PRIVACY POLICY

1. Identification of the controller

The data controller of personal data is LA FARGA YOURCOPPERSOLUTIONS, S.A., with contact address at La Colonia Lacambra de Vinyoles s/n, 08508 Les Masies de Voltregà, Barcelona – Spain (the “Company”).

2. Purposes and legal basis for the processing of personal data

Purpose Categories of personal data and recipients Legal basis
Respond to requests for information, suggestions and/or enquiries.

Categories of personal data:

  • Identification data1
  • Contact details2

Recipients:

  • Information technology service providers
Legitimate interest of the Company and/or third parties (Article 6.1(f) of the GDPR): The Company has an interest in providing an optimal service to users of its website in a secure online environment. Accordingly, the Company pursues the following legitimate interest, which prevails over the fundamental rights and freedoms of data subjects, since the processing falls within the reasonable expectations of data subjects based on their relationship with the Company:

  • Creation of secure information system infrastructures to prevent illegal and malicious activities that could compromise the personal data stored in information systems.

In any event, data subjects may request further information regarding the legitimate interest or exercise their right to object to processing of their data based on the legitimate interest by sending such request to lafarga@lafarga.es.

Carry out website maintenance tasks to provide a secure environment for users.

Categories of personal data:

  • User browsing history data3

Recipients:

  • Information technology service providers
Interact (i.e. respond to messages or comments, generate reactions, share content, etc.) with users of the Company’s social media profiles, which will involve communicating certain data (i.e. IP address and user browsing data) to the providers of those social networks.

Categories of personal data:

  • Identification data1
  • Contact details2
  • User browsing history data3

Recipients:

  • Information technology service providers
Manage applications for job positions published on the website.

Categories of personal data:

  • Identification data1
  • Contact details2
  • Academic data4
  • Professional data5

Recipients:

  • Information technology service providers
  • Recruitment service providers
Performance of a contract or application of pre-contractual measures (Article 6.1(b) of the GDPR): The processing of data of data subjects who have applied for a job position or educational scholarships offered by the Company is lawful because it is necessary for the implementation, at the request of those data subjects, of pre-contractual measures or the intention to enter into a contract. Refusal to provide the personal data requested by the Company may result in the inability to enter into or maintain such contract.
Manage the awarding of educational scholarships.

Categories of personal data:

  • Identification data1
  • Contact data2
  • Academic data6
  • Family data7
  • Financial data8

Recipients:

  • Information technology service providers
  • Public authorities (i.e. the town councils of Les Masies de Voltregà and Sant Joan de les Abadesses).
Personalise certain website functionalities (for example, the language in which content is displayed) according to users’ stated browsing preferences and analyse their browsing behaviour (for example, sections receiving more or fewer visits) in order to improve the services offered through the website. Detailed information can be found in the Cookie Policy.

Categories of personal data:

  • User browsing history data3

Recipients:

  • Information technology service providers
  • Marketing service providers
  • Social media providers
Consent (Article 6.1(a) of the GDPR): Data subjects may give their consent by clicking on acceptance buttons or preference selections or by performing any other clear affirmative action. Data subjects may withdraw their consent at any time, as detailed in Section 5.

1For example: first name, surname, age, photograph, identity card/passport, registration certificate or similar document, and social media username. 2For example: telephone number, email address and postal address. 3For example: IP address, user or device identifier, browser type and version, browsing preferences, websites visited and country from which the connection is made. 4For example: education and academic qualifications. 5For example: previous professional experience, position, workplace and membership of professional associations. 6For example: level of education, academic record, academic enrolment. 7For example: copy of the family record book or similar document and certificate of registered partnership. 8For example: copy of the personal income tax return and bank account certificate.

Manage and maintain a pre-contractual relationship with you or with the company or organisation where you work or collaborate. . Categories of personal data:

  • Identification data.
  • Contact data.
  • Professional data.

Recipients:

  • Information technology service providers.
Application of pre-contractual measures (Article 6.1(b) of the GDPR): The processing of data of data subjects seeking to maintain a pre-contractual relationship is lawful because it is necessary for the implementation, at the request of those data subjects, of pre-contractual measures or the intention to enter into a contract. Refusal to provide the personal data requested by the Company may result in the inability to maintain this pre-contractual relationship.
Manage and maintain a contractual relationship with you or with the company or organisation where you work or collaborate. Categories of personal data:

  • Identification data.
  • Contact data.
  • Professional data.

