General privacy policy
1. Introduction
The right to privacy and, specifically, the right to personal data protection is one of the values of MANUFACTURAS GRE S.A (hereinafter, GRE), and FLUIDRA, S.A., matrix company of the Fluidra Group (the companies forming part of the Fluidra Group can be viewed at www.fluidra.com
The aim of this policy is to explain how GRE shall process any personal data it collects from the various forms that may be posted on the pages of GRE’s Website: grepool.com and blog.grepool.com. Your personal data shall be processed in the strictest confidence and solely for the purposes to which you have consented, as explained below in this General Privacy Policy and in each of the Privacy Policies on each of the forms.
2. Commitment to privacy
GRE is fully committed to compliance with the EU's General Data Protection Regulation and the laws on personal data protection that may be in force at any given time, as this is a top priority for GRE and Fluidra Group.
Therefore, GRE and Fluidra Group has taken the decision to implement the following principles, whereby privacy forms the basis of all data processing.
- Transparency in data processing is one of our priorities, so whenever we collect personal data about you we shall duly inform you of the purpose for which they shall be processed in the relevant privacy policy.
- We shall only process the data that are strictly necessary for the purposes about which you shall have been informed.
- We shall never oblige you to provide personal data, unless absolutely necessary to render you a service that you may have requested.
- Whenever possible, we shall make the most straightforward means available to you for you to control your personal data.
- Your data will not be given, sold, rented or otherwise made available to any third party, except to those service providers of Gre, who perform certain activities for Gre, but who will not process the data for their own purposes. Some of these providers may be located outside the European Union, as indicated in the "International Transfers" section.
PURPOSES OF PROCESSING, GROUNDS FOR LEGITIMISATION AND STORAGE PERIODS
Gre collects your personal data in order to process your requests and offer you the services and products you may be interested in. Depending on your interaction on the site, your personal data will be processed for the following purposes and in accordance with the following grounds of legitimacy:
| Purpose | Basis of legitimacy | Conservation period |
|
To be able to respond to your queries, comments, questions or requests made through the website, including the channels provided for this purpose, such as the chat, the contact form or the comments form, so that we can contact you to resolve them. |
The basis of legitimacy is Gre's legitimate interest in responding to your questions or requests. The benefit for Gre is to know precisely the needs of stakeholders and thus improve the quality of the services provided. The benefit for stakeholders is to be able to receive clear and concise information about their queries or requests. Please note that in order to assess the legitimate interest, a legitimate interest weighting has been carried out in which we have analysed our own benefits as a data controller, as well as the benefits of third parties, and concluded that our legitimate interest in the processing outweighs the interests, rights and freedoms of users. You can request more information about the weighting of legitimate interest by contacting our Data Protection Officer (DPO) at the address indicated in the final section of this section. We would also like to take this opportunity to remind you that you have the right to object to processing based on legitimate interest. |
Any data you provide will be processed for as long as it is necessary to deal with your request or enquiry. Please note that comments will be removed from blog posts on an annual basis. |
|
Sending information about products and services marketed and offered by the Fluidra Group, in relation to the Jandy, Astralpool, Polaris, Cepex, Zodiac and Gre brands. |
The basis of legitimacy is the provision of your consent by means of the contact form or the specific form on the website. In addition, we inform you that you may revoke your consent at any time, and in each communication. |
All data you provide will be processed until you unsubscribe from the newsletter, or until Gre can consider that you are no longer interested in receiving communications from the newsletter. |
| To process your after-sales request, thus managing the repair or replacement of the corresponding product and, if applicable, to apply the product guarantee. | The basis of standing is the contractual relationship between the parties. | Any data you provide will be processed for as long as it is necessary to deal with your request. |
| To conduct satisfaction surveys in relation to the services provided by Gre. |
The basis of legitimacy is Gre's legitimate interest in obtaining feedback on the services provided. The benefit for Gre is to know the perception of the level of quality of the services provided to its customers. The benefit for the stakeholders is to be able to receive, in the future, an improvement in the services provided by Gre thanks to the improvements introduced by Gre on the basis of these opinions. Please note that in order to assess the legitimate interest, a legitimate interest weighting has been carried out in which we have analysed our own benefits as a data controller, as well as the benefits of third parties, and concluded that our legitimate interest in the processing outweighs the interests, rights and freedoms of users. You can request more information about the weighting of legitimate interest by contacting our Data Protection Officer (DPO) at the address indicated in the final section of this section. We would also like to take this opportunity to remind you that you have the right to object to processing based on legitimate interest. |
Any data you provide will be processed for as long as it is necessary to manage the responses to the satisfaction survey. |
|
To improve our websites, services, products, and to provide better service and content. |
The basis for the legitimacy of strictly necessary cookies is Gre's legitimate interest in being able to offer you a better browsing experience on our website. The benefit for Gre is to provide a good quality website. The benefit to stakeholders is to be able to receive a quality experience by browsing the website. Please note that in order to assess the legitimate interest, a legitimate interest weighting has been carried out in which we have analysed our own benefits as a data controller, as well as the benefits of third parties, and concluded that our legitimate interest in the processing outweighs the interests, rights and freedoms of users. You can request more information about the weighting of legitimate interest by contacting our Data Protection Officer (DPO) at the address indicated in the final section of this section. We would also like to take this opportunity to remind you that you have the right to object to processing based on legitimate interest. Likewise, the basis of legitimacy of analytical and advertising cookies is the provision of your consent. For more information, please see our Cookie Policy |
For more information on cookie retention, please see our Cookie Policy. |
Sometimes it may be necessary for us to process your personal data in order to comply with legal obligations, or in connection with any contractual relationship we may have with you.
