Privacy policy

Basic information on Data Protection
Data Controller ERREKA (Co. Tax I.D.: ES-F20025268)
Purposes Offer products and services from our different lines of work (entrances, fastening solutions and plastics) Provide contact tools between ERREKA and interested and related persons, and respond to requests and petitions Inform, organize and disseminate ERREKA activities Send informative and commercial communications related to our products and services Manage and analyse the use of our website and our presence on social networks
Legitimization Need for data processing for the management of our products and services (contractual or pre-contractual relationship according to article 6.1.b of the GPRD) Express consent of the user (GPRD art. 6.1.a) Legitimate interest of ERREKA (GPRD art. 6.1.f)
Recipients No data is transferred to third parties, except when legally required
Rights You can request to exercise your rights related to the protection of your personal data at Bº Ibarreta s / n, 20577 Antzuola (Gipuzkoa), telephone 943786150, email

1. Responsible for the treatment

“Matz-Erreka, S. Coop.”, Hereinafter “ERREKA“Or”Data Controller“:

NIF: ES-F20025268

Address: Bº Ibarreta, s / n

Town: 20577 Antzuola (Gipuzkoa)

Phone: 943786150


2. Applicable legislation

The basic regulations on personal data protection applicable to data processing carried out by ERREKA is:

  1. EU Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of individuals with regard to the processing of personal data and the free circulation of these data (“GPRD”).
  2. Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights (“Data Protection Act”).
  3. Their respective supplementary and implementation regulations.

3. Websites, APPs and social media channels

The main official website of GRUPO ERREKA is located at

The main official channels of the GRUPO ERREKA on the social and professional networks are:

For the purposes of this Privacy Policy, hereinafter the official website of ERREKA, its mobile applications (“APPs”) and official channels in social networks will all be called, “the website”, except where otherwise specified.

In compliance with current regulations on Personal Data Protection, users are informed that personal data provided by any means located on the website, APPs or official channels in social networks of ERREKA (via email, forms, private areas, etc.), or as a consequence of their use, may be incorporated into data processing systems by ERREKA.

The purposes of data processing that may occur through the ERREKA website are:

  1. Offer our products and services from our different lines of work (entrances, fastening solutions and plastics), and related activities.
    Main legitimate legal grounds: Necessity of data processing for the management of our products and services (“contractual or pre-contractual relationship” according to article 6.1.b of the GPRD)
  2. Provide contact tools between ERREKA and interested and related persons, and respond to requests and petitions; send informative and commercial communications related to our products and services.
    Main legitimate legal grounds: Consent of the person concerned (GPRD art. 6.1.a), when you provide your data for the following purposes
  3. Inform, organize and disseminate the activities and initiatives of ERREKA, or in which ERREKA participates; manage and analyse the use of our website and our presence on social networks.
    Main legitimate legal grounds: ILegitimate interest of the Data Controller (GPRD art. 6.1.f)

5. Conservation period

The personal data provided will be kept for the time necessary to fulfil the purpose for which they are collected, determine the possible responsibilities that may arise from the purpose, or during the period that the applicable regulations establish in each case (accounting, tax, mercantile, etc.), after which they will be deleted adopting the necessary security measures to guarantee their confidentiality.

6. Duty of secrecy

ERREKA is committed to the privacy and protection of user data. Your personal data will be treated confidentially and complying with this regulation. Employees at ERREKA have been expressly informed about their duty of professional secrecy.

7. Collection of personal data

The Data Controller does not require you to provide personal data to access the website, however, on the website there are forms (contact, registration, subscriptions to newsletters, etc.) and similar utilities which require the user to provide personal data, mostly identification or contact information. The user provides their personal data freely and voluntarily. ERREKA does not request more personal information than that necessary to carry out the consultation or the requested service.

The user who sends / includes any type of content (data, documents, texts, videos, sound, photographs, graphics, messages or other material) declares and guarantees to do so in a way that complies with the conditions expressed herein and the current legislation. The user who includes personal data of third parties declares that they have their express consent for their treatment.

The user is solely responsible for the veracity, correctness and legitimate treatment of the data included, exonerating ERREKA from any responsibility in this regard. Users guarantee and respond, in any case, to the accuracy, validity and authenticity of the personal data provided, and undertake to keep this information duly updated. Non-completion or erroneous completion of fields indicated as mandatory in the forms or similar tools on the website may result in the Data Controller being unable to meet the request of the user.

The Data Controller will collect personal data in an appropriate way, in keeping with the purposes, utilities, services or provisions included on its website, in a determined, explicit and legitimate way, therefore in no case shall fraudulent, unfair, illegal or illicit means be used that endanger the rights of users

Sending information through this website necessarily entails express authorization for the data processing described in this privacy policy and in the website terms and conditions.

8. Collecting data from minors

The services of the Data Controller are not aimed at minors. In the event that some of our services were specifically directed to minors, the Data Controller would request the consent of the parents or guardians for the collection of personal data or, where appropriate, for the treatment of the data.

9. Registrations and subscriptions

In the case of subscription to newsletters, users may request the withdrawal of said services at any time they wish by directing a request to the email address or using any other means that the Data Controller provides for this purpose, such as the mechanism called “Unsubscribe”, located at the bottom of the newsletters themselves.

