{"id":2826,"date":"2025-08-17T14:39:05","date_gmt":"2025-08-17T12:39:05","guid":{"rendered":"https:\/\/hilex.eu\/privacy-policy\/"},"modified":"2026-06-26T11:16:53","modified_gmt":"2026-06-26T09:16:53","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/hilex.eu\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"2826\" class=\"elementor elementor-2826 elementor-3\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-379e998e e-con-full e-flex e-con e-parent\" data-id=\"379e998e\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-5be46617 e-flex e-con-boxed e-con e-child\" data-id=\"5be46617\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-11b3b32f elementor-widget elementor-widget-spacer\" data-id=\"11b3b32f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-338c88eb e-con-full e-flex e-con e-child\" data-id=\"338c88eb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-37179025 elementor-widget elementor-widget-image\" data-id=\"37179025\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"449\" src=\"https:\/\/hilex.eu\/wp-content\/uploads\/2026\/04\/x-hilex.svg\" class=\"attachment-large size-large wp-image-2791\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-72b90cda e-con-full e-flex e-con e-child\" data-id=\"72b90cda\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-458999d9 e-flex e-con-boxed e-con e-parent\" data-id=\"458999d9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-10453131 elementor-widget elementor-widget-text-editor\" data-id=\"10453131\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<ol><li style=\"font-weight: 400;\"><strong>  Data Controller<\/strong><\/li><\/ol><p style=\"font-weight: 400;\">The data controller is HILEX TRANSFORMACIONES MET\u00c1LICAS, S.L.U., CIF B53429106, with registered office at Calle Zamora 2 y 4, 03440 Ibi (Alicante).<br\/>Tel.: <a href=\"http:\/\/tel:+34966554191\">(+34) 966 55 41 91<\/a><br\/>Email: <a href=\"mailto:hilex@hilex.eu\">hilex@hilex.eu<\/a><\/p><p style=\"font-weight: 400;\">The entity does not have a Data Protection Officer (DPO) as it is not mandatory under Art. 37 of the GDPR. For any questions regarding data protection, you may write to us at the contact details provided. <\/p><p> <\/p><ol start=\"2\"><li style=\"font-weight: 400;\"><strong>  Privacy Principles<\/strong><\/li><\/ol><ul style=\"font-weight: 400;\"><li>We only request data when necessary to provide a service or comply with a legal obligation.<\/li><li>We do not share data with third parties unless there is a legal obligation or express consent.<\/li><li>We will not use the data for purposes incompatible with those reported.<\/li><li>We apply appropriate technical and organizational measures (Art. 24, 25, and 32 of the GDPR).<\/li><li>No automated decisions will be made nor will profiles be created with the data provided.<\/li><\/ul><p style=\"font-weight: 400;\">If you are under 14 years of age, you need the consent of your parents or guardians to provide us with personal data.<\/p><p> <\/p><ol start=\"3\"><li style=\"font-weight: 400;\"><strong>  Applicable Regulations<\/strong><\/li><\/ol><ul style=\"font-weight: 400;\"><li>Regulation (EU) 2016\/679 (GDPR).<\/li><li>Organic Law 3\/2018, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).<\/li><li>Law 34\/2002, on Information Society Services and Electronic Commerce (LSSI-CE).<\/li><\/ul><p> <\/p><ol start=\"4\"><li style=\"font-weight: 400;\"><strong>  Processing Activities<\/strong><\/li><\/ol><p> <\/p><p><strong>A) Employees<\/strong><\/p><p style=\"font-weight: 400;\">Legal basis: Art. 6.1.b) GDPR (performance of a contract) and 6.1.c) GDPR (legal labor, tax, and Social Security obligations).<\/p><p style=\"font-weight: 400;\">Purpose: comprehensive labor management (payroll, time control, occupational risk prevention, training, contributions, etc.).<\/p><p style=\"font-weight: 400;\">Recipients: TGSS (Social Security), AEAT (Tax Agency), mutual insurance companies, financial institutions, trade unions, occupational risk prevention services, and main contractors where applicable.<\/p><p style=\"font-weight: 400;\">Retention: for the duration of the relationship and applicable legal limitation periods.<\/p><p> <\/p><p><strong>B) Contacts (customers, suppliers, and prospects)<\/strong><\/p><p style=\"font-weight: 400;\">Legal basis: consent of the data subject or legitimate interest in maintaining the professional relationship (Art. 6.1.a and 6.1.f GDPR).<\/p><p style=\"font-weight: 400;\">Purpose: handling requests, sending information, and follow-up.