Skip to content
ACN Construcción Industrial

Privacy policy

Last updated: 19 October 2026

This policy explains how ACN Construcción Industrial, S.L. processes the personal data of people who visit this website or write to or call the contact details shown on it, of the people we deal with by email or in the course of our business (clients, suppliers, subcontractors and their teams) and of people who send us a job application. It is the full information referred to by the short notices on this website and in our email signatures.

1. Data controller

  • ACN Construcción Industrial, S.L., single-member limited company (sociedad unipersonal)
  • Tax ID (NIF): B75742262
  • Registered office: Calle Málaga, 3, nave 7, 28343 Valdemoro (Madrid), Spain
  • Madrid Commercial Register, sheet M-843298
  • Data protection contact: privacidad@acnindustrial.com

ACN is not required to appoint a data protection officer. For any question about your data, write to privacidad@acnindustrial.com.

2. What data we process, why and on what legal basis

2.1 Website visits and enquiries

Browsing. When you visit www.acnindustrial.com, our hosting provider processes your IP address and technical data about your browser and connection in order to display the website and protect it against attacks and abuse. The legal basis is our legitimate interest in providing a secure website (Article 6(1)(f) of the General Data Protection Regulation, GDPR). We do not use this data to identify you or to build profiles. For cookies, see our Cookie policy.

Enquiries by email or telephone. If you write to the email address or call the telephone number shown on this website, we process your name, your contact details, the company and job title you give us and the content of your enquiry in order to answer you and, if you ask us to, to study your project and prepare a quotation. The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) when you contact us with a view to contracting, and otherwise our legitimate interest in answering the enquiries we receive (Article 6(1)(f)).

2.2 Correspondence and relations with clients, suppliers and subcontractors

What data. For contact persons, representatives and signatories of our clients, suppliers, subcontractors and other organisations we work with, we process their name, job title and company, their business contact details (email address, telephone number and address), the content of our correspondence and, where they sign a contract, their identity document and the authority under which they act. If you are self-employed, we also process the tax and bank details needed to invoice and pay.

Why and on what legal basis.

  • To handle communications by email, telephone or other means and to maintain the professional relationship with you or your organisation: our legitimate interest (Article 6(1)(f) GDPR), which Spanish law presumes when we process the contact details of a person working for a company in order to deal with that company (Article 19 LOPDGDD).
  • To prepare quotations, enter into and perform contracts, orders and works, and manage invoicing, collections and payments: performance of the contract where you are a party to it (Article 6(1)(b) GDPR), and our legitimate interest where the contract is with your organisation (Article 6(1)(f)).
  • To comply with our legal obligations under commercial, accounting and tax law, and under occupational health and safety and construction subcontracting law: compliance with a legal obligation (Article 6(1)(c) GDPR).
  • To present our services to professionals at companies in the sector who may need them: our legitimate interest (Article 6(1)(f) GDPR and Article 19 LOPDGDD). We tell you so in our first communication, which is never an email or other electronic commercial communication that you have not requested or authorised, and you may object at any time.

People who access our construction sites on behalf of subcontractors and suppliers. To coordinate health and safety with the other companies working on site and to control access, we process their identity, employer, job, health and safety training, fitness for the job (only "fit" or "not fit", with no medical information), registration with Spanish Social Security and the access documentation required by the owner of the workplace. The legal basis is compliance with legal obligations (Article 6(1)(c) GDPR and, as regards fitness for the job, Article 9(2)(b)), in particular Spanish Law 31/1995 on the Prevention of Occupational Risks (Article 24), Royal Decree 171/2004, Law 32/2006 regulating subcontracting in the construction sector, and Royal Decree 1109/2007.

Data you have not given us. If you have not provided your data to us directly, we have obtained it from the organisation you work for or represent (client, supplier or subcontractor), from other people in that organisation in the course of the relationship, from the client or owner of the workplace in the case of site access or, to present our services, from publicly available professional sources such as your company's website or professional directories and networks. The categories of data are those described in this section: identification and business contact data, job title and company and, for site access, those listed in the previous paragraph.

