Privacy Policy

Information about data protection – Newsletter.

In this information regarding data protection we provide you with mandatory information about how your personal data is treated. In regard to this treatment, we comply with the applicable data protection legislation, specifically with the EU’s General Data Protection Regulation («GDPR»).

Who is responsible for treating the personal data? The responsible party of the treatment of your personal data is Ursa Ibérica Aislantes, S.A., residing at Paseo de Recoletos, 3, 28004 Madrid. Any mention of Ursa in this data protection notice refers to the aforementioned entity. You can contact our data protection coordinator through the options listed above or via privacy@ursa.com.

What data do we treat? For what purposes and on what legal grounds do we treat your personal data? We would like to tell you about the products, services, offers, and promotions available from URSA IBÉRICA AISLANTES, S.A. via any selected means, be it email, telephone, or text.  Based on the selection of one or more contact channels, we will process the necessary data included in your contact form, at the very least your surname, name, and contact information (postal address, email, telephone number, SMS) which you have selected.  We will treat the personal data in accordance with the consent you have granted and in accordance with Article 6 (1) a) of the GDPR.

¿Existe la obligación de facilitar los datos personales? ¿Puedo retirar mi consentimiento? You state to be in agreement and freely choose the means of contact to be used. Therefore, you have no obligation to provide any personal data. To respond to your information request and enquiry we need you to complete the mandatory fields in the contact form. You can withdraw your consent at any time, without having to give any reason, this will come into future effect. You just have to contact us. In each email you will also find a link to unsubscribe.

¿Quién tiene acceso a los datos personales? We will never sell your email, address, or other contact details to third parties. The data will only be transferred if there is a need to send you other information. In this regard, we can also reach out to third party service providers or other companies within our group, taking into account the applicable legal regulations. We will only share your data with the following recipient categories to prepare and send you our information:

• Service providers within our business group (such as statistical analysis providers or those in charge of the technical maintenance of our systems).
• Third party service providers who provide services under our name with a different contractual basis, such as data collection, web page storage, call centre maintenance, the sending of emails or written information, or personal consultancy services.

We may also transfer data to other recipients (such as public authorities) if we are obliged to transfer your personal data for any legal causes that we may be subject to.

Do we use automated decision-making? We do not usually use automated decision-making (including profile creation) during our direct marketing actions, in regard to Article 22 of GDPR. If in the future we use these types of procedures, we will individually inform each of the interested parties, in accordance with the applicable legal provisions.

Is data sent to countries outside of the EU or the EEA? Personal data will be exclusively treated within the European Union or the European Economic Area. We have no intention of transferring your personal data to other countries.

How long is the data stored for? We usually store personal data for as long as there is a legitimate interest in keeping it and there is no prevailing interest from the interested party in abstaining from the treatment of said data. Even if there is no longer a legitimate interest, we can still store the data if there is a legal obligation to do so (for example, to meet with any legal withholding obligations). Even if the interested party takes no specific action, we will remove personal data when it no longer needs to be stored for the purposes for which it was collected or treated, or if for whatever reason the law no longer permits for it to be stored. This means that in regard to the treatment of the aforementioned data we will keep your personal data on record until you revoke your consent or otherwise inform us that you no longer wish to receive information from us. In these cases, we may also keep your personal data to ensure that we do not contact you again after you have declared your disagreement or objection thereto («blacklist»). In the case of personal data having to be stored to meet any legal obligations, this data will be kept until the end of the corresponding legal term. In the case of the personal data treatment being carried out to exclusively comply with any legal obligations, access to said data is usually restricted so that the data is only available upon request for the purposes of said obligation.

What are your rights as an interested party with this data treatment? As an interested party of the data treatment you may:

• Ask for access to your personal data, Article 15 of the GDPR;
• Request the rectification of erroneous personal data, Article 16 of the GDPR;
• Ask for the removal of your personal data, Article 17 of the GDPR;
• Request the restriction of the treatment of your personal data, Article 18 of the GDPR.
• Exercise your data portability rights, Article 20 of the GDPR.
• Oppose the treatment of your personal data, Article 21 of the GDPR.

The rights mentioned above may be communicated to us by you sending a notice via any of the contact details listed in the first page of this data protection information document. 

