing is carried out by automated means, the User shall have the right to receive from the Data Controller their personal data in a structured, commonly used, and machine-readable format, and to transmit those data to another controller. Where technically feasible, the Data Controller shall transmit the data directly to that other controller.
- Right to object: It is the User's right not to have the processing of their personal data carried out or to cease the processing thereof by ISINAC Acoustic World S.L.U.
- Right not to be subject to a decision based solely on automated processing, including profiling: It is the User's right not to be subject to an individualized decision based solely on automated processing of their personal data, including profiling, existing unless current legislation establishes otherwise.
If you wish for more information regarding the processing of your data, to rectify inaccurate data, to object and/or limit any processing you consider unnecessary, or to request the cancellation of processing when the data is no longer necessary, you can write to ISINAC Acoustic World S.L.U. at Av. de Ramón Nieto, 125-bajo, 36205 Vigo or via email at info@isinac.com.
- Such communication must reflect the following information: User's name and surname, the request, address, and supporting data.
- The exercise of rights must be carried out by the user themselves. However, they may be executed by an authorized person as the legal representative of the authorized party. In such case, documentation proving this representation of the interested party must be provided.
Likewise, we would like to inform you that you can withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before its withdrawal, by sending your request to the same address indicated in the previous paragraph. In this case, you must attach a copy of your ID or document proving your identity to your request.
In the event that you consider that there is a problem or infringement of current regulations in the way your personal data is being processed, you shall have the right to effective judicial protection and to lodge a complaint with a supervisory authority, in particular, in the State where your habitual residence, place of work or place of the alleged infringement is located. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/) – C/ Jorge Juan, 6 28001-Madrid – FAX: 914483680- TELF: 901 100 099- E-mail: ciudadano@agpd.es
What is the purpose and legal basis for the processing of the data and how long will the data be kept?
We detail below the purposes of the data processing carried out by some, or all, of the Data Controllers listed above.
| PROCESSING ACTIVITY | PURPOSE OF PROCESSING | LEGAL BASIS | RETENTION PERIOD |
|---|---|---|---|
| Employment management | Personnel management for the formalization of an employment contract, file control, payroll management | Contractual relationship | 5 years from the termination of the contract |
| Tax and accounting management | Required treatment for compliance with tax and accounting obligations | Contractual relationshipLegal obligation for the controllerOverriding legitimate interests of the controller or third parties | 5 years from contract completionThe time required to respond to legal obligations |
| Contact management | Processing of data in order to maintain communications with interested parties | Contractual relationshipOverriding legitimate interests of the controller or third partiesExplicit consent of the data subject | 5 years from the end of the contractUntil cancellation and/or opposition by the holderUntil relevant loss of its use |
| Occupational risk prevention | Compliance with current legislation on occupational risk prevention and health surveillance | Contractual relationship Legal obligation for the controller | Until the termination of the contractual relationship The legally established period by specific regulations |
| Job applicant management | Personnel selection and job provision through curriculum management, personal interviews, and assessment tests | Vital interests of the data subject or other personsExplicit consent of the data subject | Once the period for which the appointment is requested has ended |
| Informative communication and notifications | Dissemination of activities and notifications of relevant information related to the entity's activity | Legitimate interests pursued by the controller or by a third partyExpress consent of the data subject | Until cancellation and/or opposition by the data subject |
| Customer management | Processing of data necessary for the maintenance of the commercial/contractual relationship with clients, invoicing, after-sales service, sending of promotions and advertising, and loyalty programs. | Contractual relationshipCommercial relationship | 5 years from contract completionThe legally established period by specific regulations |
| Labor control | Control of employee attendance at the workplace (vacations, absences, working hours record) | Contractual relationshipLegal obligation for the controllerOverriding legitimate interests of the controller or third parties | Until the end of the contractual relationship |
| Supplier management | Analysis, assessment, contracting, order management, and payment management to suppliers | Contractual relationship | 5 years from contract completionThe legally established period by specific regulations |
Chat assistant
If you write in the website's chat assistant, we save your question and the assistant's response to improve the service: this way we know what it did not know how to answer and we add the missing information. We do not save your IP address: it is only used to prevent abuse, for one minute and in the server's memory, never on disk. Nor do we link the conversation to any account. To link messages from the same conversation, when you send your first message, a random identifier ("isinac_chat_sesion") that does not identify you is saved in your browser's local storage.
Responses are generated by Google's artificial intelligence (Gemini API, paid service), which processes the conversation text on behalf of ISINAC Acoustic World S.L.U. as a data processor. In this paid service, Google does not use the conversations to improve its products. Google may process them outside the European Economic Area under the safeguards provided by the GDPR.
Legal basis: your consent, when writing in the chat after seeing the notice. Retention: as long as they serve to improve the service. Anything referring to products we stop manufacturing is removed from the conversations (an internal copy remains, without emails or phone numbers, in case it needs to be undone) and, after 90 days, email addresses and phone numbers are removed from the messages. We ask that you do not write unnecessary personal data in the chat.
You can exercise your rights as indicated in this policy, also to have us delete your conversation (please indicate the date and what you wrote). Section added on October 3, 2026.
Acceptance and changes to this privacy policy
It is necessary for the User to have read and agreed to the conditions on the protection of personal data contained in this Privacy Policy, as well as to accept the processing of their personal data so that the Data Controller can proceed with it in the manner, during the periods, and for the purposes indicated. The use of the Website will imply acceptance of its Privacy Policy.
ISINAC Acoustic World S.L.U. reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudential, or doctrinal change by the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. The User is recommended to check this page periodically to stay informed of the latest changes or updates.
This Privacy Policy was updated to adapt to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and to Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights.
This Privacy Policy document has been reviewed as of: 20/04/23