Last updated: 29 October 2026. This policy describes personal data processing associated with TOTEMPLAST's corporate website and contact form. It does not replace specific privacy notices required for employees, customers, suppliers, CCTV or other activities outside the scope of this website.
1. Data controller
TOTEMPLAST, S.L., Spanish tax ID B53365144, Calle Cuenca, 13, Polígono Industrial Alfaç II, 03440 Ibi (Alicante), Spain. Telephone: +34 966 55 41 00. Contact email and address for exercising data protection rights: totemplast@totemplast.com.
2. Data collected
- Information that you provide voluntarily in a form or email: name, email address, telephone number if supplied, message content and, where relevant, professional details strictly necessary to handle your enquiry.
- Technical data needed to process the contact form and limit abusive submissions: language, page from which the form was submitted, time when it was started, IP address used for anti-spam checks and timestamps. The server derives a hash key from the IP address to limit submissions; this method must not be regarded as absolute anonymisation.
- Technical access data the hosting service may record for website operation and security, such as IP addresses and request timestamps. The provider's configuration and retention criteria apply to these operational logs.
The form does not request special-category personal data. Please do not include health information, identity documents or other sensitive information in your message unless strictly necessary.
3. Purposes and legal bases
- Responding to enquiries and preparing requested quotations. Where an individual seeks pre-contractual steps on their own behalf, Article 6(1)(b) of Regulation (EU) 2016/679 (GDPR) may apply. For business contact details of company representatives or professionals, the legitimate interest in maintaining relevant business relations may apply under Article 6(1)(f) GDPR, subject to the requirements of Article 19 of Spanish Organic Law 3/2018. In other cases, the legal basis actually applicable will be assessed.
- Protecting the form and service against abuse. Legitimate interest in safeguarding the security and availability of communications, Article 6(1)(f) GDPR, subject to the necessary balancing assessment.
- Meeting legal obligations arising from any contractual relationship. Article 6(1)(c) GDPR, where such obligations apply.
The form does not include newsletter subscriptions or request consent to advertising. Ticking the box confirming that the privacy information has been read does not authorise marketing communications unrelated to the enquiry.
4. Required information and consequences
To receive a response through the form, you must provide your name, email address and a meaningful message. A telephone number is optional. Without the information needed, we cannot handle your request through this channel. You may also contact the company using the published contact details.
5. Recipients and service providers
Form data is sent to TOTEMPLAST's company mailbox through the hosting provider's email service. Hosting, maintenance and communications providers acting as data processors may access the data to the extent necessary. Data will be disclosed to public authorities or other recipients when required by law or permitted by an applicable legal basis.
Technical providers of hosting, email and maintenance act as data processors where applicable. You can request information about data recipients and the safeguards applicable to any international transfers by emailing totemplast@totemplast.com.
6. External Google map
The website is designed to offer a Google Maps map only if you expressly ask to load it. In the tested static version, the map iframe is not loaded before that action. If you enable it, your browser connects directly to Google, which may receive browsing information, use cookies or other technologies, and process data under its own terms. The map is optional, and you may consult the address without loading it. See also our Cookie Policy and Google's Privacy Policy.
7. Data retention
Messages and replies will be retained for as long as necessary to deal with the enquiry and, where applicable, for periods required by law or needed to respond to claims arising from the relationship established. Requests that lead to contractual relationships will be subject to the retention obligations applicable to those relationships.
The anti-spam mechanism applies a rolling 15-minute window and temporarily stores hash keys and timestamps in a protected server file. Expired records are removed when another valid request is processed; if no new requests arrive, they may remain until a subsequent clean-up. The application does not create a separate form-message database, but communications are stored in the email system and its backups.
8. Data subjects' rights
You may request access, rectification, erasure, objection, restriction of processing and, where applicable, data portability by emailing totemplast@totemplast.com or writing to the address above. Where a particular processing operation is based on consent, you may withdraw it at any time without affecting the lawfulness of previous processing. Additional information to confirm your identity will only be requested where there are reasonable doubts.
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD), in particular if you believe your rights have not been properly respected.
9. Automated decisions and updates
No automated decisions producing legal effects on individuals are made on the basis of the form. Technical validation and abuse controls may temporarily prevent a submission without creating commercial profiles. This information will be updated if purposes, providers or technologies change.