<\/p><p style=\"font-weight: 400;\">Recipients: no transfers are planned.<\/p><p style=\"font-weight: 400;\">Retention: until consent is withdrawn or the relationship ends.<\/p><p> <\/p><p><strong>C) Exercise of rights<\/strong><\/p><p style=\"font-weight: 400;\">Legal basis: Art. 6.1.c) GDPR (legal obligation).<\/p><p style=\"font-weight: 400;\">Purpose: managing requests for access, rectification, erasure, objection, restriction, and portability.<\/p><p style=\"font-weight: 400;\">Recipients: AEPD (Spanish Data Protection Agency) in case of protection of rights.<\/p><p style=\"font-weight: 400;\">Retention: 5 years from the request.<\/p><p> <\/p><p><strong>D) Candidates (HR)<\/strong><\/p><p style=\"font-weight: 400;\">Legal basis: Art. 6.1.b) GDPR (pre-contractual measures).<\/p><p style=\"font-weight: 400;\">Purpose: management of CVs and selection processes.<\/p><p style=\"font-weight: 400;\">Recipients: no transfers are planned.<\/p><p style=\"font-weight: 400;\">Retention: during the process and up to a maximum of 1 year.<\/p><p> <\/p><p><strong>E) Suppliers<\/strong><\/p><p style=\"font-weight: 400;\">Legal basis: Art. 6.1.b) GDPR (performance of a contract) and 6.1.c) GDPR (tax obligations).<\/p><p style=\"font-weight: 400;\">Purpose: management of purchases, payments, and control of subcontractors.<\/p><p style=\"font-weight: 400;\">Recipients: AEAT, financial institutions.<\/p><p style=\"font-weight: 400;\">Retention: for the duration of the relationship and legal periods.<\/p><p> <\/p><p><strong>F) Customers<\/strong><\/p><p style=\"font-weight: 400;\">Legal basis: Art. 6.1.b) GDPR (performance of a contract), 6.1.c) GDPR (legal obligation) and, for commercial communications, 6.1.a) GDPR (consent).<\/p><p style=\"font-weight: 400;\">Purpose: design, manufacture, and supply of metal products; invoicing and after-sales service.<\/p><p style=\"font-weight: 400;\">Recipients: AEAT, financial institutions.<\/p><p style=\"font-weight: 400;\">Retention: duration of the relationship and tax limitation periods.<\/p><p> <\/p><p><strong>G) Video surveillance<\/strong><\/p><p style=\"font-weight: 400;\">Legal basis: Art. 6.1.f) GDPR (legitimate interest: security of persons, property, and facilities).<\/p><p style=\"font-weight: 400;\">Purpose: access control and security.<\/p><p style=\"font-weight: 400;\">Public information: areas marked with an information sign; expanded information available upon request.<\/p><p style=\"font-weight: 400;\">Retention: maximum 30 days, except for retention to prove facts (retention and making available to the competent authority).<\/p><p style=\"font-weight: 400;\">Recipients: Law Enforcement Agencies and, where appropriate, judicial bodies.<\/p><p> <\/p><p><strong>H) Security breach management<\/strong><\/p><p style=\"font-weight: 400;\">Legal basis: Art. 6.1.c) GDPR (legal obligation).<\/p><p style=\"font-weight: 400;\">Purpose: detection, analysis, and notification of breaches in accordance with Arts. 33 and 34 of the GDPR. <\/p><p style=\"font-weight: 400;\">Notification: to the AEPD within 72 hours of detection; communication to data subjects when appropriate (high risk).<\/p><p style=\"font-weight: 400;\">Recipients: AEPD and, where appropriate, Law Enforcement Agencies.<\/p><p> <\/p><ol start=\"5\"><li style=\"font-weight: 400;\"><strong>  Rights of data subjects<\/strong><\/li><\/ol><p style=\"font-weight: 400;\">You may exercise your rights of access, rectification, erasure, objection, restriction, and portability (Arts. 15 to 22 of the GDPR) by writing to HILEX TRANSFORMACIONES MET\u00c1LICAS, S.L.U., Calle Zamora 2 y 4, 03440 Ibi (Alicante), or by email to <a href=\"mailto:hilex@hilex.eu\">hilex@hilex.eu<\/a>, attaching a copy of your identity document.<\/p><p style=\"font-weight: 400;\">If you consider that your rights have not been addressed, you may file a complaint with the <a href=\"https:\/\/www.aepd.es\/\">Spanish Data Protection Agency<\/a>.<\/p><p> <\/p><ol start=\"6\"><li style=\"font-weight: 400;\"><strong>Security measures<\/strong><\/li><\/ol><p style=\"font-weight: 400;\">We apply appropriate technical and organizational measures based on the risk, including access controls, backup copies, encryption where appropriate, activity logs, staff training, and incident management procedures.<\/p><p> <\/p><ol start=\"7\"><li style=\"font-weight: 400;\"><strong>  Links to third-party sites<\/strong><\/li><\/ol><p style=\"font-weight: 400;\">This site may include links to external pages. We are not responsible for their content or their privacy policies. We recommend reviewing them before providing personal data.  <\/p><p> <\/p><ol start=\"8\"><li style=\"font-weight: 400;\"><strong>Third-party data<\/strong><\/li><\/ol><p style=\"font-weight: 400;\">If you provide us with data from third parties, you declare that you have previously informed them in accordance with Art. 14 of the GDPR and, where appropriate, obtained their consent.<\/p><p> <\/p><ol start=\"9\"><li style=\"font-weight: 400;\"><strong>  Changes to the privacy policy<\/strong><\/li><\/ol><p style=\"font-weight: 400;\">We may update this policy to adapt it to regulatory or processing changes. Please review this page periodically. <\/p><p style=\"font-weight: 400;\"> <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Data Controller The data controller is HILEX TRANSFORMACIONES MET\u00c1LICAS, S.L.U., CIF B53429106, with registered office at Calle Zamora 2 y 4, 03440 Ibi (Alicante).Tel.: (+34) 966 55 41 91Email: hilex@hilex.eu The entity does not have a Data Protection Officer (DPO) as it is not mandatory under Art. 37 of the GDPR. For any questions regarding data protection, you may write to us at the contact details provided. Privacy Principles We only request data when necessary to provide a service or comply with a legal obligation. We do not share data with third parties unless there is a legal obligation or express consent. We will not use the data for purposes incompatible with those reported. We apply appropriate technical and organizational measures (Art. 24, 25, and 32 of the GDPR). No automated decisions will be made nor will profiles be created with the data provided. If you are under 14 years of age, you need the consent of your parents or guardians to provide us with personal data. Applicable Regulations Regulation (EU) 2016\/679 (GDPR). Organic Law 3\/2018, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD). Law 34\/2002, on Information Society Services and Electronic Commerce (LSSI-CE). Processing Activities A) Employees Legal basis: Art. 6.1.b) GDPR (performance of a contract) and 6.1.c) GDPR (legal labor, tax, and Social Security obligations). Purpose: comprehensive labor management (payroll, time control, occupational risk prevention, training, contributions, etc.). Recipients: TGSS (Social Security), AEAT (Tax Agency), mutual insurance companies, financial institutions, trade unions, occupational risk prevention services, and main contractors where applicable. Retention: for the duration of the relationship and applicable legal limitation periods. B) Contacts (customers, suppliers, and prospects) Legal basis: consent of the data subject or legitimate interest in maintaining the professional relationship (Art. 6.1.a and 6.1.f GDPR). Purpose: handling requests, sending information, and follow-up. Recipients: no transfers are planned. Retention: until consent is withdrawn or the relationship ends. C) Exercise of rights Legal basis: Art. 6.1.c) GDPR (legal obligation). Purpose: managing requests for access, rectification, erasure, objection, restriction, and portability. Recipients: AEPD (Spanish Data Protection Agency) in case of protection of rights. Retention: 5 years from the request. D) Candidates (HR) Legal basis: Art. 6.1.b) GDPR (pre-contractual measures). Purpose: management of CVs and selection processes. Recipients: no transfers are planned. Retention: during the process and up to a maximum of 1 year. E) Suppliers Legal basis: Art. 6.1.b) GDPR (performance of a contract) and 6.1.c) GDPR (tax obligations). Purpose: management of purchases, payments, and control of subcontractors. Recipients: AEAT, financial institutions. Retention: for the duration of the relationship and legal periods. F) Customers Legal basis: Art. 6.1.b) GDPR (performance of a contract), 6.1.c) GDPR (legal obligation) and, for commercial communications, 6.1.a) GDPR (consent). Purpose: design, manufacture, and supply of metal products; invoicing and after-sales service. Recipients: AEAT, financial institutions. Retention: duration of the relationship and tax limitation periods. G) Video surveillance Legal basis: Art. 6.1.f) GDPR (legitimate interest: security of persons, property, and facilities). Purpose: access control and security. Public information: areas marked with an information sign; expanded information available upon request. Retention: maximum 30 days, except for retention to prove facts (retention and making available to the competent authority). Recipients: Law Enforcement Agencies and, where appropriate, judicial bodies. H) Security breach management Legal