Privacy policy
At Grupo MASA, we are committed to ensuring that the processing of users' personal data is carried out transparently and securely, so that our users know at all times how we process their personal data and how they can exercise their rights and freedoms.
By browsing the website www.masa.eu (hereinafter, the “Website”), or by accessing, requesting information or completing any of its forms, MASA CAPITAL, SL collects your personal data as a user (the “User(s)”) in accordance with this privacy policy (the “Privacy Policy”) and any other that may replace it in the future.
Any User who does not agree with the Privacy Policy or the Legal Notice should refrain from accessing, requesting information or contracting any of the products or services offered on the Website.
1. Data controller.
2. What personal data do we process?
3. For what purpose and under what legitimacy do we process Users' personal data?
4. How long do we process and retain the User's personal data?
5. Who can access the User's personal data?
6. What security measures does Grupo MASA apply?
7. What rights can Users exercise?
8. Changes to the Privacy Policy.
9. Contact.
1. Data controller.
1.1. The entity responsible for collecting and processing your personal data on the Website is MASA CAPITAL, SL , with tax identification number B-03118767, registered office at Calle Princesa, 2, 1º – 5, 28008, Madrid, and contact email address LOPD@masa.eu. Grupo MASA is duly registered in the Mercantile Registry of Madrid in Volume 29566, Folio 160, Page 532110, Section 8 and Entry I/A 1.
2. What personal data do we process?
2.1. The MASA Group collects and processes various information about Users. This information may, in many cases, constitute Users' personal data.
This information will be considered personal data when it can directly identify or allow us to identify a natural person, such as first and last names or contact information.
2.2. This personal data may have been provided directly by the User, when interacting on the Website or completing one of the available forms.
2.3. Specifically, the personal data that may be processed by Grupo MASA on the Website consists of Users' contact information, including their first and last name, telephone number, and email address.
2.4. Grupo MASA may also record your visits to the Website and its links, or when you click on content, interact with, or otherwise use the Website, through cookies and other similar technologies. For more information, Users can refer to our Cookie Policy.
2.5. We remind you that Users are responsible for ensuring that the personal data they provide is true and accurate, and they undertake to notify us of any changes or modifications. Any loss or damage caused to the Website, the MASA Group, or any third party by providing erroneous, inaccurate, or incomplete information will be the User's responsibility.
2.6. Failure to provide the data deemed necessary may make it impossible to process the information request or, in general, process the requests submitted by the User.
3. For what purpose and under what legitimacy do we process Users' personal data?
3.1. MASA Group processes Users' personal data for various purposes, depending on the actions they perform on the Website. Below, we indicate the specific purposes for which we process Users' personal data, as well as the legal basis that legitimizes its use in each case:
(a) Attention to queries and requests made.
Legal basis: The User's consent when directing inquiries to Grupo MASA for the handling of requests through the various contact channels and Grupo MASA's legitimate interest in processing and managing the User's inquiries.
Grupo MASA may process the User's personal data to address any queries the User may submit when contacting us through any of the customer service channels available to the User, in relation to the products or services offered or contracted with Grupo MASA.
(b) Compliance with legal obligations and requirements of various organizations.
Legal basis: Compliance with legal obligations applicable to the MASA Group.
MASA Group will also process the User's personal data to comply with any applicable and enforceable legal obligations and to respond to requests from any agency, court, or public administration.
(c) Management of the Website and analysis of its use.
Legal basis: Legitimate interest in analyzing the use of the Website, to improve the services provided to Users and offer them greater security.
MASA Group may also process the User's personal data by conducting analyses, studies, statistics, surveys, usage metrics, market trend analysis, and using data for fraud prevention, either by itself or through third parties. To the extent possible, the information used for this purpose will be aggregated at a statistical level, without identifying the User.
3.2. MASA Group will not make automated decisions based solely on the automated processing of the User's personal data, without human intervention, that produce legal effects or significantly affect Users, which may fall within the assumptions provided for in Article 22 of Regulation 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data, as well as any regulations that complement or replace it. Nor does it carry out complex or automated profiling. Any automated decision or complex profiling will be subject to the explicit, express, and separate consent of the User.
4. How long do we process and retain the User's personal data?
4.1. MASA Group will not store the User's personal data for longer than necessary to fulfill the aforementioned purposes.
4.2. Subsequently, your data will be retained for the legally applicable periods in each case, taking into account the type of data and the purpose of the processing. Furthermore, once the purposes have been fulfilled, Grupo MASA will retain your personal data duly blocked, to the extent that Grupo MASA may incur liability or as otherwise required by applicable regulations.
5. Who can access the User's personal data?
5.1. Grupo MASA will not grant access to the User's personal data to third parties other than those indicated in this Privacy Policy . Specifically, such access will occur in the following cases:
(a) Group of companies.
