Privacy policy

Last updated: October 2026

On this page

    Who is responsible for processing your personal data?

    This Privacy Policy applies to all personal data provided to the TUBACEX GROUP by any data subject through this website, as well as to any individual interested in the products and services offered by the TUBACEX GROUP through its websites or any other means of communication.

    The purpose of the TUBACEX GROUP's Privacy Policy is to provide transparent information about how we process personal data in compliance with applicable data protection legislation.

    Identification of the Data Controller

    The TUBACEX GROUP is an industrial group founded in 1963, specialising in the manufacture of seamless stainless steel tubes, high-alloy tubes and nickel-based superalloy tubes.

    As part of our business operations, we need to process personal data for the purposes described in the following section.

    Further information about our organisation and corporate structure is available at www.tubacex.com.

    Data subjects may contact the TUBACEX GROUP regarding any questions or concerns relating to personal data protection by email at gdpr@tubacex.com or by post at the following address: Tres Cruces 8, 01400 Llodio (Álava), Spain.

    For what purposes do we process your personal data and on what legal basis?

    The TUBACEX GROUP maintains a Record of Processing Activities, which details each of the following processing activities carried out in its capacity as Data Controller:

    • Shareholder Data

      Processing of shareholder data in accordance with Royal Legislative Decree 1/2010 of 2 July, approving the consolidated text of the Spanish Companies Act.

    • Whistleblowing Channel

      Processing of personal data relating to individuals concerned by reports submitted through the whistleblowing channel, in accordance with Organic Law 1/2015 of 30 March, amending the Spanish Criminal Code.

    • Job Applications

      Processing of personal data provided by job applicants, based on their consent, for the purpose of participating in recruitment and selection processes.

    • Customers, Suppliers and Contact Persons

      Processing of contact details of individuals working for legal entities, based on an existing contractual or pre-contractual relationship with the TUBACEX GROUP.

      This also includes the processing of personal data relating to individuals with whom the TUBACEX GROUP maintains a professional relationship, based on its legitimate interests.

      This processing activity also covers the contact details of journalists and other media professionals.

    • Access Control

      Recording of visitor information based on the legitimate interests of the TUBACEX GROUP in ensuring the security of its facilities and monitoring individuals visiting any of its buildings or offices.

    • External Personnel

      Processing of personal data relating to subcontracted personnel or individuals employed by contractors, in accordance with the requirements for the coordination of business activities established under Spanish Law 31/1995 on the Prevention of Occupational Risks.

    • Video Surveillance

      Processing of personal data through video surveillance systems, based on the legitimate interests of the TUBACEX GROUP in ensuring the security of its facilities, in accordance with Instruction 1/2006 of the Spanish Data Protection Agency and applicable private security legislation.

    • Voluntary Social Welfare Scheme (EPSV)

      Processing of personal data relating to permanent employees for the management of the voluntary social welfare scheme.

    • Donations

      Processing of employees' personal data in connection with donations made to charitable organisations.

    • Other Human Resources Processing Activities

      Various processing activities relating to human resources management, which are not detailed in this Privacy Policy.

    How long do we retain your personal data?

    The TUBACEX GROUP shall retain personal data for the duration of the data subject's relationship with the organisation.

    Following the termination of this relationship, personal data shall be retained in accordance with the applicable statutory requirements governing record-keeping and document retention.

    Where a data subject exercises one of their data protection rights, their personal data shall be erased where appropriate, depending on the nature of the right exercised.

    Who has access to your personal data?

    The TUBACEX GROUP may disclose or transfer personal data to public authorities where necessary to comply with its legal obligations, in accordance with the legislation in force at the relevant time.

    Where applicable, personal data may also be disclosed to other competent bodies, including law enforcement authorities and judicial authorities.

    What are your rights as a data subject?

    We inform you that you may exercise the following rights:

    • Right of access: The right to obtain access to your personal data and information about which data is being processed.

    • Right to rectification: The right to request the correction of any inaccurate personal data.

    • Right to erasure: The right to request the deletion of your personal data where legally permissible.

    • Right to restriction of processing: The right to request the restriction of the processing of your personal data where the accuracy, lawfulness or necessity of such processing is in question. In such cases, we may retain the data for the establishment, exercise or defence of legal claims.

    • Right to object: The right to object to the processing of your personal data where the legal basis for such processing is our legitimate interests. The TUBACEX GROUP shall cease processing your personal data unless it demonstrates compelling legitimate grounds for continuing the processing or where such processing is necessary for the establishment, exercise or defence of legal claims.

    • Right to data portability: The right to receive your personal data in a portable format where the legal basis for processing is your consent.

    These rights may be exercised free of charge by the data subject or, where applicable, by their authorised representative, by submitting a written request to: gdpr@tubacex.com

    In addition to the rights outlined above, data subjects have the right to withdraw their consent at any time. Such withdrawal shall not affect the lawfulness of any processing carried out on the basis of consent before its withdrawal.

    The TUBACEX GROUP may continue processing the data subject's personal data to the extent permitted by applicable law.

    The TUBACEX GROUP also reminds data subjects of their right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).

    Unsubscribing from Marketing Communications

    Data subjects have the right to withdraw their consent to receive marketing communications at any time by simply notifying the TUBACEX GROUP that they no longer wish to receive such communications.

    To do so, data subjects may click on the unsubscribe link included in each marketing communication to stop receiving electronic marketing communications.

    Alternatively, they may withdraw their consent by sending an email to: gdpr@tubacex.com

    What security measures have we implemented?

    The TUBACEX GROUP undertakes to comply with its obligation to maintain the confidentiality of personal data and its duty to safeguard such data.

    To this end, it shall adopt the necessary measures to prevent the alteration, loss, unauthorised processing of or access to personal data, in accordance with applicable legislation.

    The TUBACEX GROUP has implemented the technical and organisational security measures necessary to safeguard personal data and prevent its alteration, loss, unauthorised processing and/or unauthorised access.

    These measures take into account the current state of technology, the nature of the data stored and the risks to which such data may be exposed, whether arising from human actions or from physical or environmental factors, in accordance with applicable legislation.

    Links to Third-Party Websites

    The TBX Nexxia website (www.tbxnexxia.com) may contain hyperlinks to other websites that are not operated or controlled by the TUBACEX GROUP.

    Consequently, the TUBACEX GROUP does not guarantee, and shall not be held responsible for, the lawfulness, reliability, usefulness, accuracy or currency of the content published on such websites, or for their privacy practices.

    Before providing personal information to any third-party website outside the control of the TUBACEX GROUP, users are advised to bear in mind that its data protection practices and compliance standards may differ from those of the TUBACEX GROUP.

    Amendments to the Privacy Policy

    The TUBACEX GROUP may amend this Privacy Policy in accordance with the legislation applicable at any given time.

    In all cases, any amendments to this Privacy Policy shall be duly communicated to the data subjects concerned so that they are informed of any changes to the processing of their personal data.

    Where required by applicable legislation, data subjects shall be given the opportunity to provide their consent to such changes.