Privacy policy

Basic data protection information

Through its products and services, SERRALLERIA CARBÓ works to offer you the best possible experience. In some cases, it is necessary to collect information to achieve this. We care about your privacy and we believe we should be transparent about it.

For this reason, and for the purposes of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and of Spanish Law 34/2002, of 11 July, on information society services and electronic commerce (hereinafter, “LSSI”), SERRALLERIA CARBÓ informs users that, as data controller, it will include the personal data provided by users in an automated file.

Our commitment starts by explaining the following to you:

• Your data are collected to improve the user experience, taking your interests and needs into account.
• We are transparent about the data we obtain about you and why we do so.
• Our intention is to offer you the best possible experience. Therefore, whenever we use your personal information we will always comply with the regulations and, where necessary, we will ask for your consent.
• We understand that your data belong to you. Therefore, if you decide not to authorise us to process them, you can ask us to stop processing them.
• Our priority is to guarantee your security and to process your data in accordance with European regulations.

If you would like more information about the processing of your data, see the different sections of the privacy policy below.

Who is the controller of your personal data?

• Company name: SERRALLERIA CARBÓ, S.L.
• Trade name: SERRALLERIA CARBÓ
• Registered office: C/ Eugeni d’Ors, 59-61, 08720 Vilafranca del Penedès (Barcelona)
• Tax ID (CIF): B59092619
• Email: carbo@serralleriacarbo.com

SERRALLERIA CARBÓ has appointed an internal contact person to coordinate compliance with data protection regulations within its organisation. If you have any query about the processing of your personal data, you can contact this person at carbo@serralleriacarbo.com.

What personal data do we collect?

The personal data that users may provide are:

• Name, address and date of birth.
• Telephone number and email address.
• Location.
• Information relating to payments and refunds.
• IP address, date and time you accessed our services, the internet browser you use and data about your device’s operating system.
• The curriculum vitae (CV) data of job applicants.
• Any other information or data you decide to share with us.

In some cases, it is mandatory to complete the registration form to access and use certain services offered on the website; likewise, not providing the personal data requested or not accepting this data protection policy means that it will not be possible to subscribe, register or take part in any of the promotions in which personal data are requested.

Why and for what purpose do we process your data?

At SERRALLERIA CARBÓ we process the information provided by data subjects for the following purposes:

• To manage the contracting of any of our services, either online or at our physical offices.
• To manage the sending of the information they request from us.
• To manage the data provided by job applicants through their curriculum vitae (CV), with the sole purpose of carrying out the recruitment process.
• To carry out commercial actions and to maintain and manage the relationship with the user, as well as to manage the services offered through the website and information tasks; we may carry out automated assessments, profiling and customer segmentation in order to personalise our treatment according to their characteristics and needs and to improve the customer’s online experience.
• To develop and manage any competitions, prize draws or other promotional activities that may be organised.
• In some cases, it will be necessary to provide information to the authorities or to third-party companies for audit purposes, and to manage personal data in invoices, contracts and documents in order to respond to claims from customers or public administrations.

We inform you that the personal data obtained as a result of your registration as a user will form part of the Record of Processing Activities (RAT), which will be updated periodically in accordance with the GDPR.

What is the legal basis for processing your data?

The processing of your data may be based on the following legal bases:

• Consent of the data subject for contact forms, information requests or newsletter sign-ups.
• Performance of a contract for the contracting of services and products or for employment.
• Legitimate interest for processing our customers’ data in direct marketing actions, and express consent of the data subject for everything related to automated assessments and profiling.
• Compliance with legal obligations for fraud prevention, communication with public authorities and third-party claims.

How long do we keep your data?

The data will be processed for the purposes described for as long as necessary to fulfil the purpose for which they were collected (for example, for the duration of the commercial relationship), and to comply with the legal obligations arising from the processing of the data.

The CVs of candidates in recruitment processes who are not selected will be kept for one year from receipt.

To which recipients are your data disclosed?

In some cases, and only when necessary, SERRALLERIA CARBÓ will provide users’ data to third parties. However, the data will never be sold to third parties. The external service providers (for example, payment providers) with which SERRALLERIA CARBÓ works may use the data to provide the corresponding services; however, they will not use the information for their own purposes or disclose it to third parties.

For the operation of the website and the management of enquiries, SERRALLERIA CARBÓ works with these providers, which process the data on its behalf and following its instructions:

• Netlify, Inc.: website hosting and receipt of forms.
• Microsoft Ireland Operations Limited (Microsoft 365): email.
• mayasystems.net: domain and DNS management.

SERRALLERIA CARBÓ seeks to guarantee the security of personal data when they are sent outside the company and ensures that third-party service providers respect confidentiality and have adequate measures in place to protect personal data. These third parties are obliged to ensure that the information is processed in accordance with data privacy regulations.

