Privacy and Cookies Policy

General Information

This Privacy and Cookies Policy is applicable to all personal data that you, as a user, (understood as any individual accessing the website) provide to Cofrai 2023 SL when you access https://www.cofrai.com, hereinafter the "Website".

The purpose of this Privacy and Cookies Policy is to provide you with information about the use we make of the personal data of users, as well as to inform you about the rights granted to you according to the General Data Protection Regulation and the Organic Law on Data Protection and Digital Rights Guarantee.

Who is responsible?

The data controller for the personal data collected through the Website is Cofrai 2023 SL, with Tax ID number B13983986 and registered address at Calle María de Molina 37 S1D Madrid, Madrid 28006.

You can contact the Data Protection Officer at the email address dpo@7experts.com to make any inquiries or request information you may need regarding the processing of users' personal data. The personal data we collect will be treated confidentially and will be included in our Processing Activities Register.

Why do we request your data?

Purpose	Description	Data
To get in touch with the user	Handling enquiries made through the contact form, complaint form or other customer service channels.	Phone number, Email address, Postal address, Name and/or surname, Billing address, Debit/credit card numbers.
Budget request form	In order to be able to attend a request for a personalised quotation according to the users needs.	Phone number, Email address, Postal address, Name and/or surname, Billing address.
Development, execution and fulfilment of the contractual agreement for the provision of services or purchase and sale that has been concluded through the website.	With the aim of: contacting the user in relation to the products or services booked; managing the payment methods used through the website; carrying out invoicing and the preparation of purchase tickets made through the website; managing shipments and returns, as well as attending the user in the performance of the contract.	Phone number, Email address, Postal address, Name and/or surname, Billing address, Debit/credit card numbers.
Mass advertising to potential customers	The large number of subjects affected, the diversity of data handled, the duration in time, the volume of data, the geographical extension, the comprehensiveness of the personal data of individuals, the frequency of collection, etc. are risk factors in the processing of personal data.
Manage the registration on the website	To register a user, sign him/her up, identify him/her and give him/her access to the corresponding functionalities available on the website.	Phone number, Email address, Postal address, Name and/or surname, Billing address.
Internal analysis of usability and quality	To study the browsing data for analytical and statistical purposes and to optimise and improve the user experience.	Phone number, Email address, Postal address, Name and/or surname, Billing address.
For marketing purposes	To carry out promotional actions of our products or services, according to the consent expressed by the user and the information provided at the time of collection of the same. To personalize the services we offer you and to be able to make recommendations based on your interaction with us on the web and the analysis of your user profile (for example, based on your purchase and browsing history). To show you online advertising that you may see when you browse websites and apps, for example, on social networks. The advertising you see may be displayed randomly, but at other times it is advertising that may be related to your purchase history, preferences and browsing history.	Phone number, Email address, Postal address, Name and/or surname, Billing address.
Receive and manage resumes	Managing the recruitment process	Phone number, Email address, Name and/or surname.
Profile analysis	Profiling involves the processing of personal data, which consists of using the personal data of a natural person to evaluate certain personal aspects of another natural person, for example to analyze or predict aspects relating to the professional performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements of that natural person.

What is our legal basis for data processing?

Our legal basis for processing personal data is as follows:

Consent: if you have given explicit consent when entering personal data by checking the corresponding box.
Contract performance: if there is a contractual relationship between you and Cofrai 2023 SL, or if the processing of personal data is necessary for the development of the commercial relationship.
Compliance with a legal obligation: in cases where Cofrai 2023 SL has a legal obligation applicable as data controllers.
Legitimate interest: in cases where there is a legitimate interest of our own or third parties related to the operation of the Website or the provision of services to the user, provided that the fundamental interests and rights of the users do not override the legitimate interest.

How long will we retain your data?

The personal data we collect through the Website will be processed and retained for the time necessary to fulfill the purpose for which they were collected.

Specifically, data collected for the development and execution of a contract with you will be kept for as long as the contractual relationship is in effect. However, personal data collected based on legitimate interest or with your consent will only be retained for the time necessary to fulfill that purpose.

Once the strictly necessary period for the purposes described above has elapsed, we will retain personal data for an additional period, until all actions that may arise from our liability resulting from each of the processing activities have expired.

In order to fulfill the purposes described above, it is necessary to grant access to your personal data to other service providers, who will act as data processors, such as:

Financial institutions and companies that provide payment solutions.
Technology and analytical service providers
Logistics, transportation and delivery service providers and partners
Providers of services related to customer care
Service providers and partners related to marketing and advertising (print and distribution, social media platforms, media agencies or advertising agencies, media or advertising agencies, data analysis companies and public relations agencies).
Public administrations and agencies when required by tax, labor, Social Security or any other applicable regulations.
Providers of services related to the management of the company
Fraud detection and prevention companies

We have entered into an agreement with the companies acting as data processors to regulate the management and processing of users' personal data, as well as the implementation of security measures.

