Last updated: November 18, 2025

1. DATA CONTROLLER

The entity responsible for the processing of personal data carried out through the website is: TAVIL-IND, SAU
Address : Pal de Poliger Sud Industrial Park, Sector 1 (17854) Sant Jaume de Llierca (Girona)
NIF : A17223116
Telephone : 972 290 105
Email : privacy@tavil.net
Registration details in the Girona Mercantile Registry : volume XX, folio XX, sheet XX, entry XX.

TAVIL-IND, SAU reserves the right to modify this privacy policy at its own discretion, or due to a legal, jurisprudential, or doctrinal change by the competent supervisory authorities. Use of the website after such changes will imply acceptance of them.

This website may contain links to external pages. TAVIL-IND, SAU assumes no responsibility for the content or any other aspect related to these external pages or websites.

2. PERSONAL DATA

TAVIL-IND, SAU will collect only the personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, as appropriate in each case.

The user guarantees the authenticity of the data communicated and will be solely responsible for any false or inaccurate statements.

3. PURPOSES OF THE PROCESSING

Personal data will be processed by the data controller for the following purposes, as applicable in each case:

• Consultation and, where appropriate, investigation and response to messages received.
• Respond to people who have contacted TAVIL-IND, SAU with potential interest in becoming their customers or suppliers.
• Commercial and administrative management of the existing contractual relationship with its clients and suppliers, which will include the issuance and management of budgets, orders and other contractual documentation, as well as the issuance and control of collection and payment of invoices.
• Maintaining the contractual relationship with the interested party or with the company or organization in which he/she works or collaborates.
• Review and evaluation of the information and/or documentation provided for the purpose of participating in a selection process. If TAVIL-IND, SAU is interested , they will contact the applicant to assess their candidacy.
• Send communications relating to news, promotions, contests, raffles, events and/or corporate information of TAVIL-IND, SAU and its products and/or services.
• Prevention, detection and control of abuses and frauds committed on or through the website.
• Management of compliance with legally stipulated obligations.

4. LEGITIMACY OF THE PROCESSING

The legal basis for processing personal data will be compliance with a legal obligation, if it has been provided for the following purposes:

• Administrative management of the existing contractual relationship with its clients, which will include the issuance of invoices.
• Management of compliance with legally stipulated obligations.

The processing of personal data for the purposes mentioned will be necessary for TAVIL-IND, SAU to comply with the obligations imposed on it by applicable legislation.

Furthermore, the legal basis for processing personal data will be the application of the requested pre-contractual measures, the interested party’s intention to enter into a contract with the data controller, or the execution of the contract, if the data has been provided for the following purposes:

• Respond to people who have contacted TAVIL-IND, SAU with potential interest in becoming their customers or suppliers.
• Commercial and administrative management of the existing contractual relationship with its clients and suppliers, which will include the issuance and management of budgets, orders and other contractual documentation, as well as the issuance and control of collection and payment of invoices.
• Review and evaluation of the information and/or documentation provided for the purpose of participating in a selection process. If TAVIL-IND, SAU is interested , they will contact the applicant to assess their candidacy.

The processing of personal data for the aforementioned purpose is necessary to be able to apply the requested pre-contractual measures and to be able to sign and execute the contract between TAVIL-IND, SAU and its clients and/or suppliers.

Finally, the legal basis for processing personal data will be the legitimate interest of the data controller, if it has been provided for the following purposes:

• Consultation, and where appropriate, investigation and response to messages received. The legitimate interest is to properly assist individuals who have voluntarily contacted the company.
• Maintaining the contractual relationship with the data subject or with the company or organization where they work or collaborate. The legitimate interest of the data controller is recognized by applicable regulations.
• To send communications regarding news, promotions, contests, raffles, events and/or corporate information from TAVIL-IND, SAU and its products and/or services. The legitimate interest of the data controller is recognized by applicable regulations.
• Prevention, detection, and control of abuse and fraud committed on or through the website. The legitimate interest is based on the data controller’s desire to maintain the website as a secure site.

5. RECIPIENTS

TAVIL-IND, SAU will not communicate personal data to third parties, except in the case of legal obligation and contracted third parties.

TAVIL-IND, SAU intends to transfer data internationally to providers located in countries that do not have regulations equivalent to European law for the processing of personal data. For information on the guarantees and safeguards applied to protect user privacy, please contact the data controller at privacy@tavil.net.

6. STORAGE PERIODS

If the legal basis for processing is the user’s consent, the data will be kept until that consent is revoked.

If the legal basis for processing consists of compliance with legal obligations, contractual obligations, application of pre-contractual measures and the legitimate interest of the data controller, personal data will be kept for as long as necessary to manage the purposes of processing.

In any case, personal data will be kept for the entire period of time that the data controller may be held liable as stipulated by the applicable law, proceeding, where appropriate, to block the data until the corresponding limitation period has expired.

7. USER RIGHTS

We inform you that at any time you can exercise the rights of access, rectification, erasure, limitation, opposition and portability with respect to your personal data provided for in the regulations on data protection, by sending a letter to the postal address Polígono Industrial Pal de Poliger Sud, Sector 1 (17854) Sant Jaume de Llierca (Girona) or to the email address.

Specifically, you can exercise the rights described below:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• To exercise the limitation of the processing of data when any of the conditions provided for in the data protection regulations are met.
• In certain circumstances and for reasons related to their particular situation regarding the processing of their data, data subjects may object to such processing. In these cases, TAVIL-IND, SAU will cease processing the data, except for compelling legitimate grounds, or for the establishment, exercise, or defense of legal claims.
• To obtain human intervention, to express their point of view and to challenge automated decisions made by TAVIL-IND, SAU , where applicable.
• Request the portability of your data.

If you disagree with the processing of your data, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).