This policy explains how AUFER SOLUTIONS S.L. processes personal data obtained through aufersurfacetech.com and communications relating to information requests, quotations and business relationships.
1. Data controller
Controller: AUFER SOLUTIONS S.L.
Tax ID: B67284323
Address: Ctra. de Molins de Rei a Sabadell, km 13, unit 42, Pol. Ind. Can Roses, 08191 Rubí (Barcelona), Spain
Data protection email: info@aufersurfacetech.com
Telephone: +34 937 128 698
Aufer Surface Tech is a trading name of AUFER SOLUTIONS S.L., which is the data controller.
AUFER SOLUTIONS S.L. has not appointed a data protection officer because this is not, in principle, mandatory for the processing described. Enquiries and requests to exercise rights may be sent to the email address above.
2. Data processed and source
Data provided by the data subject. Name, company, position or professional relationship, telephone number, email address, content of the enquiry, data included in attached documents and any other information voluntarily provided when contacting us or requesting a quotation. This includes communications received by email, telephone and WhatsApp.
Business relationship data. Data required to prepare and manage quotations, orders, deliveries, commissioning, technical support, training, invoicing, collections, payments and communications with customers, prospective customers, suppliers and professional contacts.
Technical and browsing data. IP address, access date and time, requested URL, browser, device, security logs and, where consent has been given, identifiers and usage data obtained through the measurement and advertising services described in the Cookie Policy.
3. Purposes and legal bases
Responding to enquiries and preparing quotations. Managing emails, calls, WhatsApp messages and requests for information or quotations. The legal basis is taking pre-contractual steps at the data subject’s request and, where the enquiry is not aimed at entering into a contract, the legitimate interest in responding and maintaining professional communication.
Managing the contractual and business relationship. Processing orders, deliveries, installation, technical services, warranties, invoicing, collections, payments and after-sales support. The legal basis is performance of the contract where the data subject is a party to it and, regarding contact persons at customers, suppliers or other entities, the legitimate interest in maintaining the professional relationship with the entity they represent, in accordance with Article 19 of Spanish Organic Law 3/2018. Compliance with commercial, tax and accounting obligations also applies.
Sending commercial communications. Sending information about products or services where this has been requested or consented to. In prior customer relationships, communications about similar products or services may be sent under the conditions permitted by the LSSI-CE, always providing a simple, free means of opting out. The legal basis will be consent or, where legally applicable, legitimate interest.
Protecting and maintaining the website. Preventing abuse, investigating incidents, retaining technical logs and ensuring availability and security. The legal basis is AUFER SOLUTIONS S.L.’s legitimate interest in protecting its systems and services.
Measuring website use, conversions and advertising. Producing usage statistics, measuring advertising campaign effectiveness and attributing conversions using the Google services described in the Cookie Policy, only after obtaining consent. The legal basis is consent, which may be refused or withdrawn without affecting access to essential functions.
4. Recipients and processors
Data is neither sold nor disclosed to third parties for their own commercial purposes. It may be disclosed to public authorities, courts, financial institutions or other recipients where necessary to comply with a legal obligation, perform a contractual relationship or establish, exercise or defend legal claims.
Service providers may also access data when providing AUFER SOLUTIONS S.L. with web hosting, email, IT maintenance, website support, administration, analytics or digital advertising services. Where applicable, these providers act as processors and are subject to contractual and confidentiality obligations.
Contact via WhatsApp. Where a data subject chooses to contact us through WhatsApp, the communication is managed through WhatsApp Ireland Limited under its terms and privacy policy. Email or telephone may be used instead.
Disclosure to the manufacturer. Where required to fulfil a supply or technical service, strictly necessary professional contact data may be disclosed to the manufacturer for the manufacture, configuration, warranty or support of the supplied equipment.
When Google services are accepted, Google Ireland Limited and other Google group entities may be involved under their terms and policies.
5. International transfers
Some technology providers, particularly Google and WhatsApp, may process information outside the European Economic Area. Where an international transfer occurs, a valid GDPR mechanism will be used, such as an adequacy decision—including, where applicable, the EU–US Data Privacy Framework—or the European Commission’s Standard Contractual Clauses together with any additional safeguards required.
Transfer to China. The manufacturer of the corona and plasma treatment systems is established in the People’s Republic of China, which is not covered by a European Commission adequacy decision. Where manufacturing, configuration, warranty or technical support requires disclosure, only the professional contact details strictly necessary for that purpose—name, company, position, telephone number or email address—are transferred, and never special-category data.
This transfer is based on the European Commission’s Standard Contractual Clauses incorporated into the agreement between AUFER SOLUTIONS S.L. and the manufacturer. Information about the safeguards may be requested at info@aufersurfacetech.com.
If you prefer that your data not be disclosed to the manufacturer, state this when making your request. AUFER SOLUTIONS S.L. will then assess whether the supply or service can be processed without such disclosure and inform you of any resulting limitations.
6. Retention periods
Enquiries with no subsequent relationship. For the time needed to respond and follow up and, generally, for up to twelve months after closing the enquiry, unless retention is required to deal with a claim.
Contractual and business relationships. While they remain in force and afterwards for the applicable statutory periods and as needed to address liabilities. Commercial and accounting documentation is generally retained for six years, without prejudice to other tax or legal periods.
Commercial communications. Until consent is withdrawn or the right to object is exercised. A minimal suppression record may be retained to ensure that no further communications are sent.
Security and technical logs. For the period strictly necessary to detect and manage incidents and, unless justified, no more than twelve months.
Analytics, advertising and cookie consent. Google Analytics user and event data is configured with a maximum retention period of fourteen months. Advertising-related data is retained for the periods set by Google for each data type. Cookies and evidence of the user’s choice are retained for the periods stated in the Cookie Policy, without exceeding twenty-four months before a new decision is requested.
7. Data subject rights
You may request access to, rectification or erasure of your data, object to or restrict processing and request portability where applicable. You may also withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, send a request to info@aufersurfacetech.com or the registered office, stating the right you wish to exercise and the information needed to identify the request. Where there are reasonable doubts about identity, additional proportionate information may be requested. A response will be provided without undue delay and in any event within the statutory period.
If you believe that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es/.
8. Automated decisions and profiling
AUFER SOLUTIONS S.L. does not make decisions producing legal or similar effects based solely on automated processing of data collected through this website. Analytics and advertising measurement, where consented to, are used for statistical purposes and to assess campaign effectiveness, not to make individual decisions producing legal effects on visitors.
9. Minors
The website is intended for professionals and businesses, not minors. Information from children under fourteen is not knowingly requested. If data from a minor is found to have been received without the necessary lawful basis, it will be deleted as soon as reasonably possible.
10. Security and updates
AUFER SOLUTIONS S.L. applies technical and organisational measures appropriate to the risk to protect the confidentiality, integrity and availability of data. This policy may be updated when processing activities, providers, services or legislation change. The current version is the one published on the website.
Last updated: 20 August 2026