If you need additional information you can also contact our data protection coordinator by sending an email to: privacy@ursa.com.

The interested party may also file a claim regarding how their personal data is processed with the competent controlling authority, in accordance with Article 77 of the GDPR.

Data protection information website

Website www.ursaincare.es

Thank you for visiting this Web Page. We are committed to protecting your personal data and to our compliance with the applicable data protection legislation, specifically the EU’s General Data Protection Regulation («GDPR»).

In this personal data information document, we explain what information (including personal data) we treat from your visit and the use of the aforementioned digital promotion («Web Page») for our commercial relations. 

Who is responsible for treating the personal data?

El responsable del tratamiento de los datos personales es Ursa Ibérica Aislantes, S.A., con domicilio en The responsible party of the treatment of personal data is Ursa Ibérica Aislantes, S.A., residing at Paseo de Recoletos, 3, 28004 Madrid. Any mention of «we» or «us» in this data protection notice refers to the aforementioned entity.

You can contact our data protection coordinator at the aforementioned postal address or via privacy@ursa.com.

What are our principles?

To comply with the applicable data protection legislation, we will only process your personal data if we have the legal authority to do so or if you have granted us with your consent. The latter is also applicable to the treatment of personal data for marketing purposes.

Through this page we may collect information that does not allow us to make direct conclusions about you as a person. However, on some occasions (especially when combined with other data) this information may be considered as «personal data» in accordance with the applicable data protection legislation. Likewise, we may also collect information on this web page that does not allow us to identify you, neither directly nor indirectly, such as in the case of data added regarding a group of website users.

What data do we treat?

You can access our web page without entering any personal data (such as your name, postal address, or email). However, in this case, we still have to process certain information to allow you to access the web page. We use analysis systems on this website and have also integrated some social plugins. 

Log files: When you visit this web page, our server stores the domain name or IP address of the requesting computer (usually your internet provider’s computer) which includes the data, time, and duration of your visit, the subpages/URLs that you have visited, and information about the apps or devices that you use to access our page.

Cookies: To make our web page as easy to use as possible, we use cookies (just like many other web pages). Cookies are small text files that are stored in your browser. These files allow us to recognise certain visitor preferences when browsing our page, in order to bear them in mind when designing our site. Most of the cookies we use are session cookies, which are automatically deleted once the user leaves the page. However, we also use persistent cookies which are used to improve user browsing. Our cookies do not collect personal data and cannot be used to identify you on third party sites. You can configure your browser so that you are informed about cookie installation and are updated about how the cookies are used. In principle, you can reject the use of cookies in your browser settings, but if you do you may not be able to use all of the website’s functions.

Google Analytics Web Page Analysis: We use Google Analytics, a web page analysis service from Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA («Google»), for the continuous improvement of our web page. Google Analytics uses cookies that are stored in your computer to analyse the use of the web page. The information from the cookies about your use of this web page is usually sent to a Google server in Europe (or one in a member state of the European Economic Area) for the anonymisation of the IP address and to remove any personal references. Once the anonymisation of the IP address has been completed, the abbreviated IP address will be sent to a Google server in the USA, where it will be stored. Only in exceptional cases will the full IP address be sent to the Google server in the USA to be abbreviated. This web page uses Google Analytics with an extension to anonymously collect IP address (a subnet mask). On our behalf, Google will use the collected data to evaluate how the web page is used, to create activity reports on the web page, and to offer us other services related to the web page use. The IP address sent by your browser to Google Analytics is not combined with any other Google data. You can reject the use of cookies in your browser settings, but if you do you may not be able to use all of the website’s functions. You can also prevent Google using cookies to collect data related to your use of the web page (including your IP address), as well as prevent said data being treated by Google, by downloading and installing the browser extensions available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en.  A tool will be installed to disable cookies which will prevent your data being collected the next time you visit this web page. You can find out more information about Google Analytics data collection on the following links: https://www.google.com/analytics/terms/es.html y https://policies.google.com/privacy?hl=es

Facebook Social Plugin: We have included a button for the social media platform Facebook (1601 South California Avenue, Palo Alto, California 94304, USA – www.facebook.com) on our Web Page. Facebook buttons are recognised by the Facebook logo or the “Like” button.

