Last updated: October 2026
In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), this page explains clearly who processes your data, why, on what legal basis, who it is shared with and what your rights are.
1. Data controller
- Controller
- Piscines Ricard, S.L. (Impools)
- Tax ID (NIF)
- B17760232
- Postal address
- Ctra. de L'Estartit s/n, 17257 Torroella de Montgrí (Girona), Spain
- Phone
- +34 972 76 02 45
- info@impools.cat
2. What data we process, why, and for how long
We process the information provided by our stakeholders in the following activities. None of them involves automated decision-making or profiling.
| Activity | Purpose | Legal basis | Retention |
|---|---|---|---|
| Website form and enquiries (form, email, phone or WhatsApp) | Answering enquiries, preparing quotes and keeping in professional contact | Consent, which you can withdraw at any time without affecting prior processing (Art. 6.1.a GDPR) | As long as needed to handle the enquiry; no more than 2 years if no business relationship follows |
| Marketing emails | Sending offers, promotions and news by email, only if you have agreed | Consent (Art. 6.1.a GDPR) | Until you withdraw consent |
| Customers | Customer management, quotes, works, maintenance, and accounting, tax and administrative management | Performance of a contract (signed quote). Without this data we cannot provide the service (Art. 6.1.b GDPR) | For the duration of the relationship and then for the periods required by tax law |
| Suppliers | Managing supplier relationships, and accounting, tax and administrative management | Performance of a service contract (Art. 6.1.b GDPR) | For the duration of the relationship and then for the periods required by tax law |
| CVs | Recruitment | The applicant's consent (Art. 6.1.a GDPR) | While useful for recruitment, or until you ask us to delete it |
| Staff | Human resources, payroll, occupational health and safety, and working-time records | Performance of the employment contract and legal obligations (Art. 6.1.b and 6.1.c GDPR) | For the periods set by employment law |
| CCTV | Security of people, property and premises | Public interest (Art. 6.1.e GDPR and Art. 22 LOPDGDD) | No more than one month, unless footage must be kept as evidence of an incident |
Fields marked with an asterisk on the form are required so that we can reply to you. When each activity ends, data is kept blocked only for the legal periods needed to deal with possible liabilities, and is then deleted. It is also deleted at the data subject's request, where the law allows.
3. Who we share data with
| Activity | Recipients |
|---|---|
| Website form, marketing emails and CVs | Not shared with third parties unless required by law |
| Customers, suppliers and staff | Competent public authorities and banks or financial institutions |
| CCTV | Competent public authorities (police and courts) |
To provide our services, providers acting on our behalf (web hosting and email, tax and accounting advisers) may have access to data under a data processing agreement. We only use providers that offer sufficient security guarantees.
International transfers: we do not transfer data outside the European Union. If you choose to message us on WhatsApp, Meta Platforms processes that conversation under its own privacy policy, which may involve international transfers with the safeguards set out in the GDPR.
4. Your rights
You have the right to know whether we process your personal data, and to:
- Access your data and rectify any inaccuracies.
- Request erasure when, among other reasons, the data is no longer needed for the purpose for which it was collected.
- Request restriction of processing; we will then keep the data only for the establishment or defence of legal claims.
- Object to processing on grounds relating to your particular situation; we will stop unless there are compelling legitimate grounds or the data is needed for legal claims.
- Request portability of your data to another controller, where technically possible.
- Withdraw your consent at any time.
To exercise these rights, email info@impools.cat or write to Piscines Ricard, S.L., Ctra. de L'Estartit s/n, 17257 Torroella de Montgrí (Girona), Spain, stating which right you wish to exercise and proving your identity (for example, with a copy of your ID).
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
5. Our commitment to data protection
The management of Piscines Ricard, S.L. has approved an internal data protection policy that applies to the company, its directors and staff, and suppliers with access to data. As a matter of accountability, the company must be able to demonstrate compliance and pays particular attention to higher-risk processing. We uphold the following principles:
- Lawfulness, fairness and transparency: we always inform people about processing and only process data with consent or another valid legal basis, taking particular care with minors.
- Purpose limitation and data minimisation: we only collect data that is adequate, relevant and necessary for each purpose.
- Accuracy: we keep data up to date and promptly correct or delete inaccurate data.
- Storage limitation: we do not keep data longer than necessary.
- Integrity and confidentiality: we apply technical and organisational measures against unauthorised access, loss or destruction.
- Lawful sources: we never buy or obtain data from unlawful sources.
Our staff receive data protection training, apply the security measures relevant to their role and must report any incident or data breach immediately. We review the effectiveness of our measures every year and whenever there are significant changes to our processing.
6. Security on this website
The website uses an encrypted connection (HTTPS). The contact form does not store data on the server: it is sent straight to the company by email, and access to information is limited to the staff who need it.
7. Cookies
This website does not use its own analytics or advertising cookies. You'll find full details in our cookie policy.