At LAGUPRES, S.L.U., we work to provide you, through our products and services, with the best possible experience. In some cases, it is necessary to collect information in order to achieve this. We value your privacy and believe that we should be transparent about how we handle it.
Accordingly, and for the purposes of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the “GDPR”), Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter, the “LOPDGDD”), and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (hereinafter, the “LSSI”), LAGUPRES, S.L.U. hereby informs the user that, in its capacity as the data controller, it will process the personal data provided by users in accordance with this Privacy Policy.
Our commitment begins by explaining the following:
We collect your personal data in order to manage our relationship with you and to provide the services you request.
We are transparent about the personal data we collect about you and the reasons why we collect it.
Whenever we use your personal information, we will do so in compliance with the applicable legislation and, where required, we will obtain your consent.
We understand that your personal data belongs to you. Therefore, you may exercise the rights granted to you under the applicable legislation at any time.
Our priority is to safeguard your personal data and process it in accordance with the applicable European data protection legislation.
Who is the controller of your personal data?
Identity:
LAGUPRES, S.L.U., with Tax Identification Number (CIF) B43755586, having its registered office at C/ Irlanda, 23, P.I. Constantí, 43120 Constantí (Tarragona), Spain, and email address protecciondedatos@lagupres.com. Registered with the Commercial Registry of Tarragona, Volume 1980, Folio 144, Sheet T-28926, Entry 8.
What personal data do we collect?
The personal data that the user may provide includes:
• First name and surname.
– Telephone number and e-mail address.
– Information relating to payments and returns.
• IP address, date and time of access to our services, internet browser used, and information about the device’s operating system.
• Any other information or data that you choose to share with us.
Why and for what purpose do we process your data?
At LAGUPRES, S.L.U., we process the information provided by data subjects for the following purposes:
• To respond to and manage requests for information submitted through the contact form.
• To manage CVs submitted to rrhh@lagupres.com for the purpose of participating in our recruitment and selection processes.
• To establish, maintain and manage the contractual relationship with the customer, as well as to provide and administer the contracted services and to carry out the associated billing and information management activities.
• To manage and carry out commercial activities relating to our services.
In certain cases, it may be necessary to disclose information to public authorities or third-party companies for audit purposes, as well as to process personal data contained in invoices, contracts and other documents in order to handle claims from customers or public authorities.
Please note that the personal data processing activities described above are included in the Record of Processing Activities (RoPA) maintained by LAGUPRES, S.L.U., which is updated periodically in accordance with the requirements of the GDPR.
What is the legal basis for the processing of your data?
The processing of your personal data may be based on the following legal grounds:
• Performance of a contract or the implementation of pre-contractual measures (Article 6(1)(b) GDPR): for the management of requests for information and quotations, the conclusion and performance of the contracted services, and the associated invoicing.
• The data subject’s consent (Article 6(1)(a) GDPR): for responding to enquiries submitted through the contact forms, managing CVs submitted by applicants and, where applicable, sending commercial communications to individuals who are not existing customers. Such consent may be withdrawn at any time, without affecting the lawfulness of any processing carried out prior to its withdrawal.
• Legitimate interests (Article 6(1)(f) GDPR): for sending commercial communications relating to our own services that are similar to those already contracted by our customers, and for ensuring the security of our website. You may object to such processing at any time.
• Compliance with a legal obligation (Article 6(1)(c) GDPR): for the prevention of fraud, communications with public authorities, the handling of third-party claims, and compliance with applicable tax, accounting and commercial legal obligations.
How long do we keep your data?
Personal data will be retained for no longer than is necessary to fulfil the purposes for which it was collected. As a general guideline:
• Personal data processed in connection with the contractual relationship will be retained for the duration of that relationship and, following its termination, for the statutory limitation periods established by law in order to deal with any potential liabilities.
• Billing data will be retained for the periods required under the applicable tax, accounting and commercial legislation.
• CVs will be retained for the period necessary to manage the relevant recruitment process and, in any event, for no longer than one year, unless the data subject requests their erasure.
Once these retention periods have expired, the personal data will be erased or retained in a duly restricted (blocked) form in accordance with the applicable legislation.
To which recipients is your data communicated?
In certain circumstances, and only where necessary, LAGUPRES, S.L.U. will disclose users’ personal data to third parties. Under no circumstances will personal data be sold to third parties.
External service providers engaged by LAGUPRES, S.L.U. (data processors) may process personal data solely for the purpose of providing the contracted services. They are not permitted to use such information for their own purposes or to disclose it to third parties. These providers are contractually bound, through the relevant data processing agreement, to ensure confidentiality and to implement appropriate technical and organisational measures to protect personal data in accordance with the applicable data protection legislation.
