PRIVACY POLICY

1. Identification of the controller

The personal data controller is LA FARGA YOURCOPPERSOLUTIONS, S.A., with address for contact purposes at La Colonia Lacambra de Vinyoles s/n, 08508 Les Masies de Voltregà, Barcelona – Spain (the “Company”).

2. Purposes and legal basis for the personal data processing

Purpose Categories of personal data
and recipients
Legal basis
To respond to requests for information, suggestions and/or queries.

Categories of personal data:

  • – Identifying details1
  • Contact details2

Recipients:

  • Information technology service providers

Legitimate interest of the Company and/or third parties (Article 6.1(f) of the GDPR):

The Company has an interest in providing an optimal service to users of its website in a secure online environment. As such, the Company has the following legitimate interest that prevails over the fundamental rights and freedoms of the data subjects, as the processing is within the reasonable expectations that data subjects have based on their relationship with the Company:

  • To create secure information system infrastructures to prevent illegal and malicious activities that may compromise the personal data stored in the information systems.

In any case, data subjects may request further information in relation to the legitimate interest or exercise their right to object to the processing of their personal data on the basis of legitimate interest by sending this request to lafarga@lafarga.es.

To carry out website maintenance tasks in order to provide a secure environment for its users.

Categories of personal data:

  • User browsing history data3

Recipients:

  • Information technology service providers
To interact (i.e., respond to messages or comments, generate reactions, share content, etc.) with users of the Company’s profiles on social media, which will involve the communication of certain data (i.e., IP address and user browsing data) to the providers of those social media channels.

Categories of personal data:

  • – Identifying details1
  • Contact details2
  • User browsing history data3

Recipients:

  • Information technology service providers

To manage applications for jobs published on the website.

Categories of personal data:

  • Identifying details1
  • Contact details2
  • Academic details4
  • Professional details5

Recipients:

  • Information technology service providers
  • Staff recruitment providers

Performance of a contract or taking steps prior to entering into a contract (Article 6.1(b) of the GDPR):

The processing of the data of the data subjects who have registered to apply for a job vacancy or for educational scholarships offered by the Company is lawful because it is necessary for the taking of steps, at the request of such data subjects, prior to entering into a contract or the intention to enter into a contract.

Refusal to provide the personal data requested by the Company may result in it being impossible to enter into or maintain such a contract.

To manage the awarding of educational scholarships

Categories of personal data:

  • Identifying details1
  • Contact details2
  • Academic details6
  • Family details7
  • Financial details8

Recipients:

  • Information technology service providers
  • Public sector bodies (i.e., the municipal councils of Les Masies de Voltregà and Sant Joan de les Abadesses).

To personalise certain features of the website (for example, the language in which the content is displayed) according to the browsing preferences expressed by the users and to analyse their browsing behaviour (for example, sections that attract a greater or lesser number of visits) in order to improve the services offered through the website. Detailed information can be found in the Cookies Policy.

Categories of personal data:

  • User browsing history data3

Recipients:

  • Information technology service providers
  • Marketing service providers
  • Social media providers

Consent (Article 6.1(a) of the GDPR):

Data subjects may grant consent by clicking on the acceptance or preference selection buttons or by taking any other clear affirmative action.

Data subjects may withdraw their consent at any time, as detailed in Section 5.

1For example: first name, surname(s), age, photograph, identity card/passport, residency certificate or similar and social media username.
2For example: telephone number, email address and postal address.
3For example: IP address, user or device identifier, browser type and version, browsing preferences, websites visited and country from which the connection is made.
4For example: educational background and qualifications.
5For example: previous work experience, position, place of work and membership of professional bodies/associations.
6For example: level of education, academic record, academic registration.
7For example: photocopy of family record book or similar and common-law partnership certificate.
8For example: photocopy of income tax return and bank account certificate.

The Company will endeavour to ensure that the communication of personal data is made to countries for which the European Commission has determined that they guarantee an adequate level of data protection. If personal data are processed from countries that do not provide such level of protection, the Company and/or the service providers (as the case may be) will, if necessary, adopt appropriate guarantees (for example, the standard contractual clauses included in Commission Implementing Decision (EU) 2021/914) to carry out such data transfers in accordance with the applicable data protection legislation. You may request information from the Company on the appropriate guarantees regarding the international transfer of personal data at lafarga@lafarga.es.

The Company does not share personal data with any other third parties, unless required by the applicable law, authorised by the data subject or sent to potential investors or buyers in case of corporate reorganisation activities.

The website also uses plugins from the following social media: X (formerly Twitter), YouTube and LinkedIn, which can be recognised by each social media channel’s logo, to enable users to access the Company’s profile on these platforms. By clicking on these buttons, the personal data of the users (including IP address and browsing data) will be transferred to the providers of these social media sites, and the Company will not be liable for the further processing that the providers of the social media sites may carry out with such personal data. The purpose and scope of data collection and their further processing and use by X, YouTube or LinkedIn, as well as the related rights and options to configure privacy settings, can be found in the data protection information of these companies.

3. Retention period

The Company will retain personal data for the period of time strictly necessary to fulfil the purposes for which they have been collected or, if applicable, until the expiry of the statute of limitations for any liabilities that may arise and for the periods necessary to comply with any applicable legal obligations.

4. Origin of personal data

The Company only processes personal data that are relevant for the purposes mentioned in Section 2.

In addition to the personal data that data subjects provide directly to the Company, the Company may obtain personal data through cookies and similar technologies installed on their devices, as well as, where applicable, those of their family members, staff recruitment and placement companies, previous employers or competent authorities.

5. Data protection rights

Rights Contents
Access Access You may request confirmation as to whether your personal data are being processed and, if they are, access to your data included in the Company’s files.
Rectification Rectification You may request the rectification of your personal data if they are inaccurate.
Erasure Erasure You may request the erasure of your personal data.
Objection Objection You may request that your personal data not be processed in certain circumstances.
Portability Portability You may ask to receive, in an electronic file, the personal data you have provided to the Company, as well as the right to transfer them to other third parties.
Restriction of the processing

You may request the restriction of the processing of your personal data when:

  • The accuracy of your personal data is contested.
  • The processing of your personal data is unlawful and you object to their erasure.
  • The Company no longer needs your personal data for the purposes of the processing, but you need them to formulate, exercise or defend claims.
  • You have objected to the processing of your personal data for complying with a task carried out in the public interest or where it is necessary for the purposes of a legitimate interest, while verifying whether the Company’s legitimate grounds prevail over yours.
Revoking of consent You may revoke your consent without this affecting the lawfulness of the processing based on the consent prior to your revocation.

You may exercise, where applicable, your data protection rights by sending the Company a written communication to lafarga@lafarga.es, indicating in the subject line of the communication “LA FARGA WEBSITE PRIVACY POLICY – USER”. For this purpose, the Company may request as much information and documentation it deems necessary and appropriate to properly identify you.

You may also exercise your right to complain to a data protection authority, including those located in your place of residence, work or in the place where the alleged violation has taken place.