Last updated: 25 june 2025
1. PURPOSE
This privacy policy governs the processing of personal data carried out through the website https://www.matrix-sa.com (hereinafter, the “Website”).
2. DATA CONTROLLER
The data controller is MATRIX, S.A.U., with its registered office at Polígon Industrial La Barricona, Ctra. C-26, km 195, 17500 Ripoll (Spain), VAT number A17024720, and email address: privacy@matrix-sa.com
MATRIX, S.A.U. reserves the right to amend this privacy policy at its sole discretion, or due to a legal, jurisprudential or regulatory change required by the competent supervisory authorities. Use of the Website following such changes will constitute acceptance thereof.
The Website may contain links to external sites. MATRIX, S.A.U. accepts no responsibility for the content or any other aspect of such external websites.
3. PERSONAL DATA
MATRIX, S.A.U. will collect only the personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed, as applicable in each case.
The user guarantees the authenticity of the data provided and shall be solely responsible for any false or inaccurate statements made.
4. PURPOSES OF PROCESSING
Personal data will be processed by the controller for the following purposes, as appropriate in each case:
· Handling and, where applicable, investigating and responding to received messages.
· Responding to individuals who have contacted MATRIX, S.A.U. with a potential interest in becoming clients, distributors, or suppliers.
· Commercial and administrative management of the contractual relationship with clients and suppliers, including the issuance and handling of quotations, orders and other contractual documentation, as well as issuing and monitoring invoice payments and collections.
· Maintaining the contractual relationship with the data subject or with the company or organisation they work for or collaborate with.
· Reviewing and evaluating information and/or documentation provided to take part in a recruitment process for a current or future vacancy, or to submit a speculative application. If of interest to MATRIX, S.A.U., the company may contact the applicant to evaluate their application. If the application is rejected, it may be retained for an additional period of one year from receipt.
· Preventing, detecting and controlling abuse and fraud committed on or through the Website.
· Managing compliance with legally established obligations.
5. LEGAL BASIS FOR PROCESSING
The legal basis for processing personal data will be the user’s consent, where provided, for the following purposes:
· Handling and responding to received messages.
· Retaining information and/or documentation for participation in recruitment processes for a further year from receipt.
The user may withdraw their consent at any time, without affecting the lawfulness of the processing carried out prior to withdrawal.
The legal basis will be compliance with legal obligations in the following cases:
· Administrative management of the existing contractual relationship with clients, including the issuance of invoices.
· Managing compliance with legally established obligations.
This processing is necessary for MATRIX, S.A.U. to comply with the applicable legislation.
The legal basis may also be the performance of pre-contractual measures requested by the data subject, the intention to enter into a contract with the controller, or the execution of such contract, in the following cases:
· Responding to individuals who have contacted MATRIX, S.A.U. with a potential interest in becoming clients, distributors, or suppliers of MATRIX, S.A.U.
· Commercial and administrative management of the existing contractual relationship with its clients, including the issuance and handling of quotations, orders, and other contractual documentation, as well as monitoring the collection of payments.
· Commercial and administrative management of the existing contractual relationship with its suppliers, including the handling of quotations, orders, and other contractual documentation, as well as monitoring the payment of invoices.
· Reviewing and evaluating the information and/or documentation provided in order to participate in a selection process for a current or future vacancy, or to submit a speculative application. If of interest to MATRIX, S.A.U., the company will contact the applicant to assess their suitability.
Processing data for these purposes is necessary to take pre-contractual steps and to enter into or perform a contract between MATRIX, S.A.U. and its clients and/or suppliers.
Finally, the legal basis may be the legitimate interest of the data controller, for the following purposes:
· Maintaining the contractual relationship with the data subject or the company/organisation they work for or collaborate with. Such legitimate interest is recognised under applicable law.
· Preventing, detecting and controlling abuse and fraud on the Website. The legitimate interest here is the controller’s need to maintain the Website as a secure space.
6. RECIPIENTS
MATRIX, S.A.U. will not share personal data with third parties, except where legally required or when engaging subcontracted service providers.
7. DATA RETENTION PERIOD
Where the legal basis for processing is the user’s consent, data will be retained until such consent is withdrawn.
CVs will be kept for a maximum of 12 months for consideration in future recruitment processes, unless the user withdraws consent beforehand.
Where the legal basis is compliance with a legal obligation or legitimate interest, data will be retained for as long as necessary to fulfil such obligations.
If the legal basis is the performance of pre-contractual measures or execution of a contract, data will be retained until such measures are withdrawn or for as long as necessary to perform the contract.
In all cases, personal data will be retained for the time required to meet any liabilities the controller may face, as provided for by applicable law. Where appropriate, data will be blocked until the corresponding limitation period has expired.
8. USER RIGHTS
You may exercise your rights of access, rectification, erasure, restriction, objection and data portability, as provided for under data protection legislation, by writing to Polígon Industrial La Barricona, Ctra. C-26, km 195, 17500 Ripoll (Spain), or by email to: privacy@matrix-sa.com.
Specifically, you may:
· Access your personal data.
· Rectify inaccurate or incomplete data.
· Request the erasure of your data when, among other reasons, it is no longer necessary for the purposes it was collected.
· Request restriction of processing under certain conditions established by data protection regulations.
· Object to processing for reasons related to your particular situation. In such cases, MATRIX, S.A.U. will stop processing your data unless there are compelling legitimate grounds, or the processing is required to exercise or defend legal claims.
· Obtain human intervention, express your point of view and challenge automated decisions made by MATRIX, S.A.U., where applicable.
· Request the portability of your data.
If you disagree with how your data is being processed, you may lodge a complaint with the Spanish Data Protection Agency www.aepd.es.