In cases where we need to transfer data to third parties located outside the European Union or the European Economic Area (Iceland, Norway, or Liechtenstein), and where such country does not offer a level of data protection equivalent to that of the European Union, we will transfer your personal data while always respecting the appropriate guarantees and maintaining security standards, in accordance with applicable regulations.

When these transfers are made from the EU/EEA to a third country for which the European Commission has not issued an Adequacy Decision, or if we do not have Binding Corporate Rules, we will comply with the provisions established by the European Commission for these cases to provide you with the appropriate guarantees. When necessary, we will also enter into the Standard Contractual Clauses and implement additional protection measures.

If you want more information about the transfer of personal data we carry out to countries outside the EU/EEA, you can contact us via the following email address: cofrai@cofrai.com

What are your rights?

You can exercise the following rights at any time and free of charge:

Access: to know what data we hold and what we do with it.
Rectification: to inform us of any inaccurate data.
Erasure: to have your personal data deleted, to the extent possible.
Objection: to stop us from processing your personal data for any of the purposes mentioned above, provided there is no legal obligation preventing it.
Portability: to have your personal data transferred to a third party, to the extent possible.
Restriction: to have your data suspended when you challenge its accuracy, or if you want us to keep it for legal claims.
Not to be subject to decisions based solely on automated processing of your data.

You can exercise these rights by sending an email to the address cofrai@cofrai.com , indicating the right you wish to exercise, accompanied by a document proving your identity or by using the following forms:

Exercise of the right of access here.
Exercise of the right of rectification here.
Exercise of the right to erasure here.
Exercise of the right to object here.
Exercise of the right to data portability here.
Exercise of the right to restriction here.
Exercise of the right not to be subject to automated decisions. here.

If we do not properly respect these rights as data controllers, you can file a complaint with the data protection supervisory authority, the Spanish Data Protection Agency, at C/Jorge Juan, 6, 28001- Madrid or at the email address dpd@agpd.es.

Confidentiality and Security Measures

Cofrai 2023 SL, as the data controller, we commit to respecting the confidentiality of users' personal data and to use them according to the purposes for which they were collected.

We have implemented all appropriate technical and organizational security measures according to the nature of the data being processed and as required by data protection regulations.

A cookie is a small text file that websites install on the computer or mobile device of users who visit them. Cookies are generally used to make web pages work, or work more efficiently, as well as to gather information about their usage.

Cookies can be classified as follows:

According to the entity that manages them: first-party and third-party cookies;
By the period they remain active: session cookies and persistent cookies;
According to their purpose: technical, preference or customization, analytical, and marketing.

What cookies do we use?

The following table explains the cookies we use and their purposes:

Name	Function	Owner	Domain	Duration
__gsas	Behavioural advertising	Google	cofrai.com	389d
pvisitor	Analysis or measurement	Ahoy	cofrai.com	364d
AWSALBCORS	Strictly Necessary	Amazon Web Services	api.aws.parking.godaddy.com	session
_policy	Strictly Necessary	Complianz	cofrai.com	23h
traffic_target		None	cofrai.com	23h
city		None	cofrai.com	23h
country		None	cofrai.com	23h
caf_ipaddr		None	cofrai.com	23h
CONSENT	Strictly Necessary	Google	adsensecustomsearchads.com	session
AWSALB	Strictly Necessary	Amazon Web Services	api.aws.parking.godaddy.com	session
GoogleAdServingTest	Behavioural advertising	Google	cofrai.com	session
lander_type	Strictly Necessary	Cofrai	cofrai.com	23h
pwvisitor	Analysis or measurement	Ahoy	api.aws.parking.godaddy.com	session
_ga_QWCM2GDQ99	Analysis or measurement	Google	cofrai.com	729d
_ga	Analysis or measurement	Google	cofrai.com	729d
lawwwing-consent	Strictly Necessary	Lawwwing	cofrai.com	364d
lawwwing-consent-v2	Strictly Necessary	Lawwwing	cofrai.com	364d
lawwwing-session	Strictly Necessary	Lawwwing	cofrai.com	364d
_gcl_au	Behavioural advertising	Google	cofrai.com	89d

Deleting cookies

Most web browsers allow some control over most cookies through the browser settings. You can configure cookies on the most common browsers by following their instructions:

For information related to other browsers, you can visit the respective browser's website.

This Privacy and Cookie Policy was last updated on 27/08/2024, Cofrai 2023 SL reserves the right to update and modify certain aspects of it to adapt to legislative and jurisprudential developments, so we recommend reviewing it periodically.