Contact
Español Euskara English

Privacy Policy

1. Data Controller

The data controller of the personal data collected through this website is:

  • Company: GESTIÓN Y DESARROLLO DE PROYECTOS MECÁNICOS, S.L. (PROMECAD)
  • VAT: B95293403
  • Address: Carretera Bilbao-Plencia Km.31, Department 108, 48950 Erandio, Bizkaia
  • Email:
  • Phone: +34 94 406 42 83

2. What Data We Collect

Through this website we may collect the following personal data:

  • Contact forms: name, email, phone number, company, message and any information you provide voluntarily.
  • Job applications: name, email, education, additional information and CV (if attached).
  • Navigation data: IP address, browser type, access date and time, pages visited (via cookies and analytics tools).

3. Purpose of Data Processing

We process your personal data for the following purposes:

  • Contact requests: to respond to your inquiries, provide information about our services and maintain commercial communication.
  • Job applications: to evaluate your profile and contact you regarding employment opportunities.
  • Website analytics: to improve user experience, analyze traffic and optimize content.
  • Legal compliance: to fulfill legal obligations applicable to our business activity.

4. Legal Basis for Processing

The legal basis for processing your personal data is:

  • Consent: when you submit a form or accept our cookie policy.
  • Legitimate interest: to maintain commercial communication with clients and prospects, and to improve our services.
  • Pre-contractual relationship: when you request information about our services with the intention of engaging them.
  • Legal obligation: to comply with applicable regulations (tax, commercial, etc.).

Legal Basis per Website Data Treatment (Art. 6 GDPR)

In compliance with the principle of transparency, the following table details the specific legal basis applicable to each data processing activity carried out through this website:

Legal basis per website data treatment
Treatment Legal Basis GDPR Article
Contact form Explicit consent (checkbox) Art. 6.1.a
Employment / CV form Explicit consent (checkbox) Art. 6.1.a
Analytics cookies (Google Analytics) Explicit consent (cookie banner) Art. 6.1.a
Server logs / navigation data Legitimate interest (system security) Art. 6.1.f
Legal obligations (invoicing, tax) Legal obligation Art. 6.1.c

5. Data Retention Period

We will retain your personal data for the following periods:

  • Contact inquiries: 12 months from the last interaction, unless you request earlier deletion.
  • Job applications: up to 24 months from submission, unless you request earlier deletion or we inform you of a different retention period.
  • Analytics and cookies: as specified in our Cookie Policy.
  • Legal obligations: as required by applicable law (e.g., tax records for 6 years).

6. Data Recipients

Your personal data may be shared with:

  • Service providers: email services, web hosting, analytics tools (Google Analytics), CRM systems.
  • Public authorities: when required by law or judicial order.

We do not sell, rent or transfer your personal data to third parties for commercial purposes.

Data Processors

In particular, the following third-party service providers act as data processors on behalf of PROMECAD:

  • IONOS Cloud S.L.U. (formerly Arsys) — web hosting and email services. Data center location: Spain/EU. No international data transfers are made for hosting purposes.
  • Google LLC (Google Analytics) — web analytics, as described in our Cookie Policy. International transfers to the USA under the EU-US Data Privacy Framework and EU Standard Contractual Clauses.
  • Google LLC (Google Maps) — mapping and location services. An embedded Google Maps widget is displayed on certain pages of this website. When the map is loaded, the user's IP address and browsing data are sent to Google servers. Google Maps is only loaded after the user has given cookie consent. Google participates in the EU-US Data Privacy Framework. For more information, see Google's Privacy Policy.

7. International Data Transfers

Some service providers (such as Google Analytics) may transfer data outside the European Economic Area (EEA). In such cases, we ensure that adequate safeguards are in place, such as EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

8. Your Rights

Under the GDPR (General Data Protection Regulation), you have the following rights:

  • Right of access: to know what data we hold about you.
  • Right to rectification: to correct inaccurate or incomplete data.
  • Right to erasure: to request deletion of your data when no longer necessary.
  • Right to restriction: to limit the processing of your data in certain circumstances.
  • Right to data portability: to receive your data in a structured, commonly used format.
  • Right to object: to object to processing based on legitimate interest or for direct marketing purposes.
  • Right to withdraw consent: you may withdraw consent at any time (without affecting the lawfulness of prior processing).

To exercise your rights, please contact us at or by postal mail to the address indicated in section 1.

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

9. Data Protection Officer

GESTIÓN Y DESARROLLO DE PROYECTOS MECÁNICOS, S.L. (PROMECAD) has not appointed a Data Protection Officer (DPO), as it is not required to do so under Article 37 of the GDPR. PROMECAD is not a public authority or body, does not carry out large-scale systematic monitoring of individuals, and does not process special categories of personal data on a large scale.

Nevertheless, for any enquiries regarding the protection of your personal data, you may contact us at .

10. Website Data Retention Periods

In addition to the general retention periods set out in section 5, the data collected through this website is subject to the following specific retention periods:

  • Contact form data: 12 months from the last interaction with the user. After this period, the data will be permanently deleted.
  • Employment/CV data (careers form): 24 months from the date of submission. After this period, the data and any attached documents will be permanently deleted.
  • Analytics cookies (Google Analytics): 14 months, which is the default retention period set by Google Analytics. For further information, please refer to our Cookie Policy.
  • Navigation data (server logs): 90 days. After this period, server logs are automatically deleted.

11. Supervisory Authority

If you consider that the processing of your personal data does not comply with applicable regulations, you have the right to lodge a complaint with the competent supervisory authority. In Spain, the supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), located at C/ Jorge Juan 6, 28001 Madrid, website: www.aepd.es.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse or alteration. These measures include SSL encryption, secure servers and access controls.

In the event of a security breach that may pose a high risk to the rights and freedoms of data subjects, PROMECAD commits to notifying affected individuals without undue delay, in accordance with Article 34 GDPR.

13. Minors

This website is not intended for individuals under 14 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

14. Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website.

15. Contact

For any questions or concerns about this Privacy Policy, please contact us:

  • Email:
  • Phone: +34 94 406 42 83
  • Address: Carretera Bilbao-Plencia Km.31, Department 108, 48950 Erandio, Bizkaia

Last updated: March 2026