Privacy policy

SUARDIAZ | Last updated: June 2026

Data Controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you that the controller of your personal data is:

• Company name: GRUPO LOGÍSTICA SUARDIAZ
• Tax ID: B-83135400
• Registered office: C/ Ayala, 6 – 28001 Madrid, Spain
• Contact email: dpo@suardiaz.com
• Telephone: +34 914316640
• Website: www.suardiaz.com

Personal Data We Collect

Through our website and the channels provided for this purpose, we may collect the following categories of personal data:

2.1 Data provided directly by the user:

• Identification data: name, surname, ID number/tax ID.
• Contact details: postal address, email address, telephone number.
• Professional data: company, position, business sector.
• Communication data: enquiries, messages and correspondence.
• Billing and transaction data when a commercial relationship is established.

2.2 Data collected automatically:

• Browsing data: IP address, browser type, pages visited, time spent.
• Cookie data and similar technologies in accordance with our Cookie Policy.

Purposes and Legal Bases for Processing

Your personal data is processed for the following purposes, based on the corresponding legal grounds:

3.1 Commercial relationship management and service provision

Legal basis: performance of a contract or pre-contractual measures (Art. 6.1(b) GDPR).
Your information is necessary to manage our business relationship, process orders and quotes, and handle any services contracted with SUARDIAZ.

3.2 Management of enquiries and information requests

Legal basis: legitimate interest and/or consent (Art. 6.1(a) and 6.1(f) GDPR).
We process your data to respond to inquiries, requests, or requests for information that you submit to us through the channels available on our website.

3.3 Marketing communications

Legal basis: consent (Art. 6.1(a) GDPR). With your express consent, we may send you information about our products, services, news, and special offers. You may withdraw your consent at any time.

3.4 Internal management through CRM

Legal basis: legitimate interest and contract performance (Art. 6.1(b) and 6.1(f) GDPR). SUARDIAZ uses the CRM platform as a technological tool for managing, organizing, and tracking data on customers, contacts, and sales opportunities.

The CRM platform is used to:

• Record and monitor interactions with customers and prospects.
• Manage sales cycles, quotations and opportunities.
• Maintain communication history.
• Segment contacts for marketing activities.
• Manage incidents, after-sales services and customer support.

The data stored on the CRM platform is processed exclusively by authorized SUARDIAZ personnel and, where applicable, by the platform provider acting as a data processor, with the appropriate contractual and security safeguards required by current regulations.

3.5 Compliance with legal obligations

Legal basis: compliance with legal obligations (Art. 6.1(c) GDPR). In certain cases, data processing is necessary to comply with legal obligations applicable to SUARDIAZ, such as tax, commercial, or labor regulations.

4. Technological Tools and Data Processors

SUARDIAZ uses technological platforms and service providers acting as data processors under Article 28 GDPR.

4.1 CRM Platform

SUARDIAZ uses a Customer Relationship Management (CRM) platform to centralize and manage contact information, customer data, and business activity. This tool processes personal data on behalf of SUARDIAZ exclusively for the purposes described in section 3.4 of this policy.
The CRM provider acts as a data processor and is required to:

• Process data only following SUARDIAZ instructions.
• Guarantee confidentiality and security.
• Not subcontract processing without prior authorisation.
• Delete or return data upon termination.
• Assist SUARDIAZ in fulfilling data protection obligations.

4.2 Other Support Tools

SUARDIAZ may also use other platforms and technological services (web hosting, email, analytics tools, etc.), which are also processed in accordance with the data processing terms established by the GDPR. For more information, please contact us using the contact details provided in Section 1.

5. Data Retention Periods

Personal data will be retained for as long as is strictly necessary for the purpose for which it was collected and, in any case, for the periods established by law:

• Data related to contractual relationships: for the duration of the relationship and, once it has ended, for the applicable statutory limitation periods (generally, up to 5 years for civil and commercial obligations, and up to 4 years for tax obligations).
• Contact and inquiry data: until the inquiry is resolved and, thereafter, for the statute of limitations period for potential liabilities.
• Data processed for marketing purposes: until the data subject withdraws consent or requests deletion.
• Data in the CRM: the same criteria as above, depending on the nature of the data and the relationship with the data subject.6. Recipients and International Transfers

6. Recipients and International Transfers

As a general rule, SUARDIAZ will not disclose personal data to third parties except:

• Data processors acting on behalf of SUARDIAZ.
• Legal obligations requiring disclosure.
• Cases where the user has given explicit consent.

Where international transfers outside the EEA occur, SUARDIAZ will ensure appropriate safeguards under the GDPR.

7. Data Subject Rights

You may exercise the following rights:

• Right of access.
• Right to rectification.
• Right to erasure (“right to be forgotten”).
• Right to object.
• Right to restriction of processing.
• Right to data portability.
• Right to withdraw consent.

To exercise any of these rights, you may submit a written request to SUARDIAZ via the following email address: dpo@suardiaz.com, specifying the right you wish to exercise, your full name, and a document proving your identity.
Likewise, if you believe that the processing of your data does not comply with current regulations, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) through its website at www.aepd.es.

8. Security Measures

SUARDIAZ has implemented the necessary technical and organizational measures to ensure the security and integrity of the personal data it processes, and to prevent its alteration, loss, or unauthorized processing or access, taking into account the state of technology, the nature of the data stored, and the risks to which it is exposed. These measures include:

• Encryption of data in transit and at rest.
• Restricted access controls.
• Monitoring and access logging systems.
• Incident and breach management procedures.
• Periodic reviews of security measures.

The CRM platform also has its own technical and organizational security measures, which have been assessed by SUARDIAZ under the data processing agreement entered into.

9. Cookie Policy

Our website may use cookies and similar technologies to enhance your browsing experience and analyze site usage. For detailed information about the cookies we use, their purposes, and how to manage them, please see our Cookie Policy available at Cookie Policy.

10. Minors

Our services are not directed at children under 14 years of age. SUARDIAZ does not knowingly collect personal data from minors without the consent of parents or legal guardians. If I become aware that a minor’s personal information has been provided without the appropriate consent, I will delete it immediately.

11. Amendments to this Privacy Policy

SUARDIAZ reserves the right to update or modify this Privacy Policy at any time in order to adapt it to changes in legislation, case law, or business practices. Any changes will be posted on this page, along with the date of the last update. We recommend that you review this Policy periodically to stay informed about how we protect your data.

This version was updated in May 2026 to include information regarding the use of the CRM platform for managing customer and contact data.

12. Contact

For any questions regarding the processing of your personal data or the exercise of your rights, please contact:

• Email: dpo@suardiaz.com
• Postal address: C/ Ayala, 6 – 28001 Madrid, Spain
• Telephone: +34 914316640