1. Controller and contact
The data controller is ASOCIACIÓN ESPAÑOLA DE FABRICANTES DE MÁQUINAS-HERRAMIENTA, SUS ACCESORIOS, COMPONENTES Y HERRAMIENTAS DE CORTE Y DEFORMACIÓN Y OTROS SISTEMAS Y TECNOLOGÍAS DE FABRICACIÓN (AFM), tax ID G-20065637, Parque Científico y Tecnológico de Gipuzkoa, Paseo Mikeletegi 59, 20009 Donostia-San Sebastián, registered in Spain's National Register of Associations under number 614562. Privacy enquiries: rgpd@afm.es.
2. Data and sources
We may process organisation and website details; contact name, role, email and telephone; selected ecosystem category; activity, capabilities, interest and message content. Security and operation may generate IP address, date, time, requests, device, browser and access logs. With prior consent, Google Analytics may collect online identifiers and navigation data. Data comes from the person concerned, their organisation when acting professionally and, after consent, their use of the site. Special-category data and unnecessary third-party data must not be submitted.
3. Purposes and legal bases
- Enquiries and expressions of interest: response and assessment; pre-contractual steps where applicable or legitimate interest in handling professional contacts.
- Site operation and security: legitimate interest in protecting the site and systems.
- Web analytics: user consent.
- Promotional communications: separate, revocable consent, only if enabled.
4. Required data
Required fields are necessary to identify the organisation and contact, respond and assess the request. Omitting them prevents processing; other fields are optional.
5. Recipients and processors
Authorised staff and technology providers may access data as necessary, including hosting/deployment, email and, only under the applicable configuration and consent, Google Tag Manager and Google Analytics. Data may be disclosed where legally required. Google Search Console monitors indexing and search performance but does not itself install a Search Console cookie in visitors' browsers.
6. International transfers
The use of global providers may involve access or processing from countries outside the European Economic Area. Where international transfers occur, safeguards recognised by applicable law, such as adequacy decisions or standard contractual clauses, will apply.
7. Retention
Enquiries are retained while they are handled and for applicable limitation periods; formal relationships for their duration and legal periods; security logs for the period defined with providers; Google Analytics for 14 months; and consent records for as long as needed to demonstrate the choice.
8. Rights
Data subjects may request access, rectification, erasure, objection, restriction and, where applicable, portability, and may withdraw consent without affecting previous lawful processing. Contact rgpd@afm.es or the postal address above. A complaint may be lodged with the Spanish Data Protection Agency.
9. Automated decisions
No decisions with legal or similar effects based solely on automated processing, or profiling through the form, are envisaged.
10. Security and changes
Technical and organisational measures appropriate to the risk will be applied. The policy will be reviewed when purposes, forms, providers or measurement tools change. The current version will always show its update date.
Last updated: 4 September 2026.