PRIVACY POLICY
INTRODUCTION
Your privacy is important to us. Therefore, through this Privacy Policy, we explain what personal data we collect from users, how we use it, and for what purposes, among other relevant information.
For your information, we will never request more information than is strictly necessary to provide the services requested; we will never share your personal data with third parties except where required by law or with your prior consent; and we will never use your personal data for purposes other than those previously disclosed.
As a User, you should read this Privacy Policy carefully on a regular basis and whenever you provide your personal data, as it may be amended from time to time. The Provider reserves the right to modify the information contained on this website in order to comply with applicable legislation or to update this Privacy Policy. The Provider is under no obligation to notify Users in advance of such changes, publication on the website being deemed sufficient.
DATA CONTROLLER
Identity: ELISABET BACH OLLER (hereinafter also referred to as the “Provider”)
Tax Identification Number (NIF): 38102254V
Registered Address: C. Sant Pere, 1, 08470 Sant Celoni, Barcelona, Spain
E-mail: [email protected]
ELISABET BACH OLLER, as the Data Controller of this website, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – GDPR), concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, together with the applicable Spanish data protection legislation and Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), hereby informs you that the appropriate technical and organisational security measures have been implemented to guarantee and protect the confidentiality, integrity, and availability of the personal data provided.
METHODS OF DATA COLLECTION, PERSONAL DATA COLLECTED, AND PURPOSE OF PROCESSING
The personal data we collect, the way in which we obtain it, and the purposes for which it is processed are as follows:
Newsletter Subscription Form
Data collected:
- Name
- E-mail address
Purpose:
To send the User commercial information relating to our products and/or services by e-mail, SMS, social media, or any other electronic or physical means, provided that the User has given their express consent.
Legal basis:
The User’s consent.
Contact Form and/or Information Request
Data collected:
- Name
- E-mail address
Purpose:
To respond to enquiries and/or provide the information requested by the User.
Legal basis:
The User’s consent.
The use of WhatsApp is governed by the specific section of this Privacy Policy dedicated to that service.
Self-Assessment Form
Data collected:
- Name
- E-mail address
Purpose:
To carry out the requested self-assessment.
Legal basis:
The data subject’s consent.
Performance of the Contractual Relationship and Administrative, Tax, and Accounting Management
Data collected:
- First name and surname
- Telephone number
- Postal address
- National Identity Document (DNI)
- E-mail address
- Signature
Purpose:
To provide the contracted services and to carry out the commercial, administrative, tax, and accounting management necessary for the performance of the contractual relationship.
Legal basis:
Performance of a contract.
You may withdraw your consent at any time by sending an e-mail with the subject line “Unsubscribe” to the e-mail address indicated above.
In accordance with the LSSICE, ELISABET BACH OLLER does not engage in spam practices. Therefore, commercial communications will never be sent by e-mail unless they have been previously requested or expressly authorised by the User. Consequently, every commercial communication sent by the Provider will include the possibility for the User to withdraw their consent to receive further communications.
Your personal data will not be processed for any purpose other than those described above, except where required by law or by a judicial authority.
Likewise, your personal data will not be used for automated decision-making.
Failure to provide the requested personal data or to accept this Privacy Policy will make it impossible to fulfil the purposes described above.
Where a prior contractual relationship exists between the parties, the legal basis for processing the personal data necessary to comply with the corresponding administrative, tax, and accounting obligations established by law shall be the existence of that contractual relationship.
DATA RETENTION PERIOD
Your personal data will be retained for as long as necessary to fulfil the purposes for which it was collected, for as long as required by law or by a judicial authority, and until you withdraw your consent or exercise your rights to erasure, objection, or restriction of processing.
In any event, your personal data will be retained for the periods established by the applicable legal provisions.
RECIPIENTS OF PERSONAL DATA AND INTERNATIONAL DATA TRANSFERS
ELISABET BACH OLLER shall disclose information to law enforcement authorities where required by a court order or by a legal obligation. Any information disclosed shall be limited to the data available to the Provider at the time of the request.
ELISABET BACH OLLER also carries out international transfers of personal data through the use of certain tools that are necessary for the operation of its business and which may store personal data. These tools include:
- Google Analytics: used to analyse and measure how users interact with the website through cookies. The information generated by these cookies regarding your use of the website (including your IP address) will be transmitted directly to and stored by Google LLC on servers located in the United States. Google LLC participates in the EU–U.S. Data Privacy Framework, as approved by the European Commission.
- Mailchimp: used to manage the distribution of commercial communications and newsletters. Mailchimp is based in the United States and participates in the EU–U.S. Data Privacy Framework approved by the European Commission.
The information you provide through this website or through any associated application will be hosted on servers contracted by ELISABET BACH OLLER through its web hosting provider.
The processing of personal data by the above-mentioned entities, as well as by any other service providers engaged by the Provider, is governed by the corresponding Data Processing Agreement (DPA) entered into in accordance with the applicable data protection legislation.
DATA SUBJECTS’ RIGHTS
As a User and Data Subject, you may exercise any of the following rights by sending a written request to the postal address indicated above or by emailing [email protected] with the subject line:
“DATA PROTECTION: DATA SUBJECT RIGHTS”
Your rights include:
- Right of Access – to obtain confirmation as to whether your personal data is being processed and to receive information regarding such processing.
- Right to Rectification – to request the correction of inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”) – to request the deletion of personal data where it is no longer necessary, is excessive, or has been processed unlawfully.
- Right to Object – to object to the processing of your personal data under the circumstances provided for by law.
- Right to Restriction of Processing – to request that the processing of your personal data be restricted, particularly where such restriction is necessary for the establishment, exercise, or defence of legal claims.
- Right to Data Portability – to receive the personal data you have provided in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted to another data controller.
