Privacy Policy

1. USER INFORMATION

Who is responsible for processing your personal data?

THE SIERRA DE GUARA BUSINESS ASSOCIATION is the DATA CONTROLLER responsible for processing the USER’s personal data and hereby informs the USER that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December (LOPDGDD).

Why do we process your personal data?

To maintain a business relationship with the user. The processing operations envisaged are:

• The sending of commercial communications via email, fax, SMS, MMS, social media or any other electronic or physical means, whether current or future, that enables commercial communications to be sent. These communications will be sent by the DATA CONTROLLER and will relate to its products and services, or those of its partners or suppliers with whom it has entered into a promotional agreement. In this case, third parties will never have access to personal data.
• Carry out market research and statistical analysis.
• To process orders and requests, and to respond to enquiries or any other requests made by the USER via any of the contact methods made available on the CONTROLLER’s website.
• Subscribe to our online newsletter for updates, offers and promotions relating to our business.

Why are we allowed to process your personal data?

Because the processing is justified under Article 6 of the GDPR as follows:

• With the USER’s consent: sending of marketing communications and the newsletter.
• In the legitimate interests of the DATA CONTROLLER: to carry out market research, statistical analyses, etc., and to process orders, requests, etc. at the USER’s request.

How long will we keep your personal data?

They will be retained for no longer than is necessary to fulfil the purpose of the processing or where there are legal requirements governing their retention; once they are no longer required for this purpose, they will be deleted using appropriate security measures to ensure the anonymisation of the data or its complete destruction.

Who do we share your personal data with?

No personal data will be disclosed to third parties, except where necessary for the purposes of processing, to our communications service providers, with whom the DATA CONTROLLER has entered into the confidentiality and data processor agreements required by current data protection legislation.

What are your rights?

The USER’s rights are as follows:

• The right to withdraw consent at any time.
• The right to access, rectify, transfer and erase your data, and to restrict or object to its processing.
• The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current legislation.

Contact details for exercising your rights:
ASSOCIATION OF BUSINESS OWNERS OF THE SIERRA DE GUARA
C/. SAINT GAUDENS, 1 – 22300 BARBASTRO (Huesca)
E-mail: info@guara.org

2. WHETHER THE INFORMATION PROVIDED BY THE USER IS MANDATORY OR OPTIONAL

By ticking the relevant boxes and entering data in the fields marked with an asterisk (*) on the contact form or in download forms, USERS expressly, freely and unequivocally accept that their data is necessary for the provider to process their request; the provision of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the CONTROLLER is accurate and undertakes to notify the CONTROLLER of any changes thereto.

The DATA CONTROLLER hereby informs you that all data requested via the website is mandatory, as it is necessary to provide the USER with the best possible service. Should you fail to provide all the required data, there is no guarantee that the information and services provided will fully meet your needs.

3. SAFETY MEASURES

In accordance with the provisions of current data protection legislation, the DATA CONTROLLER is complying with all the provisions of the GDPR and the LOPDGDD regarding the processing of personal data under its responsibility, and is clearly adhering to the principles set out in Article 5 of the GDPR, according to which such data is processed lawfully, fairly and transparently in relation to the data subject, and is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.

The DATA CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures set out in the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS, and has provided them with the necessary information to enable them to exercise those rights.

For further information regarding our privacy policy, please contact the DATA CONTROLLER at:
SIERRA DE GUARA BUSINESS ASSOCIATION
C/. SAINT GAUDENS, 1 – 22300 BARBASTRO (Huesca)
Email: info@guara.org

SOCIAL MEDIA PRIVACY POLICY

1. USER INFORMATION

Who is responsible for processing your personal data?

ASOCIACIÓN DE EMPRESARIOS DE LA SIERRA DE GUARA, hereinafter the “Data Controller”, informs the USER that it has created profiles on the social media platforms Facebook, Instagram, Twitter, LinkedIn, YouTube, Vimeo and Google+, and is responsible for the processing of the user’s personal data carried out on these social media platforms. This data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).

Why do we process your personal data?