basis: Art. 6.1.c) GDPR (legal obligation). Purpose: detection, analysis, and notification of breaches in accordance with Arts. 33 and 34 of the GDPR. Notification: to the AEPD within 72 hours of detection; communication to data subjects when appropriate (high risk). Recipients: AEPD and, where appropriate, Law Enforcement Agencies. Rights of data subjects You may exercise your rights of access, rectification, erasure, objection, restriction, and portability (Arts. 15 to 22 of the GDPR) by writing to HILEX TRANSFORMACIONES MET\u00c1LICAS, S.L.U., Calle Zamora 2 y 4, 03440 Ibi (Alicante), or by email to hilex@hilex.eu, attaching a copy of your identity document. If you consider that your rights have not been addressed, you may file a complaint with the Spanish Data Protection Agency. Security measures We apply appropriate technical and organizational measures based on the risk, including access controls, backup copies, encryption where appropriate, activity logs, staff training, and incident management procedures. Links to third-party sites This site may include links to external pages. We are not responsible for their content or their privacy policies. We recommend reviewing them before providing personal data. Third-party data If you provide us with data from third parties, you declare that you have previously informed them in accordance with Art. 14 of the GDPR and, where appropriate, obtained their consent. Changes to the privacy policy We may update this policy to adapt it to regulatory or processing changes. Please review this page periodically.<\/p>\n","protected":false},"author":1,"featured_media":2790,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-2826","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Privacy Policy - Hilex<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hilex.eu\/en\/privacy-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy - Hilex\" \/>\n<meta property=\"og:description\" content=\"Data Controller The data controller is HILEX TRANSFORMACIONES MET\u00c1LICAS, S.L.U., CIF B53429106, with registered office at Calle Zamora 2 y 4, 03440 Ibi (Alicante).Tel.: (+34) 966 55 41 91Email: hilex@hilex.eu The entity does not have a Data Protection Officer (DPO) as it is not mandatory under Art. 37 of the GDPR. For any questions regarding data protection, you may write to us at the contact details provided. Privacy Principles We only request data when necessary to provide a service or comply with a legal obligation. We do not share data with third parties unless there is a legal obligation or express consent. We will not use the data for purposes incompatible with those reported. We apply appropriate technical and organizational measures (Art. 24, 25, and 32 of the GDPR). No automated decisions will be made nor will profiles be created with the data provided. If you are under 14 years of age, you need the consent of your parents or guardians to provide us with personal data. Applicable Regulations Regulation (EU) 2016\/679 (GDPR). Organic Law 3\/2018, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD). Law 34\/2002, on Information Society Services and Electronic Commerce (LSSI-CE). Processing Activities A) Employees Legal basis: Art. 6.1.b) GDPR (performance of a contract) and 6.1.c) GDPR (legal labor, tax, and Social Security obligations). Purpose: comprehensive labor management (payroll, time control, occupational risk prevention, training, contributions, etc.). Recipients: TGSS (Social Security), AEAT (Tax Agency), mutual insurance companies, financial institutions, trade unions, occupational risk prevention services, and main contractors where applicable. Retention: for the duration of the relationship and applicable legal limitation periods. B) Contacts (customers, suppliers, and prospects) Legal basis: consent of the data subject or legitimate interest in maintaining the professional relationship (Art. 6.1.a and 6.1.f GDPR). Purpose: handling requests, sending information, and follow-up. Recipients: no transfers are planned. Retention: until consent is withdrawn or the relationship ends. C) Exercise of rights Legal basis: Art. 6.1.c) GDPR (legal obligation). Purpose: managing requests for access, rectification, erasure, objection, restriction, and portability. Recipients: AEPD (Spanish Data Protection Agency) in case of protection of rights. Retention: 5 years from the request. D) Candidates (HR) Legal basis: Art. 6.1.b) GDPR (pre-contractual measures). Purpose: management of CVs and selection processes. Recipients: no transfers are planned. Retention: during the process and up to a maximum of 1 year. E) Suppliers Legal basis: Art. 6.1.b) GDPR (performance of a contract) and 6.1.c) GDPR (tax obligations). Purpose: management of purchases, payments, and control of subcontractors. Recipients: AEAT, financial institutions. Retention: for the duration of the relationship and legal periods. F) Customers Legal basis: Art. 6.1.b) GDPR (performance of a contract), 6.1.c) GDPR (legal obligation) and, for commercial communications, 6.1.a) GDPR (consent). Purpose: design, manufacture, and supply of metal products; invoicing and after-sales service. Recipients: AEAT, financial institutions. Retention: duration of the relationship and tax limitation periods. G) Video surveillance Legal basis: Art. 6.1.f) GDPR (legitimate interest: security of persons, property, and facilities). Purpose: access control and security. Public information: areas marked with an information sign; expanded information available upon request. Retention: maximum 30 days, except for retention to prove facts (retention and making available to the competent authority). Recipients: Law Enforcement Agencies and, where appropriate, judicial bodies. H) Security breach management Legal basis: Art. 6.1.c) GDPR (legal obligation). Purpose: detection, analysis, and notification of breaches in accordance with Arts. 33 and 34 of the GDPR. Notification: to the AEPD within 72 hours of detection; communication to data subjects when appropriate (high risk). Recipients: AEPD and, where appropriate, Law Enforcement Agencies. Rights of data subjects You may exercise your rights of access, rectification, erasure, objection, restriction, and portability (Arts. 15 to 22 of the GDPR) by writing to HILEX TRANSFORMACIONES MET\u00c1LICAS, S.L.U., Calle Zamora 2 y 4, 03440 Ibi (Alicante), or by email to hilex@hilex.eu, attaching a copy of your identity document. If you consider that your rights have not been addressed, you may file a complaint with the Spanish Data Protection Agency. Security measures We apply appropriate technical and organizational measures based on the risk, including access controls, backup copies, encryption where appropriate, activity logs, staff training, and incident management procedures. Links to third-party sites This site may include links to external pages. We are not responsible for their content or their privacy policies. We recommend reviewing them before providing personal data. Third-party data If you provide us with data from third parties, you declare that you have previously informed them in accordance with Art. 14 of the GDPR and, where appropriate, obtained their consent. Changes to the privacy policy We may update this policy to adapt it to regulatory or processing changes. Please review this page periodically.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hilex.eu\/en\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Hilex\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-26T09:16:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hilex.eu\/wp-content\/uploads\/2026\/04\/encabezado-contacto-hilex-2-scaled.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"584\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/privacy-policy\\\/\",\"url\":\"https:\\\/\\\/hilex.eu\\\/en\\\/privacy-policy\\\/\",\"name\":\"Privacy Policy - Hilex\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/privacy-policy\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/privacy-policy\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/hilex.eu\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/encabezado-contacto-hilex-2-scaled.webp\",\"datePublished\":\"2025-08-17T12:39:05+00:00\",\"dateModified\":\"2026-06-26T09:16:53+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/privacy-policy\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hilex.eu\\\/en\\\/privacy-policy\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/privacy-policy\\\/#primaryimage\",\"url\":\"https:\\\/\\\/hilex.eu\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/encabezado-contacto-hilex-2-scaled.webp\",\"contentUrl\":\"https:\\\/\\\/hilex.eu\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/encabezado-contacto-hilex-2-scaled.webp\",\"width\":2560,\"height\":584},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/privacy-policy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/hilex.eu\\\/en\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/hilex.eu\\\/en\\\/\",\"name\":\"Hilex\",\"description\":\"Tecnolog\u00edas del