At GARNICA S.A. (hereinafter “GARNICA” or “Service Provider”) we strive, through our products and services, to provide you the best experience possible. In some cases, it is necessary to collect information to achieve this. We care about your privacy and believe in being transparent about it.
For this reason, and in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter “GDPR”), on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights, GARNICA has drafted this Privacy Policy.
Through the registration forms on this website or via email submission, personal data of each user is collected and processed, the handling of which is governed by this Privacy Policy. These data are necessary for the management and maintenance of some of the services provided and are included in the specific user files of GARNICA’s services.
The user is obligated to provide truthful, accurate, and complete information about their identity. The user will be held accountable for the truthfulness of the information provided, and GARNICA reserves the right to exclude any user from the services offered if they have provided false information, without prejudice to other legal actions that may be taken. Additionally, the user certifies that they are over 14 years old and possess the legal capacity to consent to the processing of their personal data.
Our commitment begins with the following:
- Your data is collected to improve your user experience, tailoring it to your interests and needs.
- We are transparent about the data we collect from you and the reasons for doing so.
- Our goal is to provide you with the best possible experience. Therefore, whenever we use your personal information, we do so in full compliance with the regulations, and where necessary, we will ask for your consent.
- We understand that your data belongs to you. Therefore, if you decide not to authorize us to process it, you can request that we stop doing so.
- Our priority is to ensure your security and process your data in accordance with European regulations.
If you want more information about how your data is handled, please refer to the different sections of the privacy policy below:
Who is responsible for processing your personal data?
The data controller for the personal data that users provide while accessing and using the website is GARNICA S.A., with Tax ID number A48094536, registered office at Calle Berastegui 5, 4th Floor, 48001 Bilbao, Spain, and email address lopd@garnica.com.
GARNICA undertakes to implement IT security measures in accordance with the regulations to prevent unauthorized access, misuse, manipulation, damage, or loss of data.
What personal data do we collect?
The personal data you may provide includes:
- Identity: name, business name, address, phone number, email address, job title, tax identification number.
- Profile information: gender, language, additional information included in your user profile.
- Electronic identification and connection information: IP addresses, connection information, platform, device and hardware, error reports, device capabilities, traffic, visits, etc.
- Bank and payment information: bank card or account number.
- Products and services purchased and your interactions with them.
- Information about searches made and documents or services accessed, as well as the quality of the search.
- Recordings of commercial or customer service calls.
- Any other information or data you decide to share with us.
In some cases, completing the registration form is required to access and enjoy certain services offered on the website; likewise, failure to provide the requested personal data or not accepting this privacy policy will prevent you from subscribing, registering, or participating in any promotions that require personal data.
Why and for what purposes do we process your data?
The operations, processes, and technical procedures, whether automated or not, that make the collection, storage, modification, transfer, and other actions on personal data possible, are considered personal data processing.
At GARNICA, we process the information provided by interested parties for the following purposes:
- To propose and execute the services or products requested by the user.
- To manage the transmission of information requested by the user and respond to any questions submitted through the website, while also offering users services that may be of interest to them.
- To carry out commercial actions and maintain and manage the relationship with the user, as well as managing the services offered via the website and conducting information provision activities.
The fields in the forms must be completed for GARNICA to fulfill the purposes mentioned above.
In some cases, it may be necessary to provide information to Authorities or third parties for auditing purposes, as well as handling personal data from invoices, contracts, and documents in response to claims from clients or Public Administrations.
What is the legal basis for processing your data?
The processing of personal data you provide is based on the following legal bases:
- The contracting of GARNICA’s products and/or services and the execution of the requested professional services, whose terms and conditions will be made available to the user prior to any contracting. The interested party must provide their data for this professional relationship to proceed.
- The free, specific, informed, and unequivocal consent of the user, as the user is informed after reading this Privacy Policy and, if in agreement, accepts it through a declaration or a clear affirmative action, such as checking a box made available for this purpose.
