WHO IS RESPONSIBLE FOR YOUR INFORMATION
The party responsible for your personal data is Barcelona chocolate tours S.L.U., S.L. (hereinafter, “BCT”), N.I.F B66527268 and with registered address in Barcelona (Calle Lull, 321 08019 Barcelona]
For any issue regarding the processing of your data you can contact us via post, email to firstname.lastname@example.org
PERSONAL DATA PROCESSING ACTIVITIES
1. Clients and Suppliers
Purpose. – To manage the contractual relationship with clients and suppliers.
Legal basis. – The processing of clients and suppliers’ data is necessary for the contract to take effect. We may also process, based on our legitimate interest, professional contact and location data of certain people who provide their services to our clients and suppliers in order to maintain our relationship with them.
Data categories: Identifying data, location data, professional data, financial data, data on goods and services transactions.
Communication and transfer of data. – Data is not transferred to third parties other than banking organizations through which payments and financial transactions are managed and public administrations with specific competence in fiscal matters. Notifications may be sent to the affected parties via a processing manager based outside of the European Union but included in the “Privacy Shield” such as MailChimp. For more information on Privacy Shield please click here. For more information on MailChimp please click here.
Preservation. – From May 25th 2018, for a maximum of six years.
2. Human Resources and curriculums
Purpose. – Recruitment and management or staff, training, social benefits, promotion and managements of employment and labor control.
Legal basis. – The processing of employee data is necessary for their contracts with us to take effect. Any additional data provided to us by employees shall only be processed with their consent. The data of the candidates shall be processed with their prior consent.
Data categories: Identifying data, location data, data on personal features, professional data, data on social circumstances, financial data and data on employment details.
Communication and transfer of data. – Data is not transferred to third parties other than banking organizations through which salary payments are carried out and public administrations with specific competence in fiscal matters, social security and, as is the case, to mutual societies and insuring agencies.
Preservation. – The employee data will be preserved for as long as the contractual relationship lasts and, once it is terminated, for a maximum of five years. The candidate’s data will be deleted or duly reviewed and updated every 12 months.
3. Journalists, influencers, public officers, celebrities and other contacts
Purpose. – To manage the relationship with the affected parties on corporate news, the activities and products of our clients, to inform them about the products and services and activities of ATC and to invite them to different programmes and events.
Legal basis. – We may process the data from these groups, based on our legitimate interest, as well as professional contact and location of certain people who provide their services to our clients and suppliers in order to maintain our relationship with them.
Data categories: Identifying data, location data and professional data.
Communication and transfer of data. – Data shall not be transferred to third parties. Notifications may be sent via processing managers based outside of the European Union but included in the “Privacy Shield” such as MailChimp. For more information on Privacy Shield please click here. For more information on MailChimp please click here.
Preservation. – For as long as the contact with the affected parties lasts and for a maximum of three years since last contact.
WE PROTECT YOUR DATA
We use suitable technologies and procedures to protect the data from accidental loss as well as unauthorized access, use, destruction or publication. We do not share data with any other organization. Nor do we send your information outside the European Union. We make backup copies to be able to recover the information in case of any incident. We also implement suitable physical and technological measures to store and transfer your data securely.
WHAT ARE YOUR RIGHTS
- The right to request access to your data to find our which data of yours we are processing, for what purpose, where we obtained it from and if we are transmitting it of if we have transmitted it to third parties.
- The right to request the rectification of incorrect personal data that concerns you. Considering the purposes of the processing, you will also have the right to complete personal data that is incomplete.
- The right to request the elimination of data that concerns you, for example when it is no longer necessary for the purposes for which it was collected or when required by legal obligation.
- The right to request the limitation of its processing, for example when the accuracy of the data is in doubt or when data is not necessary for the original purpose, but cannot be deleted for legal reasons.
- The right to oppose the processing for reasons regarding your individual situation and to be subject to automated individual decisions, including the development of profiles.
- The right to fully or partially withdraw the consent given.
If you would like to execute any of your rights, please, write to us at email@example.com or by post to the company address mentioned above. In either case, we will need you to send us a copy of your ID or passport so we can verify your identity and we will reply to you within a maximum period of one (1) month.
You also have the right, should you deem it appropriate, to make a claim against the Spanish Data Protection Agency, with headquarters in Madrid (28,001), C/ Jorge, núm. 6.
For more complete and detailed information on your rights we recommend that you visit the web page of the Spanish Data Protection Agency or that you contact them via their citizen advice service, by calling 901 100 099.