metal\",\"publisher\":{\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hilex.eu\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/#organization\",\"name\":\"Hilex\",\"url\":\"https:\\\/\\\/hilex.eu\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/hilex.eu\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/logo_texto.svg\",\"contentUrl\":\"https:\\\/\\\/hilex.eu\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/logo_texto.svg\",\"width\":282,\"height\":58,\"caption\":\"Hilex\"},\"image\":{\"@id\":\"https:\\\/\\\/hilex.eu\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy - Hilex","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hilex.eu\/en\/privacy-policy\/","og_locale":"en_US","og_type":"article","og_title":"Privacy Policy - Hilex","og_description":"Data Controller The data controller is HILEX TRANSFORMACIONES MET\u00c1LICAS, S.L.U., CIF B53429106, with registered office at Calle Zamora 2 y 4, 03440 Ibi (Alicante).Tel.: (+34) 966 55 41 91Email: hilex@hilex.eu The entity does not have a Data Protection Officer (DPO) as it is not mandatory under Art. 37 of the GDPR. For any questions regarding data protection, you may write to us at the contact details provided. Privacy Principles We only request data when necessary to provide a service or comply with a legal obligation. We do not share data with third parties unless there is a legal obligation or express consent. We will not use the data for purposes incompatible with those reported. We apply appropriate technical and organizational measures (Art. 24, 25, and 32 of the GDPR). No automated decisions will be made nor will profiles be created with the data provided. If you are under 14 years of age, you need the consent of your parents or guardians to provide us with personal data. Applicable Regulations Regulation (EU) 2016\/679 (GDPR). Organic Law 3\/2018, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD). Law 34\/2002, on Information Society Services and Electronic Commerce (LSSI-CE). Processing Activities A) Employees Legal basis: Art. 6.1.b) GDPR (performance of a contract) and 6.1.c) GDPR (legal labor, tax, and Social Security obligations). Purpose: comprehensive labor management (payroll, time control, occupational risk prevention, training, contributions, etc.). Recipients: TGSS (Social Security), AEAT (Tax Agency), mutual insurance companies, financial institutions, trade unions, occupational risk prevention services, and main contractors where applicable. Retention: for the duration of the relationship and applicable legal limitation periods. B) Contacts (customers, suppliers, and prospects) Legal basis: consent of the data subject or legitimate interest in maintaining the professional relationship (Art. 6.1.a and 6.1.f GDPR). Purpose: handling requests, sending information, and follow-up. Recipients: no transfers are planned. Retention: until consent is withdrawn or the relationship ends. C) Exercise of rights Legal basis: Art. 6.1.c) GDPR (legal obligation). Purpose: managing requests for access, rectification, erasure, objection, restriction, and portability. Recipients: AEPD (Spanish Data Protection Agency) in case of protection of rights. Retention: 5 years from the request. D) Candidates (HR) Legal basis: Art. 6.1.b) GDPR (pre-contractual measures). Purpose: management of CVs and selection processes. Recipients: no transfers are planned. Retention: during the process and up to a maximum of 1 year. E) Suppliers Legal basis: Art. 6.1.b) GDPR (performance of a contract) and 6.1.c) GDPR (tax obligations). Purpose: management of purchases, payments, and control of subcontractors. Recipients: AEAT, financial institutions. Retention: for the duration of the relationship and legal periods. F) Customers Legal basis: Art. 6.1.b) GDPR (performance of a contract), 6.1.c) GDPR (legal obligation) and, for commercial communications, 6.1.a) GDPR (consent). Purpose: design, manufacture, and supply of metal products; invoicing and after-sales service. Recipients: AEAT, financial institutions. Retention: duration of the relationship and tax limitation periods. G) Video surveillance Legal basis: Art. 6.1.f) GDPR (legitimate interest: security of persons, property, and facilities). Purpose: access control and security. Public information: areas marked with an information sign; expanded information available upon request. Retention: maximum 30 days, except for retention to prove facts (retention and making available to the competent authority). Recipients: Law Enforcement Agencies and, where appropriate, judicial bodies. H) Security breach management Legal