Grupo MASA may share Users' personal data with entities within its group of companies listed in the following hyperlink: https://masa.eu/empresas-del-grupo/
The purposes of the communication are as follows:
– For internal administrative and group management purposes, based on the legitimate interest of Grupo MASA established in the applicable regulations.
– To the extent that any of the requests you make relate to other companies in the group, for the purpose of addressing the User's request, based on our legitimate interest and the execution of the request made.
– To provide auxiliary services necessary for the correct execution of the services offered on the Website.
(b) Service providers.
MASA Group may use other companies to provide certain services under its guidelines, for example, customer service, debt collection, sales, consulting, auditing, or IT maintenance.
MASA Group guarantees that, in such cases, these third parties will have limited access to the Users' personal data to the extent necessary to perform the assigned tasks, will sign a data processing contract or the commitments required in each case in accordance with current regulations, and will be obligated not to disclose the information or use it for purposes other than those of providing the corresponding service.
(c) Disclosures required by law.
MASA Group may disclose Users' personal data when required to do so by law, in a judicial proceeding, to investigate suspicious activity, or to otherwise protect its own rights and those of Users.
5.2. In cases where Grupo MASA works with service providers located outside the European Economic Area, it will implement the necessary safeguards and guarantees with said service providers, in accordance with the regulations applicable at any given time, prior to carrying out the international data transfer (e.g., checking the existence of adequacy decisions, signing standard contractual clauses, conducting risk/impact analyses of the transfer).
5.3. You can request a copy of these safeguards and guarantees at any of the addresses indicated in this Privacy Policy.
6. What security measures does Grupo MASA apply?
6.1. The MASA Group will adopt the necessary technical and organizational measures to guarantee the confidentiality, integrity, and security of personal data, and to prevent its loss, alteration, unauthorized processing, or access, taking into account the state of the technology and the nature of the data stored. Furthermore, the MASA Group periodically monitors its systems to detect potential vulnerabilities and attacks.
6.2. However, Users are aware that Internet security is not impregnable and that there is no guarantee that personal data cannot be accessed, disclosed, altered, or destroyed if any of the security measures implemented are breached.
7. What rights can Users exercise?
7.1. In accordance with applicable law, the User may request the exercise of their rights to access, correct, or delete their personal data, restrict processing, object to processing, and to data portability, as well as withdraw their consent. Specifically, Users have the following rights:
Access to data: The User may request access to their personal data and the processing being carried out by Grupo MASA at any time, along with a copy of the information processed.
Data rectification: The User may request the modification of their personal data when it is inaccurate or incomplete.
Deletion of data: The User may request the deletion of his or her personal data if: (i) they are no longer necessary for the purposes for which they were collected or otherwise processed, (ii) he or she withdraws his or her consent, (iii) when he or she understands that they have been processed unlawfully or (iv) it is otherwise legally established.
Limitation of processing: The User may request the limitation of the processing of their personal data, in particular, while contesting the accuracy of their personal data, when they understand that the processing is unlawful, when their personal data are no longer necessary for the purposes for which they were collected, but are necessary for the formulation, exercise or defense of legal claims, or in case of opposition while we verify the applicability of their right.
Objection to processing: The User may object to the processing of their personal data, for reasons related to their particular situation, when their personal data is processed based on legitimate interest, including profiling. In such a case, Grupo MASA will be required to stop processing your personal data, unless there are overriding legitimate grounds or your personal data is necessary for the formulation, exercise, or defense of legal claims.
Portability: The User may request to receive their personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller, when the processing of their personal data is based on consent or the execution of a contract and the processing is carried out by automated means.
Withdrawal of consent: The User may also withdraw the consent given at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent prior to its withdrawal.
7.2. The User may exercise these rights at any time by sending a communication clearly identifying the right being exercised, either by mail to the Grupo MASA addresses indicated in this Privacy Policy or via the following email address: LOPD@masa.eu
7.3. If necessary for the unequivocal identification of the User, Grupo MASA may request a copy of the User's ID, passport, or other valid identification document.
7.4. In any case, Users may also file a complaint with the competent supervisory authority, which, in the case of Spain, is the Spanish Data Protection Agency (www.aepd.es).
8. Changes to the Privacy Policy.
8.1. Grupo MASA reserves the right to modify this Privacy Policy as a result of carrying out new processing of personal data, or the modification of existing processing, as well as in accordance with new legislative or regulatory requirements, for security reasons or in order to adapt this policy to the instructions of the supervisory authorities in matters of data protection or to new processes.
8.2. Whenever significant changes are made to this Privacy Policy , Grupo MASA will duly inform Users through the Website to offer them the possibility of reviewing the changes and, if necessary, accepting them before they become effective.
9. Contact.
9.1. For any questions or queries regarding this Privacy Policy , please do not hesitate to contact us through the Grupo MASA postal address provided in this Policy, the Website forms, or you can contact the data protection officer at the following email address: LOPD@masa.eu