In some cases, the law may require personal data to be disclosed to public bodies or other parties; only what is strictly necessary to comply with those legal obligations will be disclosed.

The personal data obtained may also be shared with other companies in the group.

The curriculum vitae (CV) data of job applicants may be shared with companies specialising in recruitment processes and profile analysis.

Where are your data stored?

As a general rule, data are stored within the European Union. Netlify, Inc., which hosts the website and receives the forms, is established in the United States, so the data sent through the form are processed outside the European Union. When data are sent to third parties outside the European Union, we will ensure that they offer a sufficient level of protection, either because they have binding corporate rules (BCR), because they have adhered to the EU-U.S. Data Privacy Framework or because the standard contractual clauses approved by the European Commission apply to them, or any other mechanism in force at any given time.

What rights do you have and how can you exercise them?

You can send your communications and exercise your rights by sending a request to carbo@serralleriacarbo.com.

Under the GDPR, you can request:

• Right of access: you can request information about the personal data we hold about you.
• Right to rectification: you can notify any change in your personal data.
• Right to erasure and to be forgotten: you can request the deletion, after prior blocking, of your personal data.
• Right to restriction of processing: this involves restricting the processing of your personal data.
• Right to object: you can withdraw your consent to the processing of your data and object to their further processing.
• Right to data portability: in some cases, you can request a copy of your personal data in a structured, commonly used and machine-readable format in order to transmit them to another controller.
• Right not to be subject to individual decisions: you can request that no decisions be taken based solely on automated processing, including profiling, which produce legal effects concerning you or significantly affect you.

In some cases, the request may be refused if you ask for data necessary to comply with legal obligations to be deleted.

Likewise, if you have any complaint about the processing of your data, you can lodge a complaint with the competent data protection authority, the Spanish Data Protection Agency (www.aepd.es).

Who is responsible for the accuracy and truthfulness of the data provided?

The user is solely responsible for the truthfulness and correctness of the data included and releases SERRALLERIA CARBÓ from any liability in this regard. In any case, users guarantee and are responsible for the accuracy, validity and authenticity of the personal data provided and undertake to keep them duly updated. The user agrees to provide complete and correct information in the registration or subscription form. SERRALLERIA CARBÓ reserves the right to terminate any services contracted with users if the data they have provided are false, incomplete, inaccurate or out of date.

SERRALLERIA CARBÓ is not responsible for the truthfulness of information that it has not produced itself and for which another source is indicated, and therefore accepts no liability for any hypothetical damage that may arise from the use of such information.

SERRALLERIA CARBÓ reserves the right to update, modify or delete the information contained on its web pages, and may even limit or deny access to such information. SERRALLERIA CARBÓ is released from liability for any damage or loss that the user may suffer as a result of errors, defects or omissions in the information provided by SERRALLERIA CARBÓ, provided that it comes from third-party sources.

Likewise, the user certifies that they are over 14 years of age and have the necessary legal capacity to give consent to the processing of their personal data.

How do we process the personal data of minors?

In principle, our services are not specifically aimed at minors. However, if any of them is aimed at children under fourteen, in accordance with article 8 of the GDPR and article 7 of Spanish Organic Law 3/2018, of 5 December (LOPDGDD), SERRALLERIA CARBÓ will require the valid, free, unequivocal, specific and informed consent of their legal guardians to process the minors’ personal data. In this case, the national identity card (DNI) or another form of identification of the person giving consent will be required.

In the case of people over fourteen, the data may be processed with the user’s consent, except in those cases where the law requires the assistance of the holders of parental authority or guardianship.

What security measures do we apply to protect your personal data?

SERRALLERIA CARBÓ has adopted the legally required levels of personal data protection security and seeks to install the other additional technical means and measures within its reach to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data provided.

SERRALLERIA CARBÓ is not responsible for any hypothetical damage or loss that may arise from interference, omissions, interruptions, computer viruses, telephone faults or disconnections in the operation of this electronic system for reasons beyond the control of SERRALLERIA CARBÓ; from delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads at the data processing centre, on the internet or in other electronic systems; or from damage that may be caused by third parties through unlawful interference beyond the control of SERRALLERIA CARBÓ. However, users should be aware that internet security measures are not impregnable.

Links to other websites

The website https://www.serralleriacarbo.com/ may contain links to other web pages. If you click on one of these links and access an external website, your visit will be subject to that website’s privacy policy, and SERRALLERIA CARBÓ accepts no liability of any kind for its privacy policy.

How do we use cookies?

This website does not install its own cookies or use analytics or advertising tools. The only third-party service that may install cookies is the interactive Google Maps map on the contact page, and only if the user chooses to load it.

If the user does not want cookies to be installed on their device, they can configure their browser to prevent their installation. For more information, see our cookie policy.

Can the privacy policy be changed?

This privacy policy may be changed; we recommend that you review it periodically.