3.1. Consent<\/span><\/p>\n<\/p>\n
This is the legal basis when YOU give us your explicit permission. Examples:<\/p>\n
<\/p>\n
\u2713 You fill in a contact form<\/p>\n
<\/p>\n
\u2713 You agree to receive marketing communications (you tick a checkbox)<\/p>\n
<\/p>\n
\u2713 You accept analytics or marketing cookies<\/p>\n
<\/p>\n
\u2713 You give consent to be contacted via WhatsApp Business<\/p>\n
<\/p>\n
Your consent is VOLUNTARY, SPECIFIC and INFORMED.<\/p>\n
<\/p>\n
3.2. Contract<\/span><\/p>\n<\/p>\n
This is the legal basis when processing is necessary to fulfil a contract with you. Examples:<\/p>\n
<\/p>\n
\u2713 Managing your order (name, delivery address, payment details)<\/p>\n
<\/p>\n
\u2713 Processing your invoice<\/p>\n
<\/p>\n
\u2713 Maintaining communication regarding your purchase or contracted service<\/p>\n
<\/p>\n
3.3. Legal obligation<\/span><\/p>\n<\/p>\n
This is the legal basis when the law requires us to retain data. Examples:<\/p>\n
<\/p>\n
\u2713 Retaining accounting data for 6 years (tax obligation)<\/p>\n
<\/p>\n
\u2713 \u00a0Invoice data (accounting obligation)<\/p>\n
<\/p>\n
\u2713 Compliance with other Spanish or European laws<\/p>\n
<\/p>\n
3.4. Legitimate interest<\/span><\/p>\n<\/p>\n
This is the legal basis when we process your data for our legitimate business interests, provided that this does not adversely and disproportionately affect your rights. Examples:<\/p>\n
<\/p>\n
\u2713<\/p>\n
<\/p>\n
Responding to a business enquiry you send us<\/p>\n
<\/p>\n
\u2713 Improving our services and website<\/p>\n
<\/p>\n
\u2713 Statistical analysis and business trends<\/p>\n
<\/p>\n
\u2713 Fraud prevention<\/p>\n
<\/p>\n
We respect your right to object: if you do not wish us to use your data on the basis of legitimate interest, you may object<\/p>\n
<\/p>\n
4. YOUR RIGHTS AS A DATA SUBJECT<\/span><\/p>\n<\/p>\n
The GDPR guarantees you a number of rights regarding your personal data. Below, we explain each of these rights and how to exercise them:<\/p>\n
<\/p>\n
4.1. Right of access<\/span><\/p>\n<\/p>\n
What is it? Y<\/strong>ou have the right to request access to ALL the personal data we hold about you.<\/p>\n<\/p>\n
How do you exercise it?<\/strong> Send an email to info@heco.es stating \u201cI request access to my data\u201d<\/p>\n<\/p>\n
Timeframe?<\/strong> We will respond within a maximum of 30 working days<\/p>\n<\/p>\n
4.2. Right to rectification<\/span><\/p>\n<\/p>\n
What is it? <\/strong>If your data is incorrect, inaccurate or out of date, you can request that we correct it.<\/p>\n<\/p>\n
Example: Your email address is misspelled in our records<\/p>\n
<\/p>\n
4.3. Right to erasure (right to be forgotten)<\/span><\/p>\n<\/p>\n
What is it? <\/strong>You can request that we delete your personal data.<\/p>\n<\/p>\n
Limitations: We cannot delete data if:<\/p>\n
<\/p>\n
\n- We have a legal obligation to retain it (6 years for tax data)<\/li>\n
- It is necessary to fulfil a contract with you<\/li>\n
- We need to demonstrate legal compliance<\/li>\n<\/ul>\n
<\/p>\n
4.4. Right to restriction of processing<\/span><\/p>\n<\/p>\n
What is it? <\/strong>You can request that we RESTRICT how we use your data.<\/p>\n<\/p>\n
Example: \u201cDo not use my data for marketing communications, but keep it\u201d<\/p>\n
<\/p>\n
4.5. Right to data portability<\/span><\/p>\n<\/p>\n
What is it? <\/strong>You have the right to receive your data in a structured format (Excel, PDF, etc.)<\/p>\n<\/p>\n
Purpose: To share your data with another company<\/p>\n
<\/p>\n
4.6. Right to object<\/span><\/p>\n<\/p>\n
What is it? <\/strong>You may object to the processing of your data for any purpose.<\/p>\n<\/p>\n
Examples:<\/p>\n
<\/p>\n
\u2713 \u201cI do not wish to receive marketing emails\u201d \u2192 We will unsubscribe you immediately<\/p>\n
<\/p>\n
\u2713 \u2018Do not use my data for behavioural analysis\u2019<\/p>\n
<\/p>\n
