Privacy Policy

At Efitherma, we are committed to protecting the privacy and personal data of our website users.

This Privacy Policy explains what personal data we may collect through www.efitherma.com, the purpose for which we process it, the legal basis for doing so, how long we retain it, and what rights data subjects can exercise.

The processing of personal data will be carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, General Data Protection Regulation  / General de Protección de Datos (RGPD), Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights / Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD) and other applicable national and European regulations on the protection of personal data.

Data controller

  • Data Controller: EFITHERMA (EFICIENCIA Y FUTURO INGENIERÍA S.L.)
  • CIF: B-14893895
  • Address: Ctra. Estepa-Guadix km. 45 / 14900 Lucena, Córdoba (Spain)
  • Telephone: 957 591 684
  • Email: [email protected]

 

For any questions related to the processing of your personal data or the exercise of your rights, you can contact us via the email address indicated above.

Personal data that we may process

Depending on the relationship the user has with EFITHERMA and the services they use through the website, we may process the following categories of data:

  • Identifying information, such as name and surname.
  • Contact information, such as email address, telephone number, and postal address.
  • Data related to inquiries, requests for information or quotes.
  • Data related to Efitherma products, such as model, serial number or identification number.
  • Data required for the activation and management of guarantees.
  • Data related to requests for assistance or technical service.
  • Data required to provide technical documentation and manuals.
  • Data provided voluntarily by the user through forms or communications.
  • Data related to subscription to commercial communications or newsletter.
  • Technical and browsing data obtained through cookies and similar technologies, where applicable and in accordance with our Cookie Policy.

 

Each form will only request the data that is necessary to fulfill the corresponding purpose.

Purposes and legal bases of data processing

Personal data may be processed for the following purposes:

• Inquiries and requests for information

We will process the data provided through contact forms, email or other enabled channels to manage and respond to queries, requests for information, commercial requests or requests for quotes.

• Customer management and business relationships

When a commercial or contractual relationship exists, we may process the data necessary to manage said relationship, orders, communications, provision of services, invoicing and other actions derived from it.

• Activation and management of warranties

The data provided through the registration or warranty activation forms will be processed to register the product, verify compliance with the applicable conditions, manage the warranty and address any related requests.

• Technical service and after-sales support

Data provided through technical service forms or through other support channels may be used to identify the unit, analyze and manage incidents, coordinate technical actions, provide assistance, and maintain the necessary record of interventions performed.

• Access to technical documentation and manuals

The data requested to access or download manuals and other technical documentation may be processed to correctly identify the product and provide the user with the documentation corresponding to their unit.

• Newsletter and commercial communications

When the user has expressly given their consent, we may use their contact information to send them marketing information, updates, technical content, news, products, services, and other communications related to Efitherma.

The user may withdraw their consent at any time by using the unsubscribe mechanism included in the communications or by contacting us at [email protected]

Withdrawing consent will not affect the lawfulness of any processing carried out prior to withdrawal.

• Compliance with legal obligations

We may process certain personal data when necessary to comply with legal, tax, accounting, administrative, consumer, warranty or other obligations applicable to our business.

• Website security and functionality

Certain technical data may be processed as necessary to ensure the security, availability, integrity and proper functioning of the website, as well as to prevent fraudulent or illegal uses.

Legal bases applicable to the treatments

In accordance with Article 6 of the Reglamento General de Protección de Datos (RGPD), the processing described above is based, according to its nature and purpose, on the following legal grounds:

  • The data subject’s consent (Art. 6.1.a del RGPD) is required when the user voluntarily provides their data for certain purposes that require their authorization, especially for subscribing to newsletters and receiving consent-based marketing communications. The data subject may withdraw this consent at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.
  • The execution of a contract or the application of pre-contractual measures requested by the interested party (art. 6.1.b del RGPD), when the processing is necessary to manage requests for quotes, commercial or contractual relationships, orders, registration and management of products and guarantees, technical service, after-sales service or provision of services and documentation linked to our products.
  • Compliance with legal obligations (Art. 6.1.c del RGPD), when it is necessary to keep or process certain data to meet the legal obligations applicable to EFITHERMA, including those of a tax, accounting, administrative, contractual, consumer and warranty nature, among others.
  • EFITHERMA’s legitimate interest (Art. 6.1.f del RGPD), when necessary to guarantee the security, integrity and proper functioning of our systems and services, prevent fraudulent or unlawful uses and properly manage certain actions related to customer service and after-sales support, provided that the fundamental rights and freedoms of the data subject do not prevail over said interests.

 

The applicable legal basis in each case will depend on the nature of the relationship with the data subject and the specific purpose for which their data is processed. When the same processing activity may have different implications, the appropriate legal basis will be applied in accordance with current regulations.

Mandatory nature of the data

The fields marked as mandatory on the forms must be completed in order to process the corresponding request.

Failure to provide the necessary information may prevent us from responding to an inquiry, registering a warranty claim, providing a requested service, or enabling certain functionalities.

The user agrees to provide truthful, accurate, and up-to-date information and is responsible for notifying us of any changes to their data.

When the user provides personal data belonging to third parties, they must have sufficient legal grounds to do so and, where necessary, have previously informed those individuals about the processing of their data.

Data retention

Personal data will be retained only for as long as necessary to fulfill the purpose for which it was collected.

In particular:

  • Data relating to inquiries and requests for information will be kept for the time necessary to address and follow up on them.
  • Data derived from contractual or commercial relationships will be kept while the relationship is maintained and, subsequently, for the periods required by applicable regulations.
  • Data related to warranties and after-sales service will be kept for the period necessary to manage the warranty, any associated liabilities and the corresponding legal obligations.
  • Data used for sending commercial communications will be kept until the interested party withdraws their consent or expresses their opposition where applicable.
  • Data whose processing is necessary to comply with legal obligations will be kept for the periods established by the corresponding regulations.

 

Once these deadlines have expired, the data may be kept duly blocked during the limitation periods of any possible legal liabilities and will subsequently be securely deleted.

Data recipients

In general, EFITHERMA will not disclose personal data to third parties except when there is a legal obligation to do so, it is necessary to provide the requested service, or there is another legal basis that legitimizes such disclosure.

For the development of our business, we may use suppliers who need access to certain personal data to provide services on behalf of EFITHERMA, such as, among others, providers of web hosting, IT maintenance, email, technology services, business management, marketing, communications, storage, or technical support.

When these suppliers act as data processors, their access to the data will be governed by the corresponding contracts and safeguards required by data protection regulations.

Likewise, certain data may be disclosed, when necessary, to public administrations, authorities, official bodies, courts, or other third parties when there is a legal obligation to do so.

International data transfers

Certain technology providers used by EFITHERMA may be located outside the European Economic Area or use sub-processors located in third countries.

When international transfers of personal data occur, EFITHERMA will adopt the safeguards required by the RGPD, using, as appropriate, adequacy decisions of the European Commission, standard contractual clauses, or other legally established mechanisms.

Data subjects may request additional information on the applicable safeguards by contacting: [email protected].

Rights of interested parties

The interested party may exercise at any time the rights recognized by data protection regulations:

  • Right of access: to know if we are processing your personal data and to obtain information about said processing.
  • Right of rectification: to request the correction of inaccurate or incomplete personal data.
  • Right to erasure: request the deletion of your data when the legally established circumstances apply.
  • Right to object: to object to the processing of your data in those cases where the processing is based on legitimate interest or other legally provided grounds.
  • Right to restriction of processing: request that the processing of your data be restricted in the cases provided for by the regulations.
  • Right to data portability: to receive the personal data provided in a structured, commonly used and machine-readable format and, where technically possible, to request its transmission to another controller, where the legal requirements are met.
  • Right to withdraw consent: withdraw at any time the consent given for those treatments based on it, without such withdrawal affecting the lawfulness of the treatment carried out previously.
  • Right not to be subject to decisions based solely on automated processing, including profiling, where such decisions produce legal effects concerning the data subject or similarly significantly affect him or her, as provided for by law.

 

To exercise these rights, you can send a request to:

EFICIENCIA Y FUTURO INGENIERÍA, S.L.
Ctra. Estepa-Guadix, km 45
14900 Lucena, Córdoba (Spain)

or by email to: [email protected]

The request must clearly identify the interested party and specify the right they wish to exercise. If there are reasonable doubts about their identity, we may request additional information necessary to confirm it.

Exercising these rights is free of charge, except in the exceptional cases established by law.

Right to file a complaint

If you believe that the processing of your personal data does not comply with current regulations or that you have not received a satisfactory response when exercising your rights, you may file a complaint with the competent supervisory authority.

In Spain, the competent authority is:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6
28001 Madrid
www.aepd.es

Social networks

EFITHERMA maintains corporate profiles on various social media platforms to communicate its activities, products, projects, content, and news, as well as to interact with clients, professionals, and other users.

When a user interacts with our profiles, we may process the information they make public or provide through the corresponding platform to manage that interaction, respond to inquiries, and maintain our relationship with our community.

The legal basis for this processing will be, depending on the case, the consent given through the user’s interaction or EFITHERMA’s legitimate interest in managing its presence and communications on social media.

The processing carried out directly by each platform will be governed by its own privacy policies and terms of use. We recommend that users consult these policies and configure their privacy preferences accordingly.

EFITHERMA may remove, hide, block, or report content or profiles when necessary to protect its rights, the rights of third parties, or the proper functioning of its communities, especially when the content is illegal, offensive, false, fraudulent, or contrary to the rules of the corresponding platform.

Cookies

This website uses its own and third-party cookies and similar technologies.

Cookies that are not strictly necessary will only be used when the user has previously given their consent through the system enabled on the website.

The user can accept, reject, or configure cookies according to the available options.

You can find detailed information about the cookies used, their purposes, providers, duration, and mechanisms for configuring or withdrawing consent in our Cookie Policy.

Data security

EFITHERMA will implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk and to protect personal data against accidental or unlawful destruction, loss, or alteration, as well as against unauthorized access, disclosure, or processing.

Access to personal data will be limited to those individuals, suppliers, or collaborators who need access to it to perform their duties or provide the corresponding services and who are subject to applicable confidentiality obligations.

Minors

The services offered through this website are not specifically directed at minors.

If we discover that personal data of a minor has been collected without complying with applicable legal requirements, we will take reasonable steps to delete it.

Changes to the Privacy Policy

EFITHERMA may modify this Privacy Policy when necessary to adapt it to legislative or regulatory changes, criteria from supervisory authorities, modifications to the processing activities carried out, or changes in the services offered.

When changes are significant, reasonable steps will be taken to inform the data subjects as necessary.

The current version of the Privacy Policy will be the one published on this website, indicating its last update date.

Last updated: 09/2026