Skip to content

Privacy policy

At Nupinsur we process your personal data with respect and in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD). In this policy we explain who processes your data, for what purpose, on what legal basis, for how long, to whom it is disclosed and what your rights are.

1. Who is the controller of your data?

  • Controller: Nuevas Pinturas del Sur, S.L. (Nupinsur)
  • Tax ID (CIF): B23550965
  • Postal address: Pol. Ind. Los Rubiales, Fase II, calle 4, 23700 Linares, Jaén
  • Email: info@nupinsur.com
  • Phone: 953 37 00 96

2. For what purpose do we process your data, on what legal basis and for how long?

We only process the data you provide yourself, for the purposes set out below:

Enquiries and requests for information

  • Purpose: To answer the enquiries you send us through the contact form, by email, by phone or on social media and, where applicable, to send you the information you ask for.
  • Legal basis: Your consent when you send us the enquiry (Art. 6(1)(a) GDPR) and, where the enquiry comes before entering into a contract with us, the application of pre-contractual measures at your request (Art. 6(1)(b) GDPR).
  • Retention: The time needed to deal with your enquiry and then up to one year, unless a business relationship begins.
  • Is providing it mandatory? To reply, we need at least your name and a means of contact.

News and offers newsletter

  • Purpose: To send you our news and offers by email, if you have subscribed.
  • Legal basis: Your consent (Art. 6(1)(a) GDPR and Art. 21 LSSI). You can unsubscribe at any time using the link in each email.
  • Retention: Until you unsubscribe.
  • Recipients: Mailing service provider: MailPoet (Automattic Inc.), installed on this website; emails are sent from our own server.
  • Is providing it mandatory? We only need your email address.

Customers and invoicing

  • Purpose: To manage the relationship with our customers: provision of the service or sale, invoicing, collections and after-sales service.
  • Legal basis: Performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal tax and accounting obligations (Art. 6(1)(c) GDPR).
  • Retention: For as long as the relationship lasts and then for the legal periods: six years for accounting records (Art. 30 of the Spanish Commercial Code) and four years for tax purposes (Spanish General Tax Law).
  • Recipients: Tax authorities, banks and payment institutions for collections and, where applicable, our tax and accounting advisers as data processors.
  • Is providing it mandatory? Invoicing data is required by law.

Once the retention periods have expired, the data is blocked for as long as liability arising from the processing may be claimed and is then erased.

We do not make automated decisions or create profiles with your data; the visitor statistics described in the Cookie policy are aggregated and are only collected if you accept them.

3. What data do we process?

Identification and contact details (name, email, phone) and any data you include in your messages or requests. We do not ask for special categories of data (health, beliefs, ethnic origin…); please do not include them in your messages.

If you give us data about other people (for example, other people in your company or family), you undertake to have informed them and to have their consent.

4. To whom do we disclose your data?

We do not pass your data on to third parties, except where required by law (for example, to the tax authorities or the courts) or where necessary to provide the service you request, as indicated for each purpose.

For the website and our services to work, we rely on providers that process data on our behalf (data processors), with whom we have signed the contracts required by Article 28 GDPR:

  • Web hosting: 10dencehispahard, S.L. (CDmon), with servers in the European Union.
  • Website design, development and maintenance: VeoVirtual (Fernando Martínez Marín).

In addition, the website uses these third-party services:

5. International transfers

Some of the providers listed may process data outside the European Economic Area. In those cases, the transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework, for participating companies) or on the standard contractual clauses approved by the European Commission (Art. 46 GDPR), which guarantee a level of protection equivalent to that in Europe.

6. What are your rights?

You have the right to:

  • Access: find out whether we process your data and obtain a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: ask us to delete your data when, among other reasons, it is no longer needed.
  • Restriction: ask us to keep your data only for the exercise or defence of legal claims.
  • Objection: object to our processing of your data on grounds relating to your particular situation.
  • Portability: receive the data you have given us in a structured, commonly used format, or have us transmit it to another controller.
  • Withdraw your consent at any time, without affecting the lawfulness of prior processing.
  • Not to be subject to decisions based solely on automated processing.

You can exercise them by writing to info@nupinsur.com or by post to Pol. Ind. Los Rubiales, Fase II, calle 4, 23700 Linares, Jaén, Spain, stating the right you are exercising and proving your identity. We will reply within one month. On the website of the Spanish Data Protection Agency you will find template forms to exercise your rights (opens in a new tab).

If you consider that we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (opens in a new tab) (C/ Jorge Juan, 6, 28001 Madrid). We would be grateful if you contacted us first so that we can try to resolve it.

7. Minors

The website is not aimed at children under 14. If you are under that age, do not give us any data without the consent of your parents or guardians (Art. 7 LOPDGDD).

8. Accuracy and security of data

You guarantee that the data you give us is true and undertake to tell us about any changes. For our part, we apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration, including the encrypted (HTTPS) connection of the website.

9. Changes to this policy

We may update this policy to adapt it to legal changes or changes in our services. We recommend that you review it periodically; the date of the last update appears at the end.

Last updated: 10 November 2026.

This text is a translation provided for information purposes. In the event of any discrepancy, the Spanish version shall prevail.