Privacy Policy

Who is responsible for processing your data?

MAYMU – MAQUINARIA Y MULTIHUSILLOS SL

B95729174
Goitondo Behekoa Industrial Estate, Units 3 and 4 – Mallabia, 48269 Biscay,

For what purpose do we process your personal data?

In accordance with the provisions of EU Regulation 679/2016 and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, we inform you that the personal data you provide to us, as well as any data generated during the course of our relationship with you, are processed for the following purposes:

  • Data provided to formalize a purchase and/or a service:
    • Manage, process, deliver, and monitor the purchases and/or services provided.
    • Contact the user to complete the purchase process.
    • Conduct quality and customer satisfaction surveys.
    • Send the User personalized commercial communications about our products and services, through any means of contact provided.
    • Carry out analyses of the use of the Website and monitor users’ preferences and behavior.
    • Allow users to participate in promotional campaigns and/or prize draws.
    • Accounting, tax, and administrative management.

  • Data provided through contact with this entity:
    • Manage, process, and respond to your requests, inquiries, incidents, or questions.
    • The provision of products and services.
    • Carry out analyses of the use of the Website and monitor users’ preferences and behavior.

  • Data provided for participation in recruitment processes or unsolicited applications:
    • Evaluate your application in recruitment and selection processes.

How long will we retain your data?

The personal data provided will be retained until the data subject, or their legal representative, requests its deletion, and for as long as such data remain necessary—including the need to retain them during the applicable statutory limitation periods—for the purposes for which they were collected or recorded.

Data retention will be subject to MAYMU’s legal obligation to keep such data. Once these periods have elapsed, the data will be destroyed or erased, and the deletion, removal, or destruction process will be carried out in such a way that the information contained on the storage media cannot be recovered.

Legal Basis

The legal basis for processing your data is the consent provided by the data subject. This consent is obtained expressly and unequivocally through the completion and, where applicable, submission of paper or electronic documents and forms used to collect your data. All documents used by the entity to collect data for different purposes include information clauses in accordance with data protection regulations, and consent is expressly given through the signature of the data subject or by submitting the forms available on the website.

Processing is also lawful when it is necessary for the performance of a contract, the provision of a service to the data subjects, or the implementation of pre-contractual measures (Art. 6(1)(a) and (b) GDPR).

MAYMU is also authorized to process your data in order to comply with the legal obligations to which it is subject and to pursue its legitimate interests, provided that such interests do not override the interests or fundamental rights and freedoms of the data subjects.

If the legal basis for processing is consent, it may be withdrawn at any time.

To whom will your data be disclosed?

Your data will not be disclosed to any entity without your consent, except where such disclosure is required by law. In this regard, your express consent will be requested before your data are shared with any other entity.

As a consequence of the authorized purposes, your data may be disclosed to entities or individuals directly related to MAYMU and the services it provides. Likewise, your personal information may be made available to public authorities, judges, and courts for the purpose of addressing any liabilities arising from the processing, provided that such disclosures are authorized by law.

Your data may also be shared with companies that provide us with services such as consultancy, IT maintenance, marketing, training, or auditing. These entities will only have access to the personal information necessary to perform such services and will be bound by a data processing agreement requiring them to maintain confidentiality, refrain from using the information for any other purpose, and implement measures to ensure its integrity and availability.

No international data transfers are envisaged outside the European Union or to entities that do not comply with the data protection standards established by EU Regulation 679/2016.

What categories of data does MAYMU process?

The data processed are those necessary to fulfill the purposes authorized by the user.

  • To formalize a purchase and/or a service:
    • Identification data: first name, surname(s), and national identity document (ID number).
    • Contact details: email address, telephone number, and postal address.
    • Transactions involving goods and services: products and services purchased.
    • Financial and economic data: bank card details.
    • Browsing data.
  • Data provided through contact with this entity:
    • Identification data: first name and surname(s).
    • Contact details: email address.
    • Browsing data.

If the user provides data relating to other individuals, they declare that they have obtained those individuals’ consent and undertake to inform them of the contents of this Privacy Policy.

What are your rights?

Any individual has the right to obtain confirmation as to whether or not MAYMU is processing personal data concerning them.

Data subjects have the right to access their personal data and obtain a copy of the personal data being processed, to update such data, and to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

Under certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, MAYMU will cease processing the data, except where there are compelling legitimate grounds or where processing is necessary for the establishment, exercise, or defense of legal claims.

Under certain circumstances, as provided for in Article 18 of the GDPR, data subjects may request the restriction of the processing of their data. In such cases, MAYMU will process the data solely for storage purposes, unless the data subject has given consent or the processing is necessary for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for important reasons of public interest of the European Union or of a specific Member State.

As a consequence of exercising the right to erasure or the right to object to the processing of personal data in the online environment, data subjects have the right to be forgotten, in accordance with the case law of the Court of Justice of the European Union.

Under the right to data portability, data subjects have the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format and to transmit those data to another controller.

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except in the cases provided for in Article 22(1) of the GDPR.

Data subjects have the right to the erasure of their data when the purpose that justified the processing or collection no longer exists, when consent—where it is the legal basis for processing—is withdrawn, or for any of the other reasons set out in Article 17 of the GDPR. Erasure will be carried out by securely deleting data stored on automated media and physically destroying non-automated records.

How can these rights be exercised?

By submitting a written request to the addresses indicated in the heading.

What complaint mechanisms are available?

If you believe that your rights have not been adequately addressed, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD), whose contact details are as follows: Telephone: +34 900 293 183 / +34 900 293 621 Electronic Office: https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/inicioCiudadano.jsf Postal Address: C/ Jorge Juan, 6, 28001 Madrid, Spain.

Request Information with No Obligation


    All fields are required.

    In accordance with current data protection regulations, the personal data you voluntarily provide through this web form will be processed by MAYMU as the data controller for the purpose of responding to your request, query, complaint or suggestion, without any communication or transfer of data, and will be kept for the time necessary to respond to your request. The legal basis for this will be the consent of the data subject. You may exercise your rights of access, rectification, restriction of processing, erasure, portability and objection to the processing of your personal data by writing to maymu@maymusl.com. For further information, please consult our privacy policy at www.maymusl.com. We inform you of your right to withdraw your consent to the processing of your data at any time, without this affecting the lawfulness of the processing based on your consent prior to its withdrawal. Finally, we remind you of your right to lodge a complaint with the Spanish Data Protection Agency.