Privacy Policy

1. Data controller

In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation, Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights, and the applicable regulations on information society services, users are informed that the controller responsible for processing the personal data collected through this website is:

Controller	AREM-CNC TODOSTOK GROUP S.L.
Tax ID / Company ID	[Add NIF/CIF]
Registered address	C/ Comunicación Nº 5, 19200 Azuqueca de Henares, Guadalajara, Spain
Email	comercial@arem-cnc.com
Phone	+34 662 11 65 92 · +34 912 64 65 25
Website	https://arem-cnc.com/

2. Personal data we may process

AREM-CNC may process the personal data voluntarily provided by users through contact forms, email, telephone calls, quotation requests or any other channel available on the website.

The categories of data that may be processed include:

• Identification data, such as first name and surname.
• Contact details, such as email address, telephone number or professional address.
• Company details, job title, professional activity or information related to the request.
• Information freely included by the user in forms, messages or attached files.
• Technical browsing data, such as IP address, cookie identifiers, device, browser or security logs.

Users should avoid sending special category data or information that is not necessary for the purpose of their enquiry, such as health data, ideology, religion, sexual life, trade union membership, biometric data or third-party information without authorisation.

3. Purposes of processing

Personal data may be processed for the following purposes:

• To respond to enquiries, information requests or communications sent by users.
• To manage quotation requests, commercial proposals, orders or requested services.
• To maintain commercial, administrative or contractual relationships with clients and suppliers.
• To manage communications related to products, services, projects or technical enquiries.
• To comply with legal, tax, accounting or administrative obligations.
• To ensure website security, prevent misuse, cyberattacks or unauthorised access.
• To analyse website performance through cookies or similar technologies, where the user has given consent.
• To send commercial communications where prior consent exists or where there is a previous contractual relationship in accordance with applicable law.

4. Legal basis for processing

AREM-CNC will process personal data on the following legal bases:

Purpose	Legal basis
Responding to enquiries sent through forms, email or telephone.	User consent and legitimate interest in responding to the request.
Management of quotations, orders, services or commercial relationships.	Performance of pre-contractual or contractual measures.
Compliance with tax, accounting, commercial or administrative obligations.	Compliance with legal obligations.
Website security and prevention of misuse.	The controller’s legitimate interest in maintaining website security.
Use of non-essential analytical, advertising or personalisation cookies.	User consent.
Sending commercial communications.	User consent or previous contractual relationship under the terms permitted by the LSSI-CE.

5. Data retention

Personal data will be kept for the time necessary to fulfil the purpose for which it was collected and, subsequently, for the periods required by applicable law or for the time necessary to address any potential legal liabilities.

• Data sent through contact forms will be kept for the time necessary to respond to the enquiry.
• Data related to clients, suppliers, quotations, invoices or services will be kept for the applicable legal periods.
• Data processed on the basis of consent will be kept until the user withdraws that consent.
• Technical security data may be kept for the time necessary to prevent incidents or address liabilities.
• Data derived from cookies will be kept as indicated in the Cookie Policy.

6. Data recipients

As a general rule, AREM-CNC will not disclose personal data to third parties unless required by law, necessary for the provision of the requested service or supported by a valid legal basis.

Certain providers may have access to data when providing services required for the operation of the website or the activity of AREM-CNC, such as web hosting, email, technical maintenance, consultancy, security tools, analytics, administrative management or IT support.

Where applicable, these providers will act as processors and must process the data in accordance with AREM-CNC’s instructions and current regulations.

7. International data transfers

Some technology providers used for the operation of the website, email, analytics, security or related services may be located outside the European Economic Area.

Where international data transfers take place, they will only be carried out when there is an appropriate legal basis, an adequacy decision, suitable safeguards, standard contractual clauses approved by the European Commission or another valid mechanism under the GDPR.

8. Users’ rights

Users may exercise the following rights under the terms established by current regulations:

• Access: to know what personal data AREM-CNC processes.
• Rectification: to request the correction of inaccurate or incomplete data.
• Erasure: to request the deletion of data when it is no longer necessary.
• Objection: to object to the processing of data in certain cases.
• Restriction: to request the restriction of processing under certain circumstances.
• Portability: to receive the data in a structured, commonly used and machine-readable format where applicable.
• Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, users may send a request to: comercial@arem-cnc.com, indicating the right they wish to exercise and providing, where necessary, sufficient information to verify their identity.

If users consider that the processing of their personal data does not comply with applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency through its official electronic office or official communication channels.

9. Data security

AREM-CNC applies technical and organisational measures designed to protect personal data against loss, misuse, unauthorised access, alteration or improper disclosure.

These measures are reviewed according to the nature of the processed data, the context of processing, existing risks, the state of the art and the resources available.

However, no system connected to the Internet can guarantee absolute security. Users should therefore use the website responsibly and avoid sending unnecessary or especially sensitive information.

10. Forms and communications

The website forms are intended to allow users to contact AREM-CNC, request information, make enquiries or send documentation related to their professional or commercial needs.

By submitting a form, the user declares that the data provided is true, up to date and that they have sufficient authorisation to communicate any information relating to third parties, where applicable.

11. Commercial communications

AREM-CNC will only send commercial communications by electronic means where the user has given prior consent or where there is a previous contractual relationship and the communication refers to products or services similar to those previously contracted, under the terms permitted by current regulations.

Users may object to or unsubscribe from this type of communication at any time, using the means provided in each communication or by sending a request to comercial@arem-cnc.com.

12. Cookies and similar technologies

This website may use technical, functional, analytical, personalisation or marketing cookies, either first-party or third-party, depending on the configuration chosen by the user.

Users can obtain more information about the use of cookies, modify their preferences or withdraw their consent by accessing the Cookie Policy or by using the cookie settings panel available on the website.

13. Children’s data

This website is not specifically directed at minors. AREM-CNC does not knowingly request personal data from minors without the authorisation of their legal representatives where such authorisation is required under applicable regulations.

If a person considers that a minor has provided personal data through this website without appropriate authorisation, they may notify comercial@arem-cnc.com so that appropriate measures can be taken.

14. Accuracy and updating of data

The user guarantees that the data provided is accurate, complete and up to date. The user will be responsible for any damage or loss caused as a result of providing false, inaccurate, incomplete or outdated data.

AREM-CNC may request the update or confirmation of data where necessary to maintain the accuracy of the information processed.

15. Changes to the Privacy Policy

AREM-CNC reserves the right to modify this Privacy Policy in order to adapt it to legal developments, changes in business activity, criteria issued by supervisory authorities, technical improvements or modifications to the services offered through the website.

When significant changes are made, the revision date will be updated and, where appropriate, users will be informed through the available means.

Last updated: 23 September 2026.