Privacy Policy

Detailed information on Data Protection

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Tervex Substrats, S.L. informs data subjects about how their personal data will be processed when they access, browse and use the products and services of the COMPANY.

• - Website: we have a website under the main domain https://www.tervex.com/
• - Social networks: we have a profile on Social Networks X (formerly Twitter), Instagram, LinkedIn and Facebook. In this case, this privacy policy will only apply to the extent that the COMPANY obtains data from USERS through these.

By providing us with your data, you declare that you have read and are aware of this Privacy Policy, giving your free, specific, informed and unambiguous consent to the processing of your personal data in accordance with the purposes and terms expressed herein.

The COMPANY may modify this Privacy Policy to adapt it to legislative, jurisprudential or interpretative developments of the Spanish Data Protection Agency.

Data Controller

• Legal name: Tervex Substrats, S.L.
• Trade name: Tervex
• VAT number: B17486820
• Registered address: Veinat les Serres, 29 (Accés Carretera de Girona a Sant Feliu - km 14, 50), 17244 Cassà de la Selva, Girona
• Phone: +34 972 460 508
• Email: info@tervex.com

Purpose and legal basis for processing

The COMPANY will use the data you provide for the following purposes:

• - The request for information and/or the contracting of any product or service offered by the COMPANY.
• - Commercial actions, using the information provided by the data subject to offer products and services in a personalized or general manner.
• - Sending personal and individual messages through the internal channel
• - Sending personal and individual messages through the channels of the various social networks.

The legal basis for processing your data is the explicit consent granted through a positive and affirmative act. By filling in forms, ticking the box 'I accept the Privacy Policy' and clicking to submit the data, or by sending emails to the COMPANY, you declare that you have read and expressly accepted this privacy policy.

Persons under 18 but over 14 years of age may give consent for the processing of their data. Persons under 14 years of age may not give consent and this falls under the responsibility of parents, guardians or legal representatives.

The COMPANY processes the following categories of data:

• a) Identifying data: name, surname(s), address, email and phone number.
• b) IP address

Recipients of data

No data transfers are envisaged, except those authorized by tax, commercial and telecommunications legislation, and in cases where a judicial authority requires it.

International data transfers

No international data transfers are carried out

Retention period

We will retain your personal data from the time you give us your consent until you revoke it or request the limitation of processing. In such cases, we will keep your data blocked for the legally required periods.

Rights of the data subject

The User may exercise the following rights in relation to their data:

• a) Access: you have the right to obtain confirmation from us as to whether or not we are processing your personal data, as well as access to it.
• b) Rectification: you have the right to obtain rectification of inaccurate personal data concerning you. You will also have the right to have incomplete personal data completed.
• c) Deletion: you have the right to obtain the deletion of personal data, provided they are no longer necessary for the purposes for which they were collected and are not necessary for compliance with a legal obligation.
• d) Objection: you have the right to object to the processing of data, provided one of the grounds of Art. 21 of the GDPR is met.
• e) Limitation: you have the right to obtain from us the limitation of data processing when the conditions set out in Art. 18 GDPR are met.
• f) Portability: you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit it to another data controller when the requirements of Art. 20 GDPR are met.

In the field of social networks, only the rights set out may be satisfied in relation to information that is under the control of the COMPANY.

The COMPANY informs you that these rights have the following characteristics:

• a) The exercise of these rights is free of charge, unless the requests are manifestly unfounded or excessive (e.g., repetitive), in which case the COMPANY may charge a proportionate fee.
• b) You may exercise your rights directly or through your legal or voluntary representative.
• c) The request must be answered by the COMPANY within one month, unless it is complex or a large number of requests are received, in which case the deadline is extended by two more months.
• d) If the COMPANY does not act on the request, it will inform you, at the latest within one month, of the reasons for its non-action and of the possibility of lodging a complaint with a Supervisory Authority.

To exercise your rights, you may send a postal letter to Tervex Substrats, S.L. at the address indicated in section A), or an email to info@tervex.com indicating in the subject line 'Exercise of GDPR Rights'. In both cases, please attach a copy of a document that allows us to identify you.

Finally, you have the right to lodge a complaint with the national supervisory authority, the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.

Automated decisions

No automated decisions are made

Security measures

As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that the necessary technical and organizational measures have been adopted to guarantee the security of personal data and prevent its alteration, loss, processing or unauthorized access, taking into account the state of technology, the nature of the stored data and the risks to which they are exposed, pursuant to Art. 32 of GDPR EU 679/2016.

However, absolute security cannot be guaranteed and no security system is impenetrable, so in the event that any information subject to processing under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, if applicable, the affected users.

Social networks

In compliance with the principles of transparency, we detail the link to the privacy policy of the various Social Networks where we have a profile:

• a) X (formerly Twitter): https://twitter.com/privacy
• b) Instagram: https://help.instagram.com/155833707900388
• c) LinkedIn: https://www.linkedin.com/legal/privacy-policy

Language of drafting: English

Available language: English, Español, Català

Last update: 08/06/2026