- Garnica’s legitimate interest in processing data from our clients for direct marketing actions and the explicit consent of the interested party.
- Compliance with legal obligations for fraud prevention, communication with Public Authorities, and claims from third parties.
If the interested party does not provide the data or the data is incorrect or inaccurate, we will not be able to process the request, making it impossible to provide the requested information or to enter into the service contract. Therefore, GARNICA will be exempt from any liability that may arise from failure to execute the professional order or from the consequences of such incorrect or inaccurate information.
How long do we keep your data?
GARNICA, as the data controller, commits to storing and managing the personal data and information collected through this website with due confidentiality, as long as the professional relationship continues and the interested party does not request its erasure, and in any case, for no longer than 5 years from the termination of the commercial relationship between the user and GARNICA. However, the data controller may store the data, duly blocked, for potential administrative or legal responsibilities.
Who do we share your data with?
Generally, GARNICA will not disclose your personal data to third parties, unless the provision of a service requires a contractual relationship with a data processor, and this is strictly necessary to manage and maintain the relationship between the user and the company, with the express prior authorization of the user. This will only be done for the duration necessary to execute the work order, under the same conditions and responsibilities required of the controller. Once the order is completed, the data processor will return the personal data to the controller and delete any copies. Furthermore, in some cases, the law may require disclosure of personal data to public bodies or other entities, but only the minimum necessary data will be disclosed for the fulfillment of these legal obligations.
Where is your data stored?
Generally, your data is stored within the EU. If data is transferred to third parties outside the EU, we will ensure they offer sufficient protection levels.
What rights do you have, and how can you exercise them?
Any person has the right to know whether GARNICA is processing their personal data or not.
Interested parties have the right to access their personal data, request the rectification of inaccurate data, or request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, interested parties may request the restriction of their data’s processing, in which case it will only be kept for claims or defense purposes.
In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. GARNICA will stop processing the data unless for overriding Garnica reasons or for claims or defense purposes.
Users also have the right to data portability, meaning the personal data they have provided can be transmitted directly to another data controller in a structured, commonly used, and machine-readable format, when technically feasible. The data owner, or their legal representative, can exercise these rights by sending an email to info@garnica.com or mailing a letter to: GARNICA S.A., Calle Berastegui 5, 4th Floor, 48001 Bilbao, Spain.
You can obtain additional information about your rights from the Spanish Data Protection Agency at https://www.aepd.es/ or from the relevant authority in your country. If your rights have not been met, you can request assistance from the Spanish Data Protection Agency (or equivalent authority) by filing a Rights Protection Claim (https://www.aepd.es).
How do we handle the personal data of minors?
Our services are not primarily intended for minors. For users over the age of 14, data may be processed with the user’s consent, except in cases where the law requires parental or guardian involvement.
What security measures do we apply to protect your personal data?
GARNICA has adopted the required levels of security for personal data protection and strives to implement additional technical measures within its reach to prevent the loss, misuse, alteration, unauthorized access, or theft of personal data provided to GARNICA.
Likewise, GARNICA has implemented all the technical and organizational measures necessary to ensure the security and integrity of personal data, as well as to prevent their loss, alteration, or access by unauthorized third parties.
Links to other websites
This website may contain links to other websites. By clicking on one of these links and accessing an external website, your visit will be subject to the privacy policy of that website, and GARNICA will not be responsible for their privacy policies.
How do we use cookies?
GARNICA’s website and social media accounts use cookies to optimize and personalize your browsing experience. Cookies are physical information files stored on the user’s terminal, and the information collected through cookies is used to facilitate and enhance the user’s browsing experience on the site. The data collected by cookies may be shared with their creators, but the information obtained will not be associated with personal data or data that can identify the user.
However, if you do not want cookies to be installed on your hard drive, you have the option to configure your browser to prevent this. For more information, consult our Cookies Policy.
Can the Privacy Policy be modified?
This Privacy Policy may be modified. We recommend reviewing the Privacy Policy periodically.
Version: November 2020