PRIVACY & COOKIE POLICY
Last updated: 16/12/2025
HIS GROUP (“we”, “us”, “our”) is committed to protecting your personal data and ensuring transparency in how information is processed.
This Privacy and Cookie Policy explains how we collect, use and protect your personal data when you visit our website www.hisgroup.es (“the Site”), in compliance with:
-
Regulation (EU) 2016/679 (GDPR)
-
Spanish Organic Law 3/2018 (LOPDGDD)
-
UK GDPR and the Privacy and Electronic Communications Regulations (PECR)
If you have any questions regarding this Policy, you may contact us at:
info@hisgroup.es
Camino de BoaVista Nº1
36340 – Nigrán
Pontevedra – Spain
1. Personal Data We Collect
1.1 Data provided directly by you
When you contact us via forms or email, we may collect:
-
Name and surname
-
Email address
-
Phone number
-
Company name
-
Message or enquiry details
1.2 Data collected automatically
When you browse the Site, we may collect:
-
IP address
-
Browser and device information
-
Pages visited and interaction data
-
Cookies and similar technologies (see Section 9 – Cookie Policy)
1.3 Data from third parties
We may receive limited data from:
-
Analytics providers (e.g. Google Analytics, only if consent is granted)
-
Hosting and IT service providers
We do not intentionally collect special category data.
2. Purpose and Legal Basis for Processing
We process personal data for the following purposes:
a) Responding to enquiries
To respond to your requests, provide quotations or information.
Legal basis: Legitimate interest and/or pre-contractual measures.
b) Business communication
To send product or service information where applicable.
Legal basis: Consent (where required).
c) Website analytics and improvement
To analyse website usage and improve performance and usability.
Legal basis: Consent (analytics cookies) and legitimate interest.
d) Legal and regulatory compliance
To meet accounting, tax or legal obligations.
Legal basis: Legal obligation.
3. How We Share Personal Data
We do not sell personal data.
Data may be shared with:
-
Hosting and IT service providers
-
Email and communication service providers
-
Analytics providers (only with consent)
-
Business partners where necessary to respond to enquiries
-
Public authorities when legally required
Where personal data is transferred between the EU and the UK, processing is permitted under the UK adequacy decision.
For any other international transfers, appropriate safeguards (such as Standard Contractual Clauses) are applied.
4. Data Retention
Personal data is retained only for as long as necessary:
-
Enquiries: up to 12 months
-
Business communications: until consent is withdrawn
-
Contractual or administrative data: up to 6 years (legal requirement)
-
Analytics data: according to your cookie preferences
5. Your Rights
You may exercise the following rights under GDPR and UK GDPR:
-
Right of access
-
Right to rectification
-
Right to erasure (“right to be forgotten”)
-
Right to restriction of processing
-
Right to object
-
Right to withdraw consent
-
Right to data portability
You may also lodge a complaint with:
-
AEPD (Spain): https://www.aepd.es
-
ICO (United Kingdom): https://www.ico.org.uk
To exercise your rights, contact: 📧 info@hisgroup.es
6. Data Security
We apply appropriate technical and organisational measures to protect personal data, including:
-
Secure server infrastructure
-
Access controls
-
Encryption where appropriate
-
Regular monitoring and updates
However, no system is completely secure and absolute protection cannot be guaranteed.
7. Links to Third-Party Websites
The Site may contain links to external websites.
We are not responsible for the privacy practices of third-party sites and recommend reviewing their respective Privacy Policies.
8. Changes to This Policy
This Policy may be updated periodically.
Any changes will be published on this page with an updated “Last updated” date.
9. COOKIE POLICY
This Cookie Policy forms part of the Privacy Policy and explains how cookies and similar technologies are used in accordance with GDPR, LOPDGDD, UK GDPR and PECR.
9.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website.
They help ensure proper website functionality and may be used for analytics or additional features, subject to your consent.
Cookies may be classified as:
-
Essential cookies (required)
-
Analytics cookies (optional)
-
Functional cookies (optional)
-
Marketing cookies (optional)
9.2 Cookies We Use
Cookie usage on this Site is managed through CookieYes.
Cookies are activated only according to your consent preferences.
Categories include:
Essential cookies
Required for basic site functionality and security.
These cookies cannot be disabled.
Analytics cookies (only with consent)
Used to analyse website usage, such as Google Analytics 4.
Marketing cookies (only with consent)
Used by third-party services such as Google or YouTube.
A full and automatically updated list of cookies in use is available via the CookieYes consent panel.
9.3 Legal Basis
-
Essential cookies: Legitimate interest
-
Analytics and marketing cookies: User consent
No non-essential cookies are set unless you explicitly accept them.
9.4 Managing Cookies
You may review or modify your cookie preferences at any time using the CookieYes banner or by clicking:
👉 “Cookie Settings”
You may also manage cookies via your browser settings.
9.5 Third-Party Services
The Site may use third-party services such as:
-
Google Analytics 4 (only with consent)
-
Embedded Google services
These providers may process data outside the EU or UK, with appropriate safeguards in place.
9.6 Contact
For any questions regarding this Privacy and Cookie Policy, please contact: