Last update: July 1, 2026
Índice 2.1Responsible for the treatment
In accordance with Regulation (EU) 2016/679, General Data Protection -hereinafter, RGPD-, and with Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of rights digital -hereinafter, LOPDGDD-, the User is informed that the person responsible for the processing of the personal data processed through the Website is:
| Fact | Information |
|---|---|
| Responsible | THEX ARQÉ, S.L. |
| NIF | b25995135 |
| Home | C/Mercurio nº14 4ºA, Los Vientos Building. Las Torres de Cotillas, Murcia CP: 30565 |
| Privacy Email | rgpd@thex.com |
| Phone | +34 968 17 25 40 |
| Data Protection Officer | No Data Protection Officer has been appointed because it is not mandatory in accordance with the article 37 GDPR |
Principles applicable to treatment
THEX ARQÉ will process personal data in accordance with the principles established in article 5 GDPR and, in particular, in accordance with the principles of legality, fairness, transparency, limitation of purpose, data minimization, accuracy, limitation of retention period, integrity, confidentiality and proactive responsibility.
Personal data processed
THEX ARQÉ may process the following categories of personal data, depending on the use that the User make from the Website:
| Category | Examples |
|---|---|
| Identification data | Name, surname, company, position or representation, when provided by the User |
| Contact details | Email, telephone, postal address or other data included in forms or communications |
| Professional or business data | Company, position, sector, data linked to professional or commercial requests |
| Navigation data | IP address, online identifiers, device data, browser, operating system, date and time of access, pages visited and data derived from the use of cookies or technologies similar |
| Data included in communications | Information that the User voluntarily incorporates in queries, forms, emails emails, applications or documents sent to THEX ARQÉ |
| Transactional or contractual data | Information necessary for the management of budgets, assignments, orders, provision of services, billing or contractual relationship, if applicable |
The User must refrain from providing data of special categories - for example, health, ideology, religion, union membership, biometric data, sexual orientation - unless they are strictly necessary and there is an adequate legal basis. In case of providing data from third parties, the User states that it has sufficient legitimate basis for this and has ensured that said third parties have received the information required by the applicable regulations.
Purposes, legal bases and conservation periods
Personal data may be processed for the purposes, legal bases and deadlines indicated below. continued:
| Purpose | Legal basis | Conservation period |
|---|---|---|
| Manage queries, requests for information or communications sent by the User | User consent or application of pre-contractual measures requested by the interested -art. 6.1.a and/or 6.1.b RGPD- | During the time necessary to process the request and, subsequently, during the necessary deadlines to address possible legal responsibilities |
| Manage commercial and contractual relationships, budgets, orders, provision of services, support, billing and administration | Execution of contract or application of pre-contractual measures -art. 6.1.b GDPR- and compliance with legal obligations -art. 6.1.c GDPR | During the contractual relationship and, subsequently, during the legal terms of applicable conservation and prescription |
| Send commercial communications, newsletters or promotional information about products or THEX ARQÉ services | User Consent -art. 6.1.a RGPD- or legitimate interest when there is a relationship prior and refers to similar products or services, in accordance with the LSSI-CE | Until the User withdraws his consent or opposes his opposition, without prejudice to minimum conservation to prove the legality of the treatment |
| Manage the registration, access and use of private areas, if they exist | Execution of contract, pre-contractual measures or consent, as the case may be -art. 6.1.a and/or 6.1.b RGPD- | As long as the account remains active and, thereafter, during the legal periods applicable |
| Analyze the use of the Website, prepare statistics, improve content, functionalities, security and user experience | User consent for non-technical cookies -art. 6.1.a RGPD and art. 22.2 LSSI-CE-; legitimate interest for strictly necessary technical metrics or security | Depending on the duration of the cookies and, where applicable, for the time necessary for the purposes statistical or security |
| Prevent abuse, fraud, unauthorized access, security incidents or illicit uses of the Website | Legitimate interest of THEX ARQÉ -art. 6.1.f RGPD- and compliance with legal obligations -art. 6.1.c GDPR- | During the time necessary to investigate, prevent or prove incidents and, subsequently, during the applicable statute of limitations |
| Comply with legal, fiscal, accounting, commercial, administrative or authorities requirements | Compliance with legal obligation - art. 6.1.c GDPR- | During the periods required by applicable regulations |
| Manage selection processes, if the User sends an application or CV | Consent of the candidate or application of pre-contractual measures -art. 6.1.a and/or 6.1.b GDPR- | During the selection process and, unless consent is given for future vacancies, during a maximum recommended period of 12 months |
When the treatment is based on consent, the User may withdraw it at any time, without that this affects the legality of the processing carried out prior to its withdrawal.
