{"version":"1.0","provider_name":"Hilex","provider_url":"https:\/\/hilex.eu\/en\/","title":"Privacy Policy - Hilex","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"rOhb07PW8O\"><a href=\"https:\/\/hilex.eu\/en\/privacy-policy\/\">Privacy Policy<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/hilex.eu\/en\/privacy-policy\/embed\/#?secret=rOhb07PW8O\" width=\"600\" height=\"338\" title=\"&#8220;Privacy Policy&#8221; &#8212; Hilex\" data-secret=\"rOhb07PW8O\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/hilex.eu\/wp-includes\/js\/wp-embed.min.js\n<\/script>\n","thumbnail_url":"https:\/\/hilex.eu\/wp-content\/uploads\/2026\/04\/encabezado-contacto-hilex-2-scaled.webp","thumbnail_width":2560,"thumbnail_height":584,"description":"Data Controller The data controller is HILEX TRANSFORMACIONES MET\u00c1LICAS, S.L.U., CIF B53429106, with registered office at Calle Zamora 2 y 4, 03440 Ibi (Alicante).Tel.: (+34) 966 55 41 91Email: hilex@hilex.eu The entity does not have a Data Protection Officer (DPO) as it is not mandatory pursuant to Art. 37 of the GDPR. For any matter relating to data protection, you may write to us at the contact details provided. \u00a0 Privacy principles We only request data when necessary to provide a service or comply with a legal obligation. We do not share data with third parties unless there is a legal obligation or express consent. We will not use the data for purposes incompatible with those reported. We apply appropriate technical and organizational measures (Art. 24, 25 and 32 of the GDPR). No automated decisions will be made nor will profiles be created with the data provided. If you are under 14 years of age, you need the consent of your parents or guardians to provide us with personal data. \u00a0 Applicable regulations Regulation (EU) 2016\/679 (GDPR). Organic Law 3\/2018, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD). Law 34\/2002, on Information Society Services and Electronic Commerce (LSSI-CE). \u00a0 Processing activities \u00a0 A) Employees Legal basis: Art. 6.1.b) GDPR (performance of a contract) and 6.1.c) GDPR (legal labor, tax and Social Security obligations). Purpose: comprehensive labor management (payroll, time control, occupational risk prevention, training, contributions, etc.). Recipients: TGSS, AEAT, mutual insurance companies, financial entities, trade union organizations, occupational risk prevention services, main contractors where appropriate. Retention: during the relationship and applicable legal limitation periods. \u00a0 B) Contacts (customers, suppliers and leads) Legal basis: consent of the data subject or legitimate interest in maintaining the professional relationship (Art. 6.1.a and 6.1.f GDPR). Purpose: handling requests, sending information and follow-up. Recipients: no transfers are foreseen. Retention: until withdrawal of consent or end of the relationship. \u00a0 C) Exercise of rights Legal basis: Art. 6.1.c) GDPR (legal obligation). Purpose: to manage requests for access, rectification, erasure, objection, restriction and portability. Recipients: AEPD in case of protection of rights. Retention: 5 years from the request. \u00a0 D) Candidates (HR) Legal basis: Art. 6.1.b) GDPR (pre-contractual measures). Purpose: management of CVs and selection processes. Recipients: no transfers are foreseen. Retention: during the process and up to a maximum of 1 year. \u00a0 E) Suppliers Legal basis: Art. 6.1.b) GDPR (performance of a contract) and 6.1.c) GDPR (tax obligations). Purpose: management of purchases, payments and control of subcontractors. Recipients: AEAT, financial entities. Retention: during the relationship and legal periods. \u00a0 F) Customers Legal basis: Art. 6.1.b) GDPR (performance of a contract), 6.1.c) GDPR (legal obligation) and, for commercial communications, 6.1.a) GDPR (consent). Purpose: design, manufacture and supply of metal products; invoicing and after-sales service. Recipients: AEAT, financial entities. Retention: duration of the relationship and tax limitation periods. \u00a0 G) Video surveillance Legal basis: Art. 6.1.f) GDPR (legitimate interest: security of persons, property and facilities). Purpose: access control and security. Information to the public: areas marked by informative signs; expanded information available upon request. Retention: maximum 30 days, except for retention to prove facts (retention and making available to the competent authority). Recipients: Law Enforcement Agencies and, where appropriate, judicial bodies. \u00a0 H) Security breach management Legal basis: Art. 6.1.c) GDPR (legal obligation). Purpose: detection, analysis and notification of breaches pursuant to Arts. 33 and 34 of the GDPR. Notification: to the AEPD within 72 hours of detection; communication to the data subjects when appropriate (high risk). Recipients: AEPD and, where appropriate, Law Enforcement Agencies. \u00a0 Rights of the data subjects You may exercise the rights of access, rectification, erasure, objection, restriction and portability (Arts. 15 to 22 of the GDPR) by writing to HILEX TRANSFORMACIONES MET\u00c1LICAS, S.L.U., Calle Zamora 2 y 4, 03440 Ibi (Alicante), or by email to hilex@hilex.eu, attaching a copy of your identity document. If you consider that your rights have not been addressed, you may file a claim with the Spanish Data Protection Agency. \u00a0 Security measures We apply appropriate technical and organizational measures based on the risk, including access controls, backup copies, encryption where appropriate, record of activities, personnel training and incident management procedures. \u00a0 Links to third-party sites This site may include links to external pages. We are not responsible for their content or their privacy policies. We recommend that you review them before providing personal data. \u00a0 Third-party data If you provide us with data of third parties, you declare that you have previously informed them pursuant to Art. 14 of the GDPR and, where appropriate, have obtained their consent. \u00a0 Changes to the privacy policy We may update this policy to adapt it to regulatory or processing changes. Please review this page periodically. \u00a0"}