At GRÀCIACALBET we work to guarantee privacy in the processing of your personal data. We have updated our Privacy Policy to clearly inform you of how we collect, use, and safeguard the data of people who contact our company:
• Data controller
• Purposes of data processing
• Data retention period
• Legal basis for data processing
• Data disclosure
• International data transfers
• Your rights
• Source of your data.
Who is responsible for processing your data?
Company name: GRÀCIA I CALBET SLP.
Trade name: GRÀCIACALBET
Tax ID (NIF): B-63085955
Postal address: 08007 Barcelona, Gran Via Corts Catalanes 617, 3º 2ª
Telephone: 933170429
Email: info@graciacalbet.com
For what purpose do we process your personal data?
At GRÀCIACALBET, data is processed for the following purposes, depending on the reason you provided it:
Managing data provided directly by the data subject to inform about our products and services, respond to requests, inquiries, or queries, and provide follow-up.
Managing data provided by clients when contracting our services, at an organizational, accounting, tax, and administrative level, as well as informing about services, events, and news related to our professional activity that may be of interest.
Managing the USER’s professional data for their participation in various events or activities we organize and, if authorized, to inform about other activities or events we may organize in relation to projects or services that may be of interest.
Sending newsletters when you have subscribed to them, using the data provided for this purpose.
Creating, if applicable, a user profile to offer our products and services.
How long will we keep your data?
Data for managing the relationship with clients and for billing and payment of services will be retained for as long as the contract is in force. Once the relationship has ended, data may be retained for the period required by applicable law and until potential liabilities arising from the contract expire.
Data related to comments on our products will be kept for as long as the products or services to which they refer are valid and public, unless you request their deletion at any time.
Data for participation in events and activities will be kept for the duration of the events, to manage their development, and thereafter until any possible liabilities arising from them expire.
Data for sending newsletters will be kept indefinitely until, if applicable, you request their deletion.
Data for sending commercial communications and creating commercial profiles of our products or services will be kept indefinitely until, if applicable, you request their deletion.
What is the legal basis for processing your data?
• The legal basis for processing your data for purposes 1 to 3 is the contractual performance of the corresponding service.
• The prospective offering of associated products and services is based on the legitimate business interest of being able to offer our clients additional products or services and thereby ensure their loyalty. This legitimate interest is recognized by applicable legal regulations (General Data Protection Regulation), which expressly allow the processing of personal data on this legal basis for direct marketing purposes.
Nevertheless, we remind you that you have the right to object to this processing of your data, and you may do so by any of the means described in this Policy.
• The basis for sending commercial communications to non-client users is consent, which has been requested and may be withdrawn at any time. The withdrawal of this consent will not in any case affect the performance of the contract, but data processing carried out for this purpose before withdrawal will not lose its lawfulness as a result of such withdrawal.
Who will your data be disclosed to?
Data will not be transferred to third parties except to:
• Financial institutions through which payment collection and processing are carried out.
• Competent public authorities, in cases provided by law and for the purposes defined therein.
Are data transferred to third countries?
No international data transfers are carried out.
What are your rights when you provide us with your data?
• Anyone has the right to obtain confirmation as to whether GRÀCIACALBET is processing personal data concerning them, or not.
• Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, if applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• In certain circumstances, data subjects may request the restriction of the processing of their data or its portability, in which case we will only retain it for the exercise or defense of claims.
• In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, GRÀCIACALBET will stop processing the data, except for compelling legitimate reasons, or for the exercise or defense of possible claims.
You may exercise your rights in the following ways:
By email, attaching a copy of your ID to: info@graciacalbet.com
By postal mail: 08007 Barcelona, Gran Via Corts Catalanes 617, 3º 2ª, attaching a photocopy of your ID.
At the email and postal addresses indicated, we will provide the necessary forms to exercise these rights.
• If you have given your consent for a specific purpose, you have the right to withdraw the consent granted at any time, without affecting the lawfulness of processing based on your consent prior to its withdrawal.
• If you believe your rights have been violated with regard to the protection of your personal data, especially when you have not obtained satisfaction in exercising your rights, you may file a complaint with the competent Data Protection Authority through its website: www.agpd.es.
How did we obtain your data?
The personal data we process at GRÀCIACALBET comes from the data subjects themselves or their legal representative.
We remind you that you should not provide third-party data unless you have permission to do so and they have been previously informed.
No special categories of personal data are processed (these include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data concerning health, or data concerning a natural person’s sex life or sexual orientation).