Privacy Policy

This Privacy Policy explains how Naftiliaki Poseidon collects, uses, and safeguards your personal data when you interact with our website and services, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish law.

Data Controller

Controller: Naftiliaki Poseidon
Addresses:
Barcelona — Muelle Príncipe de España, Edificio Tersaco S/N, 08039 Barcelona, Spain
Algeciras — C/ Velero 10, Pl. Los Palmones, 11379 Los Barrios, Andalucía, Spain
Contact email: watermanagement@naftiliakiposeidon.com
Website: https://naftiliakiposeidon.com

Purposes of Processing

Personal data collected through forms, cookies, or other means on our website are processed for the following purposes:

• Managing contact requests, enquiries, and information requests.
• Sending communications related to the services we offer.
• Carrying out statistical analysis on site usage to improve functionality.
• Personalising content and enhancing the user browsing experience.
• Running targeted advertising campaigns via platforms such as Meta Pixel and Google Ads.

Legal Basis

The legal bases for processing your data are:

• Consent expressly granted by ticking the relevant boxes in our forms and/or cookie banner.
• Performance of a contract or the application of pre-contractual measures when you request quotes or services.
• Compliance with legal obligations where applicable (e.g., tax or accounting duties).

Data Retention

We retain data for as long as necessary to fulfil the purposes for which they were collected, while the relationship remains active, or until you withdraw your consent. Data may be kept for the periods required by applicable laws to meet legal or tax obligations.

Recipients

Personal data will not be shared with third parties except when required by law or when necessary for technical reasons (e.g., web hosting, email providers, analytics and advertising platforms, CRM tools, or form providers such as Typeform). In such cases, these providers act as data processors under appropriate data processing agreements and must comply with data protection regulations.

International Data Transfers

If any service providers are located outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place (such as the European Commission’s Standard Contractual Clauses) to protect your data.

User Rights

You may exercise the following rights under GDPR:

• Access your personal data.
• Request rectification of inaccurate data.
• Request erasure of data when they are no longer necessary.
• Request restriction of processing.
• Object to processing.
• Request data portability to another controller.
• Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, email watermanagement@naftiliakiposeidon.com with the subject “Data Protection”, including proof of identity and the right you wish to exercise.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or with your local supervisory authority.

Security Measures

We implement appropriate technical and organisational measures to ensure the security of your personal data and to prevent alteration, loss, unauthorised processing, or access.

Cookies

This website uses first-party and third-party cookies for technical, analytical, and advertising purposes. On your first visit you may accept or configure cookies via the banner. For more details, please refer to our Cookies Policy.

Updates to this Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

Effective date: ____________