As the operator of this Web Page, we do not know the content of the data transferred, nor how this data is used by Facebook. We do not know when you click on any of the buttons. For more information on how Facebook uses your data, please see the Facebook Privacy Policy https://www.facebook.com/about/privacy/update.

Twitter button: Our website uses Twitter buttons. These buttons are provided by Twitter Inc, 795 Folsom St., Suite 600, San Francisco, California 94107, USA. They are recognised as they include terms such as «Twitter» or «Follow», along with an image of a blue bird. These buttons can be used to share a post or promotional page on Twitter or to follow a provider on Twitter. When you access the area of our web page with this button, your browser establishes direct contact with the Twitter servers. The content of the Twitter button is sent directly from Twitter to your browser. Therefore, we do not interfere with the data that Twitter collects through these tools and the information that we provide you with is all that is available to us.  This means that when the button is acquired only your IP address and our web page URL will be sent and they will not be used for any other purpose other than viewing the button.  For more information we refer you to the Twitter data protection policy at http://twitter.com/privacy.

The Google+ button: Our Web Page includes the «+1» button for our Google Plus social media site, operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, United States («Google»).  This button is identified by the «+1» symbol with a white background. When you visit the area of our Web Page with this button, a direct connection is established with the Google servers. Google sends the content of the «+1» button directly to your browser and integrates it on to the Web Page. We have no control over the amount of data that Google collects using this button, but we understand that it includes your IP address.  The purposes and conditions of the data collection and its subsequent treatment and use by Google, as well as your rights and configuration settings to protect your privacy are detailed in the Google privacy policy for the «+1» button: http://www.google.com/intl/de/+/policy/+1button.html. If you are a Google Plus member and do not want Google to collect information about you through our website or to the linked data stored about you as a network member, you should close your Google Plus session before visiting our web page. 

Information options and enquiries.

We offer plenty of information and enquiry options that can be accessed through the contact form on our web page. Based on the option you select; we treat different types of personal data.

7.1 Information by mail/email.

If you request to be sent information, we will process the data included in the contact form. This includes, at least, your name, surname, and the details of your selected contact method (postal mail and/or email) for the sole reason of sending you the requested information. 

7.2 Telephone enquiry.

If you have made a request for a telephone enquiry, we will process the data included in the contact form. This includes, at least, your name, surname, and telephone number, in order to provide you with the requested telephone enquiry.

7.3 In-person enquiries.

If you have requested an in-person enquiry, we will process the data that you have provided in the contact form. This includes, at least, your name, surname, and telephone number and/or email, so that we can contact you to arrange your in-person enquiry.

For what purposes and on what legal grounds do we treat your personal data?

We process the personal data contained in the registered files so that you can use our web page; this treatment is done in accordance with Article 6 Section 1 f) of the GDPR and the purpose thereof is of our own legitimate interest in order to operate our Web Page. 

We process the data collected through the use of cookies and decoupled profiles to carry out different direct marketing actions, market research purposes, and to continue with the development of our digital promotions, based on user needs, in accordance with Article 6 section 1 f) of the GDPR; this treatment is of legitimate interest to us in order to analyse the use of our website. 

We process the data provided to make use of our information and enquiry options and to offer the selected option. We will treat the personal data in accordance with the consent you have granted and in accordance with Article 6 (1) a) of the GDPR. Bear in mind that you can revoke your consent at any time, without having to give any reason for doing so, with future effect; to do this you just have to contact us through the means specified in the first page of this data protection information document. In each email you will also find a link to unsubscribe.

We may also process your treated data in regard to your use of our web page, in compliance with our own legal obligations; this treatment is carried out under Article 6 Section 1 c) of the GDPR.

Whenever necessary, we will treat personal data (for commercial reasons or to meet our own legal obligations) for the purposes related to our legitimate interest in doing so or the legitimate interest of third parties, in accordance with Article 6 Section 1 f) of the GDPR. Legitimate interest may include:

5.1 The filing of or defence of legal action.

5.2. The prevention and investigation of crime

5.3. The management and development of our business operations, including risk management. 

Are you obliged to provide us with your data?

The data required to request information and make enquiries is specified as mandatory information in the corresponding section of the Web Page (for example, the online form). If you do not complete the mandatory information, you cannot use the corresponding function.