4.7. Right not to be subject to automated decision-making<\/span><\/p>\n<\/p>\n
What is it? <\/strong>We cannot make decisions about you based SOLELY on automated processing without human intervention.<\/p>\n<\/p>\n
How to exercise your rights:<\/span><\/p>\n<\/p>\n
You can exercise any of these rights by contacting us:<\/p>\n
<\/p>\n
\n- Email: info@heco.es<\/li>\n
- Subject: \u2018[Name of right] – Data protection request\u2019<\/li>\n
- Include: Your name, email address, and a clear description of your request<\/li>\n<\/ul>\n
<\/p>\n
We will respond within 30 working days. If we reject your request, we will explain the reasons.<\/p>\n
<\/p>\n
If you are not satisfied with our response, you may lodge a complaint with:<\/p>\n
<\/p>\n
Spanish Data Protection Agency (AEPD)<\/p>\n
<\/p>\n
C\/ Jorge Juan, 6 – 28001 Madrid<\/p>\n
<\/p>\n
www.aepd.es | Tel: (+34) 901 100 099<\/p>\n
<\/p>\n
5. SHARING DATA WITH THIRD PARTIES<\/span><\/span><\/p>\n<\/p>\n
We only share your data when it is absolutely necessary, and always in a secure manner:<\/p>\n
<\/p>\n
5.1. Technical service providers<\/span><\/p>\n<\/p>\n
We entrust your data to certain companies that provide services to us:<\/p>\n
<\/p>\n
Web hosting and storage: <\/strong>The company that hosts our website<\/p>\n<\/p>\n
Email and communications: <\/strong>Corporate email provider<\/p>\n<\/p>\n
Web analytics: <\/strong>Google Analytics (if you have given your consent)<\/p>\n<\/p>\n
CRM and data management: <\/strong>The system we use to manage customers<\/p>\n<\/p>\n
WhatsApp Business: <\/strong>Meta Platforms Inc. (the company behind WhatsApp)<\/p>\n<\/p>\n
ALL these providers are contractually bound under the GDPR to protect your data.<\/p>\n
<\/p>\n
5.2. Public authorities and legal compliance<\/span><\/p>\n<\/p>\n
We may share data if:<\/p>\n
<\/p>\n
\n- A court order requires it<\/li>\n
- The tax authorities request it (tax data)<\/li>\n
- There is a Spanish or European legal obligation<\/li>\n<\/ul>\n
<\/p>\n
5.3. Business partners<\/span><\/p>\n<\/p>\n
Only if you give your explicit consent. We never sell your information to third parties for marketing purposes without your permission.<\/p>\n
<\/p>\n
COMMITMENT: <\/strong>We NEVER sell your data to telemarketing companies or any third party without your explicit consent.<\/p>\n<\/p>\n
6. DATA SECURITY<\/span><\/p>\n<\/p>\n
We implement technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure:<\/p>\n
<\/p>\n
Security measures in place:<\/span><\/p>\n<\/p>\n
\n- SSL\/TLS encryption across the entire website (HTTPS)<\/li>\n
- Strong passwords and multi-factor authentication<\/li>\n
- Regular backups on secure servers<\/li>\n
- Acceso restringido: Solo personal autorizado<\/li>\n
- Restricted access: Authorised staff only<\/li>\n
- Regular training in data protection<\/li>\n
- Firewalls and intrusion detection systems<\/li>\n
- Periodic security audits<\/li>\n
- Encryption of sensitive data at\u00a0 rest<\/li>\n<\/ul>\n
<\/p>\n
Security breach notification:<\/p>\n
<\/p>\n
In the (highly unlikely) event that we experience a security breach, we undertake to notify you within 72 hours.<\/p>\n
<\/p>\n
7. COOKIES AND TRACKING TECHNOLOGIES<\/span><\/span><\/p>\n<\/p>\n
Our website uses cookies and similar technologies. Cookies are small files stored in your browser.<\/p>\n
<\/p>\n
Types of cookies we use:<\/span><\/p>\n<\/p>\n
Technical cookies (ESSENTIAL): <\/strong>These enable the basic functioning of the website. They do not require consent. Examples: authentication, security.<\/p>\n<\/p>\n
Analytics cookies: <\/strong>These collect information about how you use the website. Example: Google Analytics. Consent is REQUIRED.<\/p>\n<\/p>\n
Marketing cookies: <\/strong>These are used to personalise adverts. Consent is REQUIRED.<\/strong><\/p>\n<\/p>\n
How to manage cookies:<\/p>\n
<\/p>\n
When you visit our website, you will see a consent banner. You can accept all cookies, reject them, or choose which ones to accept.<\/p>\n
