This privacy policy applies to the processing of all personal data provided by the user to TIRME, S.A., (hereinafter, "THE COMPANY") when accessing its website, which will process the data provided by the user under the terms provided in this policy.

Who is the Data Controller?

1. TIRME, S.A. (hereinafter referred to as "TIRME")
2. Address: Ctra. de Soller Km. 8,2, Son Reus road, 07120 Palma de Mallorca (Balearic Islands, Spain).
3. TIRME Data Protection Officer contact email: lopd@tirme.com

What personal data do we collect through the Site?

1. Data collected directly: by filling out forms and questionnaires located in the different sections of the page in order to send us your requests for information, requests, register your registration, etc..
2. Data collected indirectly through the use of cookies: for statistics, to analyze the use made of our Site and to provide value-added services such as the location map of our offices. Please see our Cookie Policy https://www.tirme.com/en/cookies for information on the cookies we use.

For what purposes do we process your personal data and what is the legal basis?

The personal data provided by the user will be processed by THE COMPANY for the following purposes.

PURPOSE 1. Contact and management of web site users

1. Description of the purpose: The personal data of users who contact THE COMPANY through any of the contact channels made available on the website, will be processed in order to manage such contact, meet the requests received through the same and provide the services requested.
2. Basis of legitimacy: The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation at the request of the data subject of pre-contractual measures.
3. Data processed for this purpose: Identification and contact data (name, surname, e-mail address, telephone number) and any other type of data that may be provided by the user by filling in the form.

PURPOSE 2. Job

1. Description of the purpose: The personal data of users who wish to participate in our recruitment processes will be processed in order to manage the receipt of resumes sent to THE COMPANY, as well as in order to analyze the professional profile of the candidate and, where appropriate, to enable participation in the selection processes of personnel of THE COMPANY and, where appropriate, of companies of the business group.
2. Basis of legitimacy: The data subject gives express and explicit consent to the processing of his or her personal data for one or more specific purposes.
3. Data processed for this purpose: Identification and contact data (name, surname, identity documents, postal and/or e-mail address, telephone number, etc.). Data on personal characteristics and social circumstances (e.g., age, sex, date of birth, number of children, etc.). Academic and professional data (e.g. data contained in your curriculum vitae).

PURPOSE 3. Website Cookie Management

1. Description of purpose: In case you accept our Cookie Policy, in particular our analytics, personalization and advertising cookies, user data may be processed in accordance with the provisions of the Cookie Policy.
2. Basis of legitimacy: The data subject gives express and explicit consent to the processing of his or her personal data for one or more specific purposes.
3. Data processed for this purpose: Navigation data (IP address and the domain from which access is obtained, date and time of the visit, etc.).

PURPOSE 4. Visits to the facilities

1. Description of the purpose: The personal data of users who have an interest in visiting our facilities will be processed in order to process the request made by the user and, where appropriate, manage the visit to our facilities that has been previously requested.
2. Basis of legitimacy: The data subject gives express and explicit consent to the processing of his or her personal data for one or more specific purposes.
3. Data processed for this purpose: Identification and contact data (name, surname, e-mail address, telephone, postal address) and any other type of data that may be provided by the user by filling in the form.

PURPOSE 5. Ethical channel

1. Description of the purpose: to identify infractions, irregularities or non-compliances committed within the entity or any of its subsidiaries, and, if appropriate, to initiate the corresponding investigation file.
2. Legitimate basis: the entity's legitimate interest in crime prevention and, at the European level, compliance with DIRECTIVE (EU) 2019/1937 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 23 October 2019 on the protection of persons reporting breaches of Union law.
3. Data processed for this purpose: identification and contact data (name and surname, city, country, address, e-mail, telephone), and other categories of data that may be provided by users when communicating with THE COMPANY.

