Getxoshop is committed to protecting your privacy. We are aware of our responsibilities in the processing and use of your personal data and we strive to ensure an optimal level of regulatory compliance with applicable laws in this area in accordance with the RGPD regulation.

The Privacy Policy that we make available to you provides clear, transparent and complete details of the personal data that we may collect from you and how we will use that information.

Please read the Privacy Policy carefully.

1. About us: who is responsible for your personal data?

Getxoshop is an internet portal that bases its activity on offering a business search service (“geolocation”) in the municipality of Getxo | Bizkaia.

2. How and when do we collect your personal data?

We collect your information at different times and from various and different sources, depending on the relationship you have with us. For example:

Directly from you, when you request to appear in the directory.

From public sources, such as Internet search engines, news articles and social networks;

The Getxo City Council’s transparency / Open policy is based on its portal (“public information”).

From third parties who provide us with data on businesses that open around them or that have knowledge that provide services in the municipality of Getxo ( in this case we will omit references to telephone numbers or emails).

From third-party data providers; and

Through our own website. Either through the use of cookies if you visit our website – you can find more information about this in our Cookies Policy – or through the different forms or applications that we make available to you.

3. For what purpose do we use your personal data?

We may use your personal data for several different purposes, depending on your relationship with Getxoshop and the specific circumstances of the data processing we are about to perform. For each purpose for which we are going to use your personal data, Getxoshop will inform you of the “legitimacy basis” that allows us to treat them in strict compliance with the applicable data protection regulations.

When the data we process are considered “sensitive personal data”, we must have an additional specific “legitimacy basis” for processing such data.

Normally we will rely on the following “legitimacy databases”, depending on the specific processing of personal data that we are going to carry out:

We need to use your personal data to enter into or fulfil a contract that we will enter into or already have with you. For example, we may need to use your personal information to provide you with a quote or other associated products.

You have given your free, specific, informed and unambiguous consent for the processing of personal data (for example, sometimes in connection with your business preferences for marketing purposes).

Before we collect and/or process sensitive personal data, we will ensure that we have one of the following legal bases:

You have given your explicit consent;

We need to use such personal data to make, exercise or defend claims.

Notwithstanding the above, in certain circumstances, we will need your explicit consent to process sensitive personal data.

4. What marketing activities do we carry out?

We may use your personal data to provide you with commercial information about our products or related services that may be of interest to you.

In most cases, we will only send you marketing communications for which you have unequivocally expressed your consent and therefore interest in receiving them.

At other times, we will treat your personal data to provide you with business information based on our legitimate business interests and the relationship we have with you as a customer.

In any specific case, we will inform you accordingly – with your consent, if necessary – at the time of collection of your personal data for this purpose.

However, if you wish to opt out of receiving further marketing communications – by opting out of having us process your personal data for this purpose or by withdrawing your initial consent – you may do so by notifying us when we contact you to provide you with such marketing information.

5. How long do we keep your personal data?

We will only retain your personal data for as short a time as possible. This means that we will only keep them for as long as is reasonably necessary to fulfil the purpose for which they were collected and in strict compliance with the principle of limiting the period of retention of your personal data.

You should bear in mind that, among the purposes established for the processing of your personal data, is the fulfilment of our legal and regulatory obligations. Therefore, in some circumstances, Getxoshop will be obliged to keep your data for as long as necessary to comply with these obligations. For example, like any other commercial operator, we must keep commercial documents – which may directly or indirectly contain personal data – for 6 years.

The exact length of time we keep your personal data will depend on your relationship with us and the type of personal data we hold.

6. Contact with us

If you would like more information about this Privacy Policy or have any other questions about how we collect, store or treat your personal data, you can contact our Data Protection Officer (“DPD”) by post, sending your enquiry to the attention of the Data Protection Officer, Getxoshop | Urbasa 14 Atico B 48993 Getxo, Bizkaia or by e-mail, sending your enquiry to

This Privacy Policy was last updated on 25/05/2018