10. Resumes

Users who provide their curriculum vitae through this website, forms, email or similar mechanisms, grant their express consent for the inclusion of their data in the data processing area called “Personnel Recruitment and resumes”. Your data may be used so you can participate in future personnel recruitment processes by the Data Controller. Likewise, your data may be transferred to external companies the Data Controller hires to carry out personnel recruitment processes.

This website may offer links to social networks and external web sites and channels, such as Facebook, Twitter, YouTube and Instagram, among others. ERREKA assumes no responsibility in relation to these linked sites. The user who accesses social networks and external websites and channels, related to ERREKA, from the links located on this website or in any other way, is previously and expressly informed that the conditions of use, privacy policies, policies cookies and any conditions or regulations depend on the entities responsible for said social networks and web sites and channels, and never on ERREKA.

12. ERREKA’s presence on social networks

GRUPO ERREKA has official profiles on social networks, with the main purpose of disseminating its products, services and activities. The publications offered through these channels will be for guidance only.

By logging onto the profiles of GRUPO ERREKA with their social network profile, the user gives their express consent to ERREKA to process their personal data in accordance with this Privacy Policy.

The information and personal data voluntarily provided by the user through the social networks of GRUPO ERREKA may be processed in order to contact the user and respond to the queries and requests made, send informative and commercial communications, manage events, contests , invitations and similar activities, ascertain the opinion or the evaluation of the user about GRUPO ERREKA and its publications, and manage, in general, the presence of GRUPO ERREKA on social networks.

Users are informed that the information and content (data, texts, videos, sound, photographs, graphics, comments, messages or other material) that they publish through the ERREKA GROUP social networks (including, where appropriate, personal data) may be made publicly available to other users of social networks.

From the configuration of the user profile of each social network, the user can configure what information they wants to make public in each case, see the permissions they have granted, delete or deactivate them, and manage their publications according to their criteria and the usage rules of each social network.

The user will be solely responsible for ensuring that their publications respect current legislation, the rules of use and privacy policies established by the corresponding social network and those of ERREKA, which does not assume any responsibility in relation to the publications that each user makes. ERREKA will remove unilaterally and without prior notice those contents that it considers to be in violation of current legislation, the rules of use and established privacy policies, or that it considers inappropriate.

GRUPO ERREKA follows other profiles on Facebook, YouTube, Instagram, Twitter and other social networks, without implying any kind of connection with them.

The GRUPO ERREKA channels on Facebook, YouTube, Instagram, Twitter and other social networks are followed by other users of these networks, without implying any kind of connection with them.

ERREKA reserves the right not to respond to messages or comments received through this channel. ERREKA may modify or eliminate at any time and without prior notice the publications issued on its social networks.

By becoming a follower or clicking on “Like” in GRUPO ERREKA’s social networks, you consent to the processing of your personal data in the environment of the corresponding social network, in accordance with its privacy policies; ERREKA’s access to the data contained in the contact list; and that published news appear in your notices and notifications.

If the user wants to stop following GRUPO ERREKA’s official channels on social networks, they must do so using the tools provided for this purpose by each social network.

13. Security measures

ERREKA will treat the personal data contained in its data processing systems adopting the technical and organizational measures that are necessary to guarantee its security and avoid its alteration, loss, treatment or unauthorized access, taking into account the state of technology, the nature of the stored data and the risks to which they are exposed, whether they come from human action or the physical or natural environment, in accordance with current legislation, applicable in terms of security measures for personal data processing . However, users are informed that computer security measures are not impregnable and that they are not safe from possible illegal and undue interference, which would not be the responsibility of ERREKA.

14. Security breaches

The user must immediately notify ERREKA of any incident, security breach, improper or unauthorized access detected in relation to the website, private areas, access codes or any other circumstance that endangers the security and confidentiality of the information. The established preferential notification mechanisms are the telephone number 943786150 and the email

15. Rights of interested persons

You can exercise the rights related to the protection of your personal data (access, rectification, deletion, treatment limitation, portability and opposition), as well as withdraw consent granted, or make any other request on this matter by writing to the Data Controller, ERREKA, at Bº Ibarreta s / n, 20577 Antzuola (Gipuzkoa), tel. 943786150, or using the email address

The application must include a copy of a document proving the identity of the applicant (National Identity Document or similar). When making the request in your capacity as a legal representative, in addition to the copy of the document proving the identity of the applicant, a document proving such representation must be attached.

The control authority that you can contact if you do not agree with the resolution of the requests or to file a complaint is the Spanish Data Protection Agency:

16. Validity and modifications

ERREKA reserves the right to modify its privacy policy according to its criteria, to meet legal or jurisprudential changes. If the Data Controller introduces any modification, the new text will be published on this same website, where the user can become aware of it. In any case, the relationship with users will be governed by the rules provided at the precise moment the website is accessed. For this reason the Data Controller recommends that you visit this privacy policy each time you connect to the website.

17. Jurisdiction

The relationships established between ERREKA and the user will be governed by the provisions of current regulations regarding applicable legislation and competent jurisdiction. However, for cases in which the regulations enable the parties to submit to a jurisdiction, ERREKA and the user, expressly waiving any other jurisdiction that may correspond to them, submit to the Courts and Tribunals of Bergara ( Gipuzkoa).

ERREKA will pursue the breach of this Privacy Policy, as well as any improper use of the content presented on this website, exercising all civil and criminal actions to which it is legally entitled, including those of an economic nature.