2.3 Job applications

This website invites you to send us your CV by email. We process the data in your CV and any data you provide during the process (identification and contact details, education, experience and professional cards or qualifications) in order to assess your application for the position you indicate and, if there is no open vacancy or you are not selected, to consider you for other processes while we keep your application. Please do not include data that is not needed to assess it, such as health data, trade union membership, beliefs or details of your family life.

The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) when you apply for a vacancy, and your consent (Article 6(1)(a)), given by sending us your CV, when you send it without an open vacancy or for other processes. You may withdraw your consent at any time, without affecting the lawfulness of prior processing.

Selection decisions are taken by people: we do not use automated systems to filter, score or select applications.

3. Who we share data with

We do not sell your personal data. We only disclose it, where necessary for the purposes above, to these categories of recipients:

  • Providers of website hosting and security; of email, office software and cloud storage; of business management, accounting and invoicing applications; and of productivity tools, including artificial intelligence tools; some of them outside the EEA.
  • External tax, accounting, employment and legal advisers who provide professional services to us.
  • Financial institutions, to manage collections and payments.
  • Clients, owners of workplaces, health and safety coordinators and their contractor coordination platforms: only the data of people who access a construction site (section 2.2).
  • Public authorities, judges and courts, where required by law (for example, the Spanish Tax Agency, Social Security or the labour authority).
  • Insurers, where necessary to handle a claim.

If you exercise your right of access (section 6), we will tell you the specific identity of the recipients to whom we have disclosed your data.

4. International transfers

Some of the providers in section 3 are established outside the European Economic Area (EEA), mainly in the United States, or may access the data from there. Those transfers are based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795), where the provider participates in it, or on the standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR). You may request information about these safeguards, and a copy of the clauses, at privacidad@acnindustrial.com.

5. How long we keep data

  • Technical browsing data: only for as long as needed for the security of the website.
  • Enquiries received, correspondence and documents of the business relationship (quotations, contracts, orders and invoices): for the duration of the relationship and then for six years from the last communication or document, the retention period for business correspondence and documents under Article 30 of the Spanish Commercial Code, unless a law requires a longer period.
  • Data used to present our services: until you object or, if no relationship with us arises, two years from your last contact with us.
  • People who access our construction sites: for the duration of the works and five years after their participation ends.
  • Job applications: for the duration of the selection process and, at most, one year from receipt of your CV, unless you withdraw your consent earlier.

After these periods we delete the data. Before destroying it, we keep it blocked, without using it for any other purpose, available to judges, courts and competent authorities for the limitation period of any liability arising from the processing (Article 32 LOPDGDD).

6. Your rights

You may at any time exercise your rights of access, rectification, erasure, restriction of processing and data portability, and withdraw your consent where it is the basis for processing, without affecting the lawfulness of prior processing.

Right to object. You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest. And you may always object, without giving reasons, to our processing your data to present our services to you: if you do, we will stop.

To exercise your rights, write to privacidad@acnindustrial.com or by post to the address in section 1, stating which right you are exercising. If we have reasonable doubts about your identity, we may ask you for the information needed to confirm it. We will reply within one month, which may be extended by two further months for complex or numerous requests, in which case we will tell you within the first month.

7. Complaints to the supervisory authority

If you believe we have not processed your data properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es; calle Jorge Juan, 6, 28001 Madrid, Spain). We would be grateful if you contacted us first at privacidad@acnindustrial.com so that we can try to resolve it.

8. Automated decisions

We do not take decisions based solely on automated processing of your data, including profiling, which produce legal effects concerning you or similarly significantly affect you.

9. Do you have to give us your data?

If you write to us or call us, we need your contact details to reply; without them we cannot do so. Contract data is needed to enter into and perform the contract. Site access data is required by health and safety and subcontracting law: without it, access cannot be authorised.

10. Security

We apply technical and organisational measures appropriate to the risk to protect your data, such as access control, so that only the people who need the data for their work process it, and the encrypted connection (HTTPS) of this website.

11. Changes to this policy

We may update this policy when our processing or the law changes. The date of the last update is shown at the top. If the change is significant, we will indicate it visibly on the website.

This policy is a translation of the Spanish version. In case of discrepancy, the Spanish version prevails.