Privacy Policy
Last updated: May 2026
1. Data Controller
Name: Electronic and Opto-Mechanic Engineering EXOM S.L. (hereinafter "EXOM")
Registered address: Polígono Industrial Errotatxu, C-7, 48993 Getxo, Bizkaia (Spain)
Tax ID: B-95936852
Phone: (+34) 623 10 88 83
Email: info@exomengineering.com
Commercial Registry: Commercial Registry of Bizkaia, Volume 5808, Page 192, Sheet BI-72483
2. Data We Collect
Depending on how you interact with our website, we may collect the following personal data:
- Contact data: first and last name, company, email address, phone number – when you submit the contact form.
- Browsing data: IP address, browser type, pages visited, time spent, cookie data (see our Cookies Policy).
- Client portal data: login credentials and usage data for the private area.
We do not collect special categories of personal data (Art. 9 GDPR) through this website.
3. Purpose and Legal Basis
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and contact requests | Legitimate interest / pre-contractual steps (Art. 6(1)(b) and (f) GDPR) |
| Managing the client portal | Performance of a contract (Art. 6(1)(b) GDPR) |
| Website analytics and improvement | Consent (Art. 6(1)(a) GDPR) / Legitimate interest (Art. 6(1)(f) GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
4. Retention Period
Contact data is retained for as long as necessary to handle your request and thereafter for the applicable statutory limitation periods. Client data is kept for the duration of the contractual relationship and the subsequent legal retention periods. Browsing data is retained as set out in our Cookies Policy.
5. Recipients and International Transfers
Your data may be shared with:
- Technology service providers acting as data processors (web hosting, email, databases) under a data processing agreement with appropriate security measures.
- Public authorities where required by applicable law.
Some service providers may be located outside the European Economic Area. In such cases, EXOM ensures that adequate safeguards are in place (European Commission standard contractual clauses or other mechanisms recognised under the GDPR).
6. Your Rights
Under the GDPR, you have the right to:
- Access: obtain information about the personal data we process about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): request deletion of your data when it is no longer necessary.
- Restriction of processing: request that we suspend processing under certain circumstances.
- Data portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Not to be subject to automated individual decision-making with significant effects.
To exercise your rights, please contact us at info@exomengineering.com with a copy of your identity document. We will respond within one month (extendable in complex cases).
If you believe the processing of your data does not comply with data protection law, you may lodge a complaint with the competent supervisory authority. In Spain: Agencia Española de Protección de Datos (AEPD), www.aepd.es.
7. Security
EXOM implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure, in accordance with Art. 32 GDPR.
8. Changes to This Policy
EXOM reserves the right to update this Privacy Policy to reflect changes in legislation or business activity. We recommend reviewing it periodically. The current version will always be available on this website.
9. Contact
For any questions about the processing of your personal data, please contact us at:
info@exomengineering.com