basis: Art. 6.1.c) GDPR (legal obligation). Purpose: detection, analysis, and notification of breaches in accordance with Arts. 33 and 34 of the GDPR. Notification: to the AEPD within 72 hours of detection; communication to data subjects when appropriate (high risk). Recipients: AEPD and, where appropriate, Law Enforcement Agencies. Rights of data subjects You may exercise your rights of access, rectification, erasure, objection, restriction, and portability (Arts. 15 to 22 of the GDPR) by writing to HILEX TRANSFORMACIONES MET\u00c1LICAS, S.L.U., Calle Zamora 2 y 4, 03440 Ibi (Alicante), or by email to hilex@hilex.eu, attaching a copy of your identity document. If you consider that your rights have not been addressed, you may file a complaint with the Spanish Data Protection Agency. Security measures We apply appropriate technical and organizational measures based on the risk, including access controls, backup copies, encryption where appropriate, activity logs, staff training, and incident management procedures. Links to third-party sites This site may include links to external pages. We are not responsible for their content or their privacy policies. We recommend reviewing them before providing personal data. Third-party data If you provide us with data from third parties, you declare that you have previously informed them in accordance with Art. 14 of the GDPR and, where appropriate, obtained their consent. Changes to the privacy policy We may update this policy to adapt it to regulatory or processing changes. Please review this page periodically.","og_url":"https:\/\/hilex.eu\/en\/privacy-policy\/","og_site_name":"Hilex","article_modified_time":"2026-06-26T09:16:53+00:00","og_image":[{"width":2560,"height":584,"url":"https:\/\/hilex.eu\/wp-content\/uploads\/2026\/04\/encabezado-contacto-hilex-2-scaled.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hilex.eu\/en\/privacy-policy\/","url":"https:\/\/hilex.eu\/en\/privacy-policy\/","name":"Privacy Policy - Hilex","isPartOf":{"@id":"https:\/\/hilex.eu\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hilex.eu\/en\/privacy-policy\/#primaryimage"},"image":{"@id":"https:\/\/hilex.eu\/en\/privacy-policy\/#primaryimage"},"thumbnailUrl":"https:\/\/hilex.eu\/wp-content\/uploads\/2026\/04\/encabezado-contacto-hilex-2-scaled.webp","datePublished":"2025-08-17T12:39:05+00:00","dateModified":"2026-06-26T09:16:53+00:00","breadcrumb":{"@id":"https:\/\/hilex.eu\/en\/privacy-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hilex.eu\/en\/privacy-policy\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hilex.eu\/en\/privacy-policy\/#primaryimage","url":"https:\/\/hilex.eu\/wp-content\/uploads\/2026\/04\/encabezado-contacto-hilex-2-scaled.webp","contentUrl":"https:\/\/hilex.eu\/wp-content\/uploads\/2026\/04\/encabezado-contacto-hilex-2-scaled.webp","width":2560,"height":584},{"@type":"BreadcrumbList","@id":"https:\/\/hilex.eu\/en\/privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/hilex.eu\/en\/home\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/hilex.eu\/en\/#website","url":"https:\/\/hilex.eu\/en\/","name":"Hilex","description":"Tecnolog\u00edas del metal","publisher":{"@id":"https:\/\/hilex.eu\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hilex.eu\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/hilex.eu\/en\/#organization","name":"Hilex","url":"https:\/\/hilex.eu\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hilex.eu\/en\/#\/schema\/logo\/image\/","url":"https:\/\/hilex.eu\/wp-content\/uploads\/2025\/08\/logo_texto.svg","contentUrl":"https:\/\/hilex.eu\/wp-content\/uploads\/2025\/08\/logo_texto.svg","width":282,"height":58,"caption":"Hilex"},"image":{"@id":"https:\/\/hilex.eu\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/hilex.eu\/en\/wp-json\/wp\/v2\/pages\/2826","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hilex.eu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/hilex.eu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/hilex.eu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hilex.eu\/en\/wp-json\/wp\/v2\/comments?post=2826"}],"version-history":[{"count":1,"href":"https:\/\/hilex.eu\/en\/wp-json\/wp\/v2\/pages\/2826\/revisions"}],"predecessor-version":[{"id":2827,"href":"https:\/\/hilex.eu\/en\/wp-json\/wp\/v2\/pages\/2826\/revisions\/2827"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hilex.eu\/en\/wp-json\/wp\/v2\/media\/2790"}],"wp:attachment":[{"href":"https:\/\/hilex.eu\/en\/wp-json\/wp\/v2\/media?parent=2826"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}