Obligation to provide data
The data requested in forms or channels identified as mandatory will be necessary to process the corresponding request, manage the relationship with the User or provide the service requested. Refusal to provide said data may prevent attention to the request or the service provision.
Data not marked as mandatory will be voluntary.
Recipients and data communications
In general, THEX ARQÉ will not communicate personal data to third parties unless there is a basis adequate legal However, the data may be communicated to:
- Public administrations, authorities, courts, tribunals, security forces and bodies or competent bodies when there is a legal obligation or valid requirement.
- Banking entities, payment providers, consultancies, auditors, insurance companies, notaries, registries, lawyers, solicitors or other professionals when necessary for contractual management, administrative, accounting, fiscal, legal or claims.
- Group companies, collaborators or partners, when necessary to meet the request of the User or there is sufficient legal basis.
- Third parties acquiring or interested in structural modification operations, transfer of assets, merger, spin-off, global transfer of assets and liabilities or similar processes, when appropriate legitimate and with the corresponding guarantees.
Likewise, providers who act as data processors may access personal data, such as such as hosting providers, web maintenance, IT support, email, CRM, analytics, marketing, document management, security, communications or professional services. These providers will process the data on behalf of THEX ARQÉ and in accordance with adjusted processing commissioning contracts. to article 28 GDPR.
International data transfers
THEX ARQÉ will ensure that personal data is processed within the European Economic Area. If it were necessary to carry out international data transfers to countries or international organizations that do not have an adequacy decision from the European Commission, THEX ARQÉ will adopt the guarantees required by articles 44 et seq. GDPR, including, where applicable, contractual clauses type, binding corporate rules, supplementary measures or other legally valid mechanisms.
In particular, if the Website uses technology providers, analytics tools, marketing, maps, videos, social networks, accommodation, CRM or communications located outside the Economic Area European, you must specifically inform yourself of said suppliers, country of destination, applicable warranty and link to their policies.
Rights of interested parties
The User may exercise, in the terms provided in articles 15 to 22 RGPD and in the LOPDGDD, the following rights:
- (i) Access: obtain confirmation about whether THEX ARQÉ processes personal data that you concern and access said data.
- (ii) Rectification: request the correction of inaccurate or incomplete data.
- (iii) Deletion: request the deletion of data when, among other reasons, it is already are not necessary for the purposes for which they were collected.
- (iv) Opposition: oppose the treatment in certain circumstances, especially when the processing is based on legitimate interest or is carried out for the purposes of direct marketing.
- (v) Limitation of processing: request that the processing of data be limited in the legally provided cases.
- (vi) Portability: receiving data in a structured format, commonly used and mechanical reading, and transmit them to another person responsible when the treatment is based on the consent or in a contract and is carried out by automated means.
- (vii) Withdrawal of consent: withdraw consent at any time granted, without affecting the legality of the prior treatment.
- (viii) Not be subject to automated individual decisions: not be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you in a similar way, except in cases legally permitted.
To exercise their rights, the User may send a request to rgpd@thex.com, indicating the right you wish to exercise and providing, when necessary, information that allows you to prove your identity.
The User also has the right to file a claim with the Spanish Data Protection Agency. Data -www.aepd.es-, especially when you consider that you have not obtained satisfaction in the exercise of your rights.
Data security
THEX ARQÉ will apply appropriate technical and organizational measures to guarantee a level of security appropriate to the risk, in accordance with Article 32 GDPR, including, where applicable, measures aimed at preserving the confidentiality, integrity, availability and resilience of the systems and treatment services.
However, the User must take into account that no system connected to the Internet can guarantee a absolute security. The User must adopt reasonable security measures, including the use Responsible for credentials, up-to-date devices and secure networks.
Accuracy and updating of data
The User guarantees that the personal data provided to THEX ARQÉ are true, accurate, complete and updated, and undertakes to communicate any modification. The User will be responsible for the damages that may arise from the communication of false, inaccurate, incomplete or outdated.
Minors
The Website is not specifically directed at children under fourteen years of age. If THEX ARQÉ detects that you have processed data of a minor under fourteen years of age without the valid consent of their legal representatives, will adopt reasonable measures to delete it, unless there is another applicable legal basis.
Social networks and third-party services
When the User interacts with THEX ARQÉ profiles on social networks or third-party platforms, the Data processing will be governed by this Privacy Policy, as applicable to THEX ARQÉ, as well as the policies and conditions of the corresponding platform.
THEX ARQÉ is not responsible for the treatments carried out by these platforms as responsible independent, so the User is recommended to review their privacy and configuration policies of privacy.
Changes in the Privacy Policy
THEX ARQÉ may modify this Privacy Policy to adapt it to regulatory changes, criteria of supervisory authorities, jurisprudence, sector practices, technical changes or modifications in the treatments performed. The current version will be the one published at all times on the Website.