<\/p>\n
8. CONTACT VIA WHATSAPP BUSINESS<\/span><\/p>\n<\/p>\n
We use WhatsApp Business to communicate with you about products and services, and to respond to your enquiries.<\/p>\n
<\/p>\n
\u00bfWhen can we contact you via WhatsApp?<\/span><\/p>\n<\/p>\n
Only if:<\/p>\n
<\/p>\n
\n- You gave your explicit consent via our web form<\/li>\n
- We are already customers with an established business relationship<\/li>\n
- You contacted us first<\/li>\n<\/ul>\n
<\/p>\n
Your rights on WhatsApp:<\/span><\/p>\n<\/p>\n
You have the right to:<\/p>\n
<\/p>\n
\n- Stop receiving messages (reply \u2018STOP\u2019)<\/li>\n
- Request a copy of conversations<\/li>\n
- Request the deletion of your data<\/li>\n<\/ul>\n
<\/p>\n
NOTE: Meta Platforms Inc. also processes your data. Please see their policy at www.whatsapp.com\/legal\/privacy<\/a><\/strong><\/p>\n<\/p>\n
9. DATA RETENTION PERIOD<\/span><\/p>\n<\/p>\n
We do not retain your data for longer than necessary. Here are the retention periods by type:<\/p>\n
<\/p>\n
\n- Website browsing data: Up to 2 years from last contact<\/li>\n
- Active customer data: For the duration of the relationship + 3 years thereafter<\/li>\n
- Inactive customer data: 3 years from last contact<\/li>\n
- Accounting and tax data: 6 years (legal obligation)<\/li>\n
- WhatsApp data: Until deletion is requested (max. 3 years)<\/li>\n
- Cookies: Depending on type, generally 12 months.<\/li>\n<\/ul>\n
<\/p>\n
10. CHANGES TO THIS POLICY<\/span><\/p>\n<\/p>\n
This Policy is reviewed periodically to adapt to legal changes and new technologies.<\/p>\n
<\/p>\n
Significant changes will be communicated via:<\/p>\n
<\/p>\n
\n- Notice on the website homepage<\/li>\n
- Email<\/li>\n
- Notification on WhatsApp (where applicable)<\/li>\n<\/ul>\n
<\/p>\n
Last updated: March 2026<\/p>\n
<\/p>\n
11. HOW TO CONTACT US<\/span><\/p>\n<\/p>\n
If you have any questions or wish to exercise your rights, please contact us:<\/p>\n
<\/p>\n
\n- Email: info@heco.es<\/li>\n
- Telephone: +34 972 503 055<\/li>\n
- Address: Ctra. N-IIa, Km 4,3 – E-17600 FIGUERES (Girona)<\/li>\n
- Spanish Data Protection Agency (AEPD):<\/li>\n
- aepd.es | Tel: (+34) 901 100 099<\/li>\n<\/ul>\n
<\/p>\n
At HECO, we take the protection of your data very seriously. This policy reflects our commitment to transparency and compliance with the GDPR.<\/p>\n
<\/p>\n
Thank you for your trust.<\/p>\n
<\/p>\n
HECO \/ Industries Conesa S.L.<\/strong><\/p>\n[\/et_pb_blurb][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"
HECO PRIVACY AND DATA PROTECTION POLICY1. DATA CONTROLLERThis Privacy Policy describes how HECO \/ Industries Conesa S.L. (hereinafter \u201cHECO\u201d, \u201cwe\u201d or \u201cthe company\u201d) collects, processes, protects and uses your personal data when you interact with us.Details of the data controller: Trade name: HECO \/ Industries Conesa S.L.Main activity: Distribution, sales and commercial servicesAddress: Ctra. N-IIa, Km […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"page-template-blank.php","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-13931","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/heco.es\/en\/wp-json\/wp\/v2\/pages\/13931","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/heco.es\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/heco.es\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/heco.es\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/heco.es\/en\/wp-json\/wp\/v2\/comments?post=13931"}],"version-history":[{"count":18,"href":"https:\/\/heco.es\/en\/wp-json\/wp\/v2\/pages\/13931\/revisions"}],"predecessor-version":[{"id":29547,"href":"https:\/\/heco.es\/en\/wp-json\/wp\/v2\/pages\/13931\/revisions\/29547"}],"wp:attachment":[{"href":"https:\/\/heco.es\/en\/wp-json\/wp\/v2\/media?parent=13931"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}