Categories of personal data:

• – Identifying details1
• Contact details2

Recipients:

• Information technology service providers

Legitimate interest of the Company and/or third parties (Article 6.1(f) of the GDPR):

The Company has an interest in providing an optimal service to users of its website in a secure online environment. As such, the Company has the following legitimate interest that prevails over the fundamental rights and freedoms of the data subjects, as the processing is within the reasonable expectations that data subjects have based on their relationship with the Company:

• To create secure information system infrastructures to prevent illegal and malicious activities that may compromise the personal data stored in the information systems.

In any case, data subjects may request further information in relation to the legitimate interest or exercise their right to object to the processing of their personal data on the basis of legitimate interest by sending this request to lafarga@lafarga.es.

Categories of personal data:

• User browsing history data3

Recipients:

• Information technology service providers

Categories of personal data:

• – Identifying details1
• Contact details2
• User browsing history data3

Recipients:

• Information technology service providers

To manage applications for jobs published on the website.

Categories of personal data:

• Identifying details1
• Contact details2
• Academic details4
• Professional details5

Recipients:

• Information technology service providers
• Staff recruitment providers

Performance of a contract or taking steps prior to entering into a contract (Article 6.1(b) of the GDPR):

The processing of the data of the data subjects who have registered to apply for a job vacancy or for educational scholarships offered by the Company is lawful because it is necessary for the taking of steps, at the request of such data subjects, prior to entering into a contract or the intention to enter into a contract.

Refusal to provide the personal data requested by the Company may result in it being impossible to enter into or maintain such a contract.

Categories of personal data:

• Identifying details1
• Contact details2
• Academic details6
• Family details7
• Financial details8

Recipients:

• Information technology service providers
• Public sector bodies (i.e., the municipal councils of Les Masies de Voltregà and Sant Joan de les Abadesses).

To personalise certain features of the website (for example, the language in which the content is displayed) according to the browsing preferences expressed by the users and to analyse their browsing behaviour (for example, sections that attract a greater or lesser number of visits) in order to improve the services offered through the website. Detailed information can be found in the Cookies Policy.

Categories of personal data:

• User browsing history data3

Recipients:

• Information technology service providers
• Marketing service providers
• Social media providers

Consent (Article 6.1(a) of the GDPR):

Data subjects may grant consent by clicking on the acceptance or preference selection buttons or by taking any other clear affirmative action.

Data subjects may withdraw their consent at any time, as detailed in Section 5.

1For example: first name, surname(s), age, photograph, identity card/passport, residency certificate or similar and social media username.
2For example: telephone number, email address and postal address.
3For example: IP address, user or device identifier, browser type and version, browsing preferences, websites visited and country from which the connection is made.
4For example: educational background and qualifications.
5For example: previous work experience, position, place of work and membership of professional bodies/associations.
6For example: level of education, academic record, academic registration.
7For example: photocopy of family record book or similar and common-law partnership certificate.
8For example: photocopy of income tax return and bank account certificate.