The present Data Protection Policy regulates the processing of personal data that the user provides through the Barrabés website, via emails or forms made available to them.
In accordance with the European Data Protection Regulation, the LOPD, the criteria of the Spanish Data Protection Agency, and the LSSIC, we inform you of your rights regarding personal data protection.
Who is responsible for the processing of your data?
Are the data transferred?
Unless other additional or specific transfers are indicated in the box below, your data will only be communicated to a third party if you have previously given your express consent or if there is legal support.
How long will the data be kept?
Regardless of specific periods indicated in the box below for certain cases, they will be kept:
What are your rights when you provide your data?
The data subjects may exercise their rights by sending a written communication to the postal address of the data controller indicated above, or to [email protected], including a photocopy of their ID or another equivalent identification document, both of the data subject and their representative if acting on their behalf, and in this case, the document accrediting such status. It must indicate which specific right(s) are being exercised.
Minors
Children under 14 years old should not send, and are prohibited from sending, any personal information without the consent of their parent or guardian. The data controller is not responsible for any personal information sent by minors under 14 years old without the appropriate and required authorization.
Can consent be withdrawn?
You can withdraw your consent for the processing of your data at any time, and it will be effective in the legal cases, but the processing that was done based on the consent previously given will remain valid.
Where can you file claims regarding personal data protection?
You can file a claim with the competent Data Protection Control Authority, especially if you have not obtained satisfaction in the exercise of your rights. The Spanish Data Protection Agency offers the possibility of filing a claim through their website, www.aepd.es and at Jorge Juan 6, Madrid, 28001.
Who is responsible and who are the recipients of your data?
The data of users on the website will be incorporated and processed in the file called “clients and suppliers” owned by the data controller, Barrabés, located in Madrid, Paseo de Recoletos, 27, 2nd; tel. 914 352 554, email [email protected].
The recipients will be Barrabés, companies in the same corporate group, and third parties who need to know the data for the purposes for which your consent was obtained and which are further detailed below.
What data, purposes, periods, legal basis, transfers, and assignments exist?
In the following table, you can find information on each of these aspects:
| Processing | Purpose | Data | Retention | Legitimization | Transfer | Assignment |
| Contact | Address the requests made by the website visitor using the contact form and provide the requested information. | Web form: Name, surname, email, and any additional information provided in the text field. | For the time necessary to address your request, and afterwards, no more than one year. | Consent | No | No |
| Analytics | Statistical analysis of visits related to content; analysis of attacker behavior; improve the website’s positioning. | While browsing, we collect your IP, MAC address, operating system or browser used, duration of your visit, and other metadata collected by cookies. | For a maximum of 14 months. In the case of cookies, for the period set by each one once accepted or necessary for the technical operation of the service. For more information on retention periods : Cookie policy | Consent | USA: Google Inc. | Sent to Google Inc., but anonymized for analysis of page source management, performance, and visitor behavior. |
| Newsletters | Manage your subscription to our newsletter to provide information on updates, news, or commercial promotions. | Identification data required in the contact form (name, surname, email), as well as analysis data on communication effectiveness, such as IP, MAC, operating system, browser, opens (hours, links…), etc. | If subscribed to the newsletter, until you cancel your subscription or object, and 1 year after opening or interacting with the last promotional communication. | Consent | USA: • The Rocket Science Group LLC | |
| Candidates | Processed to allow you to participate in the responsible party’s professional selection processes and manage it when it occurs. | Identifying, professional, and academic data that the candidate provides. | · For the duration of the selection process if selected. · For one year after completing the selection process without success.· No time limit (data will be deleted) if not part of a selection process. | Precontractual measures with the intent to conclude a contract (Art. 6.1.b of the GDPR). | No | No |
| Social Networks | Create a community of followers around the responsible party’s activities and services. | Identifying data that you provide as a user of the social network. Those you voluntarily provide by contacting us, commenting, or messaging. | The user can cancel the processing of their data in the Social Network by adjusting settings to unfollow or deactivate “Like” or other similar options. In any case, for the minimum time necessary for the described purposes. | Express consent of the user by following us or liking our page. Terms and conditions of the Social Network.Legitimate interest of the responsible party. | The data could be transferred internationally by the social network platform, but the responsible party only uses social networks ensuring adequate data protection levels. | Data is not shared with third parties outside the social network unless allowed by platform features, such as mentions via @ in comments and similar features. |
| Events | Attend the event organized to promote the responsible party’s products and services, or, if applicable, fulfill obligations derived from the contracted event. | Name, surname, NIF, postal address, email, phone, voice, and image (if recorded). | Consent or contract, if the event is paid, depending on the case. Voice and image data for media publication are processed to document the event, and the legal basis is the legitimate interest of the responsible party. | No, unless prior authorization is requested to share data with event speakers, sponsors, or participants. | Duration equivalent to event promotion, coordination, and celebration + 1 year. | |
| Data Protection Rights Management | Address your personal data protection rights through the request you have made. | Name, surname, NIF, postal address, email, power of attorney. Data related to the affected activity, as required by the Spanish Data Protection Agency in case of administrative supervision. | For the time necessary to process the activity. Afterwards, they will be blocked until they can be definitively deleted once the legal prescription period passes for any claims. | Necessary for compliance with a legal obligation of the responsible party. | No | To the Spanish Data Protection Agency if an administrative supervision procedure is initiated regarding the exercise of the right. |
Strategic consultancy for innovation and business that helps you tackle your challenges to activate solutions.