Furthermore, personal data may be disclosed to public authorities or other parties where required by law. In such cases, only the personal data that is strictly necessary to comply with the relevant legal obligations will be disclosed.
Where is your data stored?
The personal data processed by LAGUPRES, S.L.U. is stored on servers located within the European Economic Area (EEA). No international transfers of personal data to third countries outside the EEA are carried out. Should such transfers become necessary as a result of engaging certain service providers, LAGUPRES, S.L.U. will ensure that they are carried out subject to the appropriate safeguards provided for in Articles 44 et seq. of the GDPR, and you will be duly informed accordingly.
What rights do you have and how can you exercise them?
You may contact us and exercise your rights by submitting a request to the following email address: protecciondedatos@lagupres.com.
Under the provisions of the GDPR you can request:
• Right of access: to obtain confirmation as to whether we process your personal data and, where that is the case, to access such personal data.
• Right to rectification: to request the correction of any inaccurate or incomplete personal data concerning you, including notifying us of any changes to your personal data.
• Right to erasure: you may request the erasure of your personal data, subject where applicable to its prior restriction (blocking) in accordance with the applicable legal requirements.
• Right to restriction of processing: to request that the processing of your personal data be restricted.
• Right to object: to object to the continued processing of your personal data where such processing is based on our legitimate interests.
• Right to data portability: in certain circumstances, to receive a copy of your personal data in a structured, commonly used and machine-readable format, and to have that data transmitted to another data controller.
• Right not to be subject to automated individual decision-making: to request not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you.
In certain circumstances, we may refuse your request where the retention of the personal data concerned is necessary for compliance with a legal obligation.
Furthermore, if you consider that the processing of your personal data does not comply with the applicable data protection legislation, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) at www.aepd.es.
Who is responsible for the accuracy and veracity of the data provided?
The user is solely responsible for the accuracy and correctness of the data provided, and LAGUPRES, S.L.U. shall not be held liable in this respect. Users warrant and are, in all cases, responsible for ensuring that the personal data they provide is accurate, valid and authentic, and they undertake to keep such data duly updated. LAGUPRES, S.L.U. reserves the right to terminate the services contracted by users if the data provided is false, incomplete, inaccurate or not kept up to date.
LAGUPRES, S.L.U. accepts no responsibility for the accuracy of information that has not been prepared by it and for which another source is identified. Accordingly, it also accepts no liability for any loss or damage that may arise from the use of such information.
LAGUPRES, S.L.U. reserves the right to update, amend or remove the information contained on its website and may even restrict or deny access to such information. LAGUPRES, S.L.U. shall not be liable for any loss or damage that the user may suffer as a result of errors, defects or omissions in the information provided, where such information originates from sources outside its control.
How do we handle personal data of minors?
As a general rule, our services are not specifically directed at children. However, if any of our services are directed at children under the age of fourteen, LAGUPRES, S.L.U. shall, in accordance with Article 8 of the GDPR and Article 7 of the LOPDGDD, require the valid, freely given, specific, informed and unambiguous consent of the holders of parental responsibility or legal guardianship before processing the child’s personal data. In such cases, the National Identity Document (DNI) or other valid form of identification of the person providing consent will be required.
In the case of users over the age of fourteen, their personal data may be processed on the basis of their own consent, except where the law requires the involvement or assistance of the holders of parental responsibility or legal guardianship.
What security measures do we apply to protect your personal data?
LAGUPRES, S.L.U. has implemented the legally required levels of security for the protection of personal data and endeavours to implement such additional technical and organisational measures as are reasonably available to prevent the loss, misuse, alteration, unauthorised access to, or theft of the personal data provided.
LAGUPRES, S.L.U. shall not be liable for any loss or damage that may arise from interference, omissions, interruptions, computer viruses, telephone faults or disconnections affecting the operational functioning of this electronic system, where such events are caused by circumstances beyond the control of LAGUPRES, S.L.U.; nor for delays or interruptions in the use of this electronic system resulting from deficiencies or overloads affecting telephone lines, data processing centres, the Internet or other electronic systems; nor for any loss or damage caused by third parties through unlawful interference beyond the control of LAGUPRES, S.L.U.. In any event, users should be aware that security measures on the Internet are not infallible.
Links to other websites.
On the website www.lagupres.com there may be links to other websites. Al hacer clic en uno de estos enlaces y acceder a un sitio web externo, la visita quedará sujeta a la política de privacidad de dicho sitio web, quedando LAGUPRES, S.L.U. desvinculada de cualquier tipo de responsabilidad acerca de dicha política de privacidad.
Can the privacy policy be changed?
This Privacy Policy may be amended from time to time. We recommend that you review it periodically.