In the case of requesting new data, we will inform you that said data request is in adherence with legal or contractual obligations or is necessary in order to fulfil a contract. We usually let you know which information is not needed for legal or contractual obligations, or that which is not needed to fulfil any contract, and which can be provided voluntarily.

Who receives or has access to your data?

Generally, the treatment of your personal data is done at our company. Based on the different personal data categories, it may be that only some departments or specialist divisions have access to the data. These units include, specifically, digital promotion departments (such as for the web page) and our IT department. Based on the management role and rights model, access to personal data is limited to the necessary functions and means in order to comply with the specific data treatment objective. 

When permitted by law, we may transfer your data to third party recipients. These third party recipients may include:

Affiliates of the Xella group, who we can send personal data to.

Service providers (in accordance with any individual contracts that they have signed with us) which offer services that include personal data treatment, as well as subcontractors of said service providers.

Public or private entities, to whom we are obliged to send your personal data to due to any legal obligations that we may be subject to. 

Do we use automated decision-making?

We do not usually use automated decision-making (including profile creation), in regard to Article 22 of GDPR. If in the future we use these types of procedures, we will individually inform you, in accordance with the applicable legal provisions. 

Is data sent to countries outside of the EU or the EEA?

Generally, personal data will be exclusively treated within the European Union or the European Economic Area.

We have no intention of transferring your personal data to other countries. The only data that may be transferred to so-called «third countries» is when service providers are contacted to provide web analysis services. «Third countries» refer to countries outside of the European Union or the European Economic Area, in which we cannot immediately ensure that the level of data protection is comparable to that in the European Union.  

If the transferred information includes personal data, we will ensure, before transferring it, that the data protection offered in the third country in question or the recipient in said third country, is adequately guaranteed. Specifically, this confirmation can be done through the European Commission’s so-called «data protection adequacy», which establishes a collective suitable level of data protection for a third country.  Alternatively, data transfer can also be based on the «EU’s standard contractual clauses for data transfers» which are agreed with the recipient or (in the case of the recipient being the USA), in accordance with the principles of the «EU-US Privacy Shield». Upon request, we will be happy to provide you with additional information regarding the guarantees in place to suitably ensure the protection of your data. Our contact details are available at the start of this data protection information document.  Here you can access information on the EU-US Privacy Shield: www.privacyshield.gov/list.

How long is the data stored for?

We usually store personal data for as long as there is a legitimate interest in keeping it and there is no prevailing interest from the interested party in abstaining from the treatment of said data. Even if there is no longer a legitimate interest, we can still store the data if there is any legal obligation to do so (for example, to meet with any legal withholding obligations). Even if the interested party takes no specific action, we will remove personal data when it no longer needs to be stored for the purposes for which it was collected or treated, or if for whatever reason the law no longer permits for it to be stored. 

In regard to the aforementioned treatment, we regularly:

Remove any registered data after seven days unless the law requires for it to be stored any longer for purposes such as fraud detection or the identification and rectification of any technical faults.

We will remove the data processed during user registration or for a customer account once the registration has been cancelled or the customer account has been deleted. In the case of personal data having to be stored to meet any legal obligations, this data will be kept until the end of the corresponding legal term. In the case of the personal data treatment being carried out to exclusively comply with a legal obligation, access to said data is usually restricted so that the data is only available upon request for the purposes of said storage obligation. 

What are your rights as an interested party with this data treatment?

As an interested party of the data treatment you may:

1. Ask for access to your personal data, Article 15 of the GDPR.
2. Request the rectification of erroneous personal data, Article 16 of the GDPR.
3. Ask for the removal of your personal data, Article 17 of the GDPR.
4. Request the restriction of the treatment of your personal data, Article 18 of the GDPR.
5. Exercise your data portability rights, Article 20 of the GDPR.
6. Oppose the treatment of your personal data, Article 21 of the GDPR.

The rights mentioned above may be exercised by you sending a notice to us via any of the contact details listed in the first page of this data protection information document. 

If you need additional information you can contact our data protection coordinator by sending an email to: privacy@ursa.com.

On the other hand, you may file a claim on how your personal data is processed with the competent controlling authority, in accordance with Article 77 of the GDPR.