Purpose of processing: to maintain a relationship between the DATA SUBJECT and the DATA CONTROLLER, which may include the following operations:

• Process requests and enquiries submitted to the person in charge.
• Provide information about activities and events organised by the person in charge.
• To provide information about the products or services offered by the data controller.
• Interact via the official profiles.

Why are we allowed to process your personal data?

Legal basis for processing: Article 6(1)(a) of the GDPR. The USER has a profile on the same social network and has decided to join the CONTROLLER’s social network, thereby showing an interest in the information published there. Therefore, by requesting to follow our official profiles, the USER gives their consent to the processing of the personal data published on their profile.

The USER can access the social network’s privacy policies at any time, as well as configure their profile to ensure their privacy.

The DATA CONTROLLER has access to and processes the USER’s public information, in particular their contact name. This data is only used within the social network itself and will only be included in a file held by the DATA CONTROLLER when necessary to process the USER’s request.

How long will we keep your personal data?

The data will be retained until the USER withdraws the consent given, as set out in this privacy policy.

Who do we share your personal data with?

The information provided by the USER via the CONTROLLER’s social media accounts, including their personal data, may be published depending on the services the USER uses, and may therefore be made publicly available to other third-party users of those social media platforms. From their profile on each social media platform, the USER can configure which information they wish to make public in each case, view the permissions that have been granted, and remove or deactivate them.

No personal data will be disclosed to third parties outside the social network, except where this is essential for the purposes of processing; in such cases, data may be disclosed to our communications service providers, with whom the DATA CONTROLLER has entered into the confidentiality and data processor agreements required by current data protection legislation.

What are your rights?

The rights to which the USER is entitled may only be exercised in relation to information that is under the control of the DATA CONTROLLER:

• The right to withdraw consent at any time.
• The right to access, rectify, transfer and erase your data, and to restrict or object to its processing.
• The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current legislation.

Contact details for exercising your rights:
ASSOCIATION OF BUSINESS OWNERS OF THE SIERRA DE GUARA
C/. SAINT GAUDENS, 1 – 22300 BARBASTRO (Huesca)
E-mail: info@guara.org

2. USE OF THE PROFILE

The DATA CONTROLLER shall carry out the following actions:

• Access to public information on the profile.
• Publication on the USER’s profile of all information already published on the CONTROLLER’s social media platform.
• Send personal, one-to-one messages via the social media platform’s channels.
• Page status updates to be posted on the USER’s profile.

The USER can always manage their connections, remove content that no longer interests them and restrict who they share their connections with; to do so, they must access their privacy settings.

3. PUBLICATIONS

Once the USER has become a follower or joined the CONTROLLER’s social media platform, they may post comments, links, images, photographs or any other type of multimedia content supported by the platform. In all cases, the USER must be the owner of the content posted, hold the copyright and intellectual property rights, or have the consent of the third parties concerned.

It is expressly prohibited to post any content on the social media platform—whether text, graphics, photographs, videos, etc.—that offends or is likely to offend against public morality, ethics, good taste or decency, and/or that infringes, violates or breaches intellectual or industrial property rights, image rights or the law.

In such cases, the CONTROLLER reserves the right to remove the content immediately, without prior notice, and may request that the USER’s account be permanently blocked.

The CONTROLLER shall not be held liable for content freely published by a USER. The USER should bear in mind that their posts will be visible to other users; therefore, they themselves are primarily responsible for their privacy.

Any images posted on the social media platform will not be stored in any file by the DATA CONTROLLER, but they will remain on the social media platform.

4. DATA ON MINORS OR PERSONS WITH DISABILITIES

Children under the age of 14 are prohibited from accessing or registering via the CONTROLLER’s social media accounts. If the USER has special needs, the involvement of their parent or guardian, or their legal representative, will be required, along with a valid document proving such representation.

The CONTROLLER shall be expressly exempt from any liability that may arise from the use of social media by minors or people with disabilities. The CONTROLLER’s social media accounts do not knowingly collect any personal information from minors; therefore, if the USER is a minor, they must not register, use the CONTROLLER’s social media accounts or provide any personal information.

DATA PROCESSING IN FORMS

Subscribe to the newsletter

In accordance with Article 21 of Law 34/2002 on Information Society Services and Electronic Commerce (LSSI), we request your consent to subscribe to and receive our newsletter.