Recipients:

  • Information technology service providers.
Legitimate interest of the Company (Article 6.1(f) of the GDPR): The processing of personal data of data subjects seeking to maintain a contractual relationship with the Company is lawful under applicable legislation. Performance of a contract (Article 6.1(b) of the GDPR): The processing of data of data subjects maintaining a contractual relationship is lawful because it is necessary for the performance of the contract. Refusal to provide the personal data requested by the Company may result in the inability to manage performance of the contract.
Carry out commercial prospecting activities. Categories of personal data:

  • Identification data.
  • Contact data.
  • Professional data.

Recipients:

  • Information technology service providers.
Legitimate interest of the Company (Article 6.1(f) of the GDPR) in identifying users who may be interested in its products or identifying potential business opportunities.
Send communications relating to news, promotions and/or corporate information about the company and its products. Categories of personal data:

  • Identification data.
  • Contact data.

Recipients:

  • Information technology service providers.
Consent of the data subject (Article 6.1(a) of the GDPR).
Assess the quality of the Company’s products by inviting its customers to participate in satisfaction surveys. Categories of personal data:

  • Identification data.
  • Contact data.

Recipients:

  • Information technology service providers.
Legitimate interest of the Company (Article 6.1(f) of the GDPR) in improving its business and, where applicable, complying with quality standards.

LA FARGA YOURCOPPERSOLUTIONS, S.A. will not disclose personal data to third parties, except to the competent authorities and/or bodies where legally required, as well as to service providers and third parties necessary for the management and performance of contractual relationships and/or the processing purposes defined herein.

LA FARGA YOURCOPPERSOLUTIONS, S.A. intends to carry out international transfers of data to providers located in countries that do not have regulations equivalent to European regulations on the processing of personal data. Such engagement will be carried out by applying the necessary guarantees and safeguards to protect users’ privacy, specifically the Standard Contractual Clauses approved by the European Commission and the EU-U.S. Data Privacy Framework. To obtain a copy thereof, you may contact the data controller at privacy@lafarga.es.

Likewise, the website uses social media plugins from Twitter, YouTube and LinkedIn, which can be identified by the social network logo, allowing users to access the Company’s profile on those platforms. By clicking on these buttons, users’ personal data (including IP address and browsing data) will be transferred to the providers of those social networks, and the Company shall not be responsible for any subsequent processing that the social network providers may carry out with such data. The purpose and scope of data collection and its subsequent processing and use by Twitter, YouTube or LinkedIn, as well as the related rights and the options for configuring privacy settings, can be found in the data protection information provided by these companies.

3. Data retention period

The Company will retain personal data for the period strictly necessary to fulfil the purposes for which it was collected or, where applicable, until the limitation periods for any liabilities that may arise have expired, and for the periods necessary to comply with any applicable legal obligation.

4. Source of personal data

The Company only processes personal data that is relevant to the purposes mentioned in Section 2.

In addition to personal data provided directly to the Company by data subjects, the Company may obtain personal data through cookies and similar technologies installed on their devices and, where applicable, from their family members, employment and recruitment agencies, previous employers or competent authorities.

5. Data protection rights

Rights Contents
Access You may request confirmation as to whether your personal data are being processed and, if so, access the data included in the Company’s files.
Rectification You may request the rectification of your personal data where they are inaccurate.
Erasure You may request the deletion of your personal data.
Objection You may request that your personal data not be processed in certain circumstances.
Portability You may request to receive, in an electronic file, the personal data you have provided to the Company, as well as the right to transmit them to other third parties.
Restriction of the processing

You may request restriction of the processing of your personal data where:

  • The accuracy of your personal data is contested.
  • The processing of your personal data is unlawful and you oppose their erasure.
  • The Company no longer needs your personal data for the processing purposes, but you need them for the establishment, exercise or defence of legal claims.
  • You have objected to processing of your personal data for the performance of a task carried out in the public interest or where necessary for the purposes of a legitimate interest, while it is verified whether the Company’s legitimate grounds override yours.
Revoking of consent You may withdraw your consent without affecting the lawfulness of processing based on consent prior to its withdrawal.

Where applicable, you may exercise your data protection rights by sending the Company a written communication to privacy@lafarga.es, stating in the subject line “LA FARGA WEB PRIVACY POLICY – USER”. For this purpose, the Company may request any information and documentation it considers necessary and appropriate to duly identify you.

You may also exercise your right to lodge a complaint with a data protection authority, including those in your place of residence, place of work or the place where the alleged infringement took place.