Home / Legal information
Privacy policy
Last updated: October 2026
1. Data controller
- Controller
- Delibreads Europe S.L.
- Tax ID (CIF)
- B-98240369
- Address
- Polígono Industrial Les Carrases, parcela D, Ctra. Valencia-Ademuz, 30, 46160 Llíria (Valencia), Spain
- Privacy contact
- dataprotection@delibreads.com, +34 962 781 642
2. What data we process and why
We only process the data you provide to us through the forms on this website, by email or through the ethics channel. Each use has its own purpose, legal basis and retention period:
| Processing activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Sales enquiries and bespoke production | Name, company, email, telephone, channel and content of the enquiry | To respond to your request and, where applicable, prepare a quotation | Pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) of the General Data Protection Regulation, GDPR) | While the request is being handled and for up to 1 year afterwards if no business relationship is entered into. If one is entered into, for the duration of the relationship and the applicable statutory limitation periods |
| Applications for vacancies | Name, email, CV or professional profile and message | To manage the recruitment process you are applying for | Pre-contractual measures (Art. 6(1)(b) GDPR) | Until the process closes and, at most, 1 year from receipt |
| Speculative applications | The same as for vacancy applications | To consider you for future recruitment processes | Your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time | 1 year from receipt, unless you withdraw your consent earlier |
| Ethics channel | Data of the whistleblower (if they identify themselves), of the persons concerned and of the facts reported | To manage and investigate reports made through the Internal Reporting System | Legal obligation (Art. 6(1)(c) GDPR and Spanish Law 2/2023) | For the time strictly necessary to decide whether to open an investigation. If no action is taken, the data are erased 3 months after receipt. Records are kept for a maximum of 10 years |
| Legal obligations | Those required in each case | To respond to requests from the authorities and to meet accounting and tax obligations | Legal obligation (Art. 6(1)(c) GDPR) | The periods set by the applicable law |
We do not make automated decisions or carry out profiling using your data. Please do not include in the forms any data concerning health, racial or ethnic origin, beliefs, trade union membership or other special categories of data.
3. Who may access your data
We do not disclose your data to third parties, except where required by law. To provide the service, certain providers access the data as processors, under a contract that complies with Article 28 of the GDPR:
- The website hosting provider.
- The email provider and the service that receives the forms.
- Lefebvre, through its Centinela platform, for the ethics channel.
Ethics channel data are accessible only to the System Manager and to the persons authorised by Law 2/2023, and may be disclosed to the judicial authorities, the Public Prosecutor's Office or the competent administrative authority where appropriate.
4. International transfers
We do not transfer your data outside the European Economic Area. Should any provider process them outside the EEA in the future, it would do so with the safeguards provided for in the GDPR, such as an adequacy decision or the European Commission's standard contractual clauses, and we would state this in this policy.
5. Your rights and how to exercise them
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise them, write to dataprotection@delibreads.com or send a letter to the controller's address, stating the right you wish to exercise and providing proof of your identity. We will reply within one month, which may be extended by a further two months in complex cases; if so, we will let you know.
If you consider that we have not properly addressed your rights, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD): www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid.
6. Security
We apply technical and organisational measures appropriate to the risk to protect your data against loss, alteration or unauthorised access, and we review their effectiveness periodically.
7. Changes to this policy
We may update this policy to reflect changes in legislation or to the website. The date of the last update is shown at the top of the document.