PURPOSE 6. Management of the services provided through the Website

1. Description of the purpose: The personal data of the users will be processed for the purpose of providing the services enabled through the Website, such as providing the user with the possibility of placing orders on-line, management and processing of such orders, as well as tracking and archiving of historical orders placed, or providing the user with the consultation of his invoicing. The personal data of the users will be processed to contact them in relation to the services provided, including communications by electronic means, such as e-mails of the order placed, order reminders or communication of any incident that may occur with your order.
2. Basis of legitimacy: The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation at the request of the data subject of pre-contractual measures.
3. Data processed for this purpose: Identification and contact data (name, surname), data on transactions of goods and services (goods and services received by the person concerned, financial transactions), economic, financial and insurance data (payment data).

PURPOSE 7. Video surveillance in facilities.

1. Description of the purpose: Images captured by video surveillance systems are processed exclusively for the following purposes:
   1. To preserve the security of people, property, and facilities.
   2. To control access for people and vehicles.
   3. To monitor production and technical processes.
   4. To carry out labor control functions in accordance with Article 20.3 of the Workers' Statute.
2. Legal basis: This processing is carried out based on TIRME's legitimate interest in protecting corporate assets and monitoring compliance with labor obligations and processes, in accordance with Article 6.1.f of the GDPR and Article 22 of the LOPDGDD.
3. Data processed for this purpose: Images and data derived from incidents or access.

What personal information do you need to provide in each case?

THE COMPANY informs users that, when personal data are collected through a form made available through our website, it will be necessary for the user to provide at least those data marked with an asterisk (*). Failure to provide such data, considered necessary, THE COMPANY will not be able to process your request.

How long do we keep your personal data?

The personal data provided by users will be kept for the time necessary, and as long as they are limited and relevant, to effectively fulfill the purposes stated above.

In particular, TIRME will keep the personal data submitted by users as long as they are necessary to manage and respond to the queries raised (contact requests, booking visits, information ...), as long as the user has not withdrawn his consent or exercised his rights of deletion, cancellation or limitation of processing.

The data collected through selection processes or job applications will be retained for a period of 2 years from receipt and, in any case, while the data subject does not withdraw their consent. The images and data collected from the data subjects will be process as long as the consent is not withdrawn and continue to be relevant and necessary for the purpose of promoting the activity of TIRME.

Regarding the conservation of information related to browsing data and cookies, you can obtain more information in our Cookie Policy: https://www.tirme.com/en/cookies. 

Images captured through TIRME's video surveillance system will be stored for a maximum of 30 days, after which they will be automatically deleted by overwriting. Exceptionally, they may be stored for a longer period if they document incidents, damages, violations, workplace accidents, or other relevant events that must be investigated or reported to the authorities.

Who are the recipients of user data?

The following data transfers are foreseen:

1. To Public Administrations when necessary in accordance with the regulations in force at any given time, as well as to the judicial authorities and State Security Forces and Corps when necessary.
2. Our company is part of the URBASER Group so data transfers to companies that are part of the group are foreseen. This communication will be made with the same purpose and conservation periods for which the data subjects has been informed.
3. Responsible for web analytics services: the site has enabled tools provided by Google LLC. The use of these tools may involve an international transfer of data to the United States.

What are the rights of users?

You may exercise these rights by mail to the address Ctra. de Soller Km. 8.2, camino de Son Reus, 07120 Palma de Mallorca (Balearic Islands, Spain) or through the email address lopd@tirme.com indicating which right you wish to exercise. In both cases, the identity of the person exercising their rights must be accredited. If this is not sufficient, additional information may be requested.

Likewise, the data subjects have the right to withdraw the consent given and to complain to the Spanish Data Protection Agency, as well as contacting TIRME's Data Protection Officer.

Safety measures

THE COMPANY adopts the necessary technical and organizational measures to ensure the security of personal data to prevent its alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the data and the risks to which they are exposed.

Modification of the Privacy Policy

THE COMPANY reserves the right to modify this Privacy Policy when deemed necessary, without the need for new acceptance by the user.

In no event shall THE COMPANY modify policies or practices to make them less effective in protecting our customers' previously stored personal data without the prior consent of the affected customers.

Date of last modification: 12/01/2026