In all other cases, where appropriate, we will ask for your consent to process your personal data.
3. Sending commercial communications.
Within the framework of its marketing activities, GRE may provide you with the means for registering or signing up for the company's newsletters and general or commercial information about it.
In the event that Gre is entitled to do so, Gre will send you information about its products, activities and services personalised for you in accordance with your tastes and preferences.
You may revoke your consent to receive commercial communications at any time or object to the processing, using the link or button to that effect in each of the communications, or by communicating your desire to revoke consent via email to the address dataprivacy@fluidra.com
4. Duration of processing and term of storage
At GRE we are bound by the undertaking to only process your personal data while they are actually useful to us and we are able to provide you with a quality Service by using them. Therefore, we make every reasonable endeavor to keep the term of processing and storage of personal data as short as possible.
In this regard, in the second section of this Policy, you can find more information on the retention of your data in relation to each processing operation.
In any event, even if you request that we delete your data, we may store and keep them, subject to their being blocked as required by law, for the term required for us to fulfil our legal obligations and for their disclosure to the Authorities with powers on the various matters to which they are subject.
6. Data communication
Your data will not be given, sold, rented or otherwise made available to any third party, except to those service providers of Gre who perform certain activities for the company, but in no case for their own purposes.
Notwithstanding the foregoing, on certain occasions, such as the management of after-sales requests, your data may be communicated or transferred to third parties such as our Distributors or Technical Service so that they can participate in the management of your request.
7. International Transfers
Gre, as a company with international projection, has international suppliers that can provide its services from outside of the EU, therefore your data may be handled outside of the European Union or the European Economic Area.
In any case, Gre will assure that the mentioned treatment of data is always protected with the opportune guarantees, that may include:
- Standard Clauses approved by the EU: These are contracts approved by European regulator, and provide sufficient guarantees that the treatment complies with the requirements established by the European Regulation for Data Protection.
- Third party certifications: For example, framework agreements between the EU and third parties that establish a standardised framework for data processing in line with the requirements of the European Data Protection Regulation.
7. Exercise of rights and complaints to the Spanish Data Protection Agency (AEPD)
As a result of GRE processing your personal data, current laws grant you a number of rights. Below is a brief explanation of each right to assist you should you wish to exercise them:
1. Right of access. You are entitled to find out which of your personal data are processed and the purposes for which we process them.
2. Right of rectification. Your data shall always belong to you and, as such, you may at any time request that they be rectified if the records we hold of them were wrong.
3. Right of erasure. You may at any time request that your personal data be erased from our records. However, as set out in the above section on data storage, it should be remembered that in certain circumstances compliance with the laws in force may prevent this right from actually being exercised.
4. Right to object. You may object to your personal data from being processed in relation to any of the purposes for which we process them, pursuant to the privacy policies that may apply in each case.
5. Right to restriction of processing. You may request restriction of processing in the following cases:
a. If you consider that the data we hold about you are incorrect or inaccurate.
b. If, in the event that you believe we are not legitimately processing your data, you prefer that we restrict their processing rather than erasing them.
c. If the data we have on record are no longer required for the purposes we collected them for, but you need us to store them to file a lawful claim.
d. If, having exercised your right to object to the processing of your data for a specific purpose, you are awaiting a reply from us to this regard.
6. Right to data portability. Provided that it is technically possible to do so and reasonable, you shall be entitled to request that the personal data that you have directly submitted to us be disclosed to another data controller. If this is possible, we shall directly disclose your data to said other data controller, but if it were not possible, we shall provide them to you in a standard format.
Insofar as we process your data on the basis of your consent, you may revoke your consent at any time, without this having any consequences for you other than, depending on the right exercised, not being able to provide you with certain services.
You may exercise your rights by sending an e-mail to Gre at dataprivacy@fluidra.com, with the reference "Personal Data".
In addition, should you consider it necessary, you may contact our Data Protection Officer at the e-mail address dataprivacy@fluidra.com, under the reference "DPO".
If you have any questions or complaints about how we handle your personal data, or any other related matter, you can contact our DPO, by email at dataprivacy@fluidra.com, under the reference "DPO". If you do not receive a response within a reasonable period of time, you may file a complaint with the Spanish Data Protection Agency.
8. Confidentiality and security in data processing
Your personal data are very important to us and we undertake to process them in the strictest confidence and discretion, as well as to implement all security measures that we consider are required and reasonable.
To this regard, GRE hereby states and warrants that it has put all the technical means available to it to avoid the loss, misuse, alteration, unauthorized access and theft of the data provided by the users.
9. Social media
Social media form part of the everyday lives of many Internet users, so we have created a number of GRE profiles on them.
All users may join the pages or groups that GRE has on various social media.
However, you are reminded that, unless we directly ask you for your data (for example, through marketing campaigns, competitions, promotions or in any other valid way), your personal data shall belong to the corresponding social medium, as a result of which we recommend that you read its terms and conditions of use and privacy policies carefully, as well as ensuring that you set your preferences insofar as the processing of your data is concerned.