Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

• Entity: VALL METALL, SLU
• Registered address: Urbanització Comes de Guem, Núm. 39, Edifici Sol Paradís, Bloc 3, Esc. B, 3è Pis, 1A Porta, Escaldes-Engordany, Principality of Andorra
• Contact email: info@vallmetall.ad

2. Applicable Legal Framework

This Privacy Policy is prepared in compliance with the Llei 29/2021, del 28 d'octubre, qualificada de protecció de dades personals (Andorran Data Protection Act) and any applicable implementing regulations. Where relevant, the policy also takes into account the principles of the EU General Data Protection Regulation (GDPR) as a reference standard.

3. Data We Collect

3.1 Contact Form Data

When you submit an enquiry through our contact form, we collect the following data:

• Full name
• Email address
• Telephone number (if voluntarily provided)
• Subject of enquiry
• Message content

3.2 Browsing and Technical Data

When you visit our website, we may automatically collect certain technical data, including:

• IP address (anonymised where technically feasible)
• Browser type and version
• Pages visited and time of visit
• Referring URL
• Device type

3.3 Cookie Data

See Section 8 (Cookie Policy) for details of cookies used on this website.

4. Legal Basis for Processing

• Consent: Where you have freely provided your personal data through our contact form or otherwise expressly consented to processing.
• Legitimate interest: For the purpose of improving our website, ensuring its security, and handling business communications.
• Contractual necessity: Where processing is required to take steps at your request prior to entering into a contract, or to perform a contract.

5. Purposes of Processing

Your personal data may be used for the following purposes:

• Responding to your enquiries and commercial communications
• Managing business relationships and pre-contractual discussions
• Operating and improving our website
• Complying with applicable legal obligations
• Statistical analysis (using anonymised or aggregated data only)

6. Data Retention

Personal data submitted via the contact form is retained for a maximum of 24 months from the date of last contact, unless a longer retention period is required by law or necessary for the performance of a contract.

Technical browsing data is retained for a maximum of 13 months from the date of collection.

Data processed in connection with contractual obligations is retained for the duration of the contract and for a period of 10 years thereafter, in accordance with Andorran commercial law requirements.

7. Data Sharing and Transfers

VALL METALL, SLU does not sell, rent, or trade personal data to third parties. Data may be shared in the following limited circumstances:

• With service providers acting as data processors (e.g., hosting, email delivery), bound by contractual confidentiality obligations
• Where required by Andorran or applicable law
• With the consent of the data subject

Any transfers of personal data outside the Principality of Andorra will be conducted in accordance with the applicable provisions of the Llei 29/2021 and only to jurisdictions that offer an adequate level of data protection.

8. Cookie Policy

8.1 What are Cookies?

Cookies are small text files placed on your device when you visit a website. They enable the website to function correctly and to gather limited statistical information about usage.

8.2 Cookies Used on This Website

• Strictly necessary cookies: Required for the website to function. No consent is required for these cookies.
• Analytical cookies: Used to understand how visitors interact with the website, using anonymised data only. These are only set with your consent.

8.3 Managing Cookies

You may disable or restrict cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of this website. For guidance on managing cookies, refer to your browser's help documentation.

9. Your Rights

Under the Llei 29/2021, you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): To request deletion of your personal data, subject to applicable legal obligations.
• Right to data portability: To receive your data in a structured, commonly used format.
• Right to object: To object to processing based on legitimate interests.
• Right to restriction: To request restriction of processing in certain circumstances.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at: info@vallmetall.ad

We will respond to all legitimate requests within 30 days. Where a request is particularly complex, we may extend this period by a further 60 days, in which case we will notify you accordingly.

10. Supervisory Authority

You have the right to lodge a complaint with the Andorran supervisory authority:

• Agència Andorrana de Protecció de Dades (APDA)
• Carrer Prat de la Creu, 36 - 38, Andorra la Vella, Principality of Andorra
• Website: www.apda.ad

11. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in law or our data practices. The date of the most recent revision will always be indicated at the top of this page. We encourage you to review this policy periodically.

12. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, please contact VALL METALL, SLU at: info@vallmetall.ad