Purposes and legal basis for processing: sending communications about products or services via the newsletter to which you have subscribed (with the data subject’s consent, Article 6.1.a of the GDPR).

Criteria for the retention of the data: shall be retained for no longer than the time necessary to maintain the purpose of the processing or for as long as there are statutory limitation periods a21> which determine their custody and when it is no longer necessary for that purpose, they shall be deleted using measures of security appropriate to ensure the anonymisation of the data or the destruction of the same data.

Disclosure of data: Data will not be disclosed to third parties, unless required by law.

Rights of the data subject:

• The right to withdraw consent at any time.
• The right to access, rectify, transfer and erase your data, and to restrict or object to its processing.
• The right to lodge a complaint with the supervisory authority (www.aepd.es) if you believe that the processing does not comply with current legislation.

Contact details for exercising your rights:
Email: info@guara.org

Subscribe to the blog

THE SIERRA DE GUARA BUSINESS ASSOCIATION is the data controller responsible for processing the user’s personal data and hereby informs the user that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December (LOPDGDD).

Purposes and legal basis for processing: subscription to the news blog (based on the data subject’s consent, Article 6.1.a) of the GDPR).

Data retention criteria: Data will be retained for no longer than is necessary to maintain the blog subscription.

Disclosure of data: Data will not be disclosed to third parties, unless required by law.

User rights: the right to withdraw consent at any time. Right of access, rectification, portability and erasure of your data, and to restrict or object to its processing. Right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.

Contact details for exercising your rights:
Email: info@guara.org

Publication of Testimonials from customers on the website

THE SIERRA DE GUARA BUSINESS ASSOCIATION is the data controller responsible for processing the User’s personal data and hereby informs the User that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December (LOPDGDD).

Purposes and legal basis for processing: to respond to suggestions, experiences or opinions regarding products and/or services for publication on the website, thereby helping other users (based on the data subject’s consent, Article 6.1.a) of the GDPR).

Criteria for the retention of the data: shall be retained for no longer than the time necessary to maintain the purpose of the processing or for as long as there are statutory limitation periods a21> which determine their custody and when it is no longer necessary for that purpose, they shall be deleted using measures of security appropriate to ensure the anonymisation of the data or the destruction of the same data.

Disclosure of data: Testimonials will be published on the website. The only personal data from the testimonial that will be published are the user’s name and town. Data may also be disclosed where required by law.

User rights: the right to withdraw consent at any time. Right of access, rectification, portability and erasure of your data, and to restrict or object to its processing. Right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.

Contact details for exercising your rights:
ASSOCIATION OF BUSINESS OWNERS OF THE SIERRA DE GUARA
C/. SAINT GAUDENS, 1 – 22300 BARBASTRO (Huesca)
E-mail: info@guara.org

Participation in an online forum

THE SIERRA DE GUARA BUSINESS ASSOCIATION is the data controller responsible for processing the User’s personal data and hereby informs the User that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December (LOPDGDD).

Purposes and legal basis for processing: participation in online forums (based on the data subject’s consent, Article 6.1.a) of the GDPR).

Criteria for the retention of the data: shall be retained for no longer than the time necessary to maintain the purpose of the processing or for as long as there are statutory limitation periods a21> which determine their custody and when it is no longer necessary for that purpose, they shall be deleted using measures of security appropriate to ensure the anonymisation of the data or the destruction of the same data.

Disclosure of data: Posts will be publicly visible to users of the online forum. Data may also be disclosed where required by law.

User rights: the right to withdraw consent at any time. Right of access, rectification, portability and erasure of your data, and to restrict or object to its processing. Right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.

Contact details for exercising your rights:
ASSOCIATION OF BUSINESS OWNERS OF THE SIERRA DE GUARA
C/. SAINT GAUDENS, 1 – 22300 BARBASTRO (Huesca)
E-mail: info@guara.org

Explicit consent: any recording or transmission of personal data provided by users of this forum implies their unequivocal acknowledgement and acceptance of the Legal Notice and Privacy Policy set out on the website.