- Right Not to Be Subject to Automated Individual Decision-Making, including profiling, where such decisions produce legal effects concerning you or similarly significantly affect you.
You also have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of any processing carried out prior to such withdrawal.
If you believe that your rights under the applicable data protection legislation have been infringed, you also have the right to lodge a complaint with the competent supervisory authority.
ADDITIONAL INFORMATION
Security Measures
The personal data you provide will be treated as strictly confidential.
The Provider has implemented all necessary technical and organisational measures, together with the appropriate levels of security required under applicable legislation, to ensure the protection of personal data and to prevent its alteration, loss, theft, unauthorised processing, or unauthorised access, taking into account the current state of technology and the nature of the personal data processed.
Furthermore, the Provider guarantees that all processing activities and the systems, software, files, equipment, facilities, and premises used for such processing comply with the integrity and security requirements established by the applicable legislation.
Language
The governing language of this Privacy Policy is Spanish. Accordingly, should any discrepancy arise between the Spanish version and any translation into another language, the Spanish version shall prevail.
SOCIAL MEDIA
ELISABET BACH OLLER may maintain profiles on various social media platforms.
The processing of personal data relating to individuals who follow the official social media accounts of ELISABET BACH OLLER or otherwise interact with them shall be governed by this section, together with the applicable terms of use, privacy policies, and access rules established by each respective social media platform and previously accepted by the User.
ELISABET BACH OLLER will process such personal data for the purposes of managing its presence on social media, informing users about its activities, products, and services, and carrying out any other activities permitted under the applicable rules of each platform.
The publication of content is prohibited where such content:
- Is presumed to be unlawful under national, European Union, or international legislation, promotes unlawful activities, or is contrary to the principle of good faith.
- Infringes fundamental rights and freedoms, violates standards of online courtesy, is offensive, or may generate negative reactions among users or third parties, or is otherwise considered inappropriate by ELISABET BACH OLLER.
- Violates the principles of legality, honesty, accountability, protection of human dignity, protection of minors, public order, privacy, consumer protection, or intellectual and industrial property rights.
ELISABET BACH OLLER reserves the right to remove, without prior notice, any content published on its website or official social media profiles that it considers inappropriate.
Where a User voluntarily provides personal data through a social media platform, ELISABET BACH OLLER shall not be responsible for the security measures implemented by that platform. Users wishing to obtain information about such measures should consult the relevant privacy policy and terms of use of the respective social media platform.
PUBLICATION OF TESTIMONIALS
Should a User wish to publish a testimonial on the website, please note that any personal data provided will be processed for the purpose of managing and publishing suggestions, experiences, or opinions relating to our products and/or services in order to assist other users.
Such data will be retained for as long as there is a mutual interest in maintaining the purpose of the processing. Once it is no longer necessary, the data will be erased using appropriate security measures to ensure its pseudonymisation or complete destruction.
Testimonials published on our website may include the User’s first name, surname, image, and job title.
REMARKETING AND RETARGETING
Remarketing is a marketing technique that allows personalised advertisements to be displayed to users who have previously visited our website. It is a solution associated with Google Ads, designed to improve return on investment (ROI).
Remarketing uses cookies stored on the User’s device so that advertisements from the Provider may be displayed on websites participating in the Google Ads or Google AdSense advertising networks.
Retargeting is a technique that enables graphical advertisements to be displayed on third-party websites to users who have left our website without completing a desired action, such as registering, making a purchase, or submitting an enquiry. These advertisements are primarily intended to encourage completion of that action.
The information collected through these features is gathered by cookies placed by Meta, X, DoubleClick, and Google Ads. Further information regarding the processing of personal data by these providers is available in their respective Privacy Policies.
If you do not wish this information to be collected through these cookies, you may disable Google’s advertising cookies via your Google Ads Settings or opt out of third-party cookies through the Network Advertising Initiative opt-out page.
These services enable interaction with social media platforms and other external services. Any interactions and information obtained by the Provider are always subject to the privacy settings selected by the User on the relevant platform.
Please note that even if Users do not actively interact with these services, they may still collect website traffic data from pages on which they are installed.
META ADS
The Provider uses Meta Ads, Meta’s online advertising platform.
This platform enables the creation of advertising campaigns by targeting audiences according to criteria such as:
- Geographic location;
- Demographic information (such as age and gender);
- Interests and hobbies;
- Purchasing behaviour, both online and offline;
- Other available targeting criteria.
From the moment a User submits their personal data through the newsletter subscription form, any personal data obtained through Meta Ads shall be processed in accordance with this Privacy Policy.
Under no circumstances will information obtained from Meta be used for purposes other than those described herein.
X ADS
The Provider also uses X Ads, the advertising platform operated by X.
Advertising campaigns may be targeted according to:
- Geographic location;
- Demographic characteristics;
- Interests;
- Purchasing behaviour;
- Other audience segmentation criteria available through the platform.
Any personal data submitted through the newsletter subscription form shall be processed in accordance with this Privacy Policy.
Information obtained through X Ads will never be used for purposes other than those expressly described herein.
GOOGLE ADS
The Provider uses Google Ads, Google’s online advertising platform, to create advertising campaigns that may be displayed across Google’s advertising network and third-party websites.
Google Ads allows audiences to be segmented according to criteria including:
- Geographic location;
- Demographic information;
- Interests;
- Purchasing behaviour;
- Other targeting criteria offered by Google.
Any personal data submitted by Users through the newsletter subscription form shall be processed in accordance with this Privacy Policy.
Information obtained through Google Ads will not be used for any purpose other than those expressly described herein.
The Provider may also select and publish customer testimonials relating to its services. Such testimonials may include personally identifiable information, including the User’s name and/or city, region, or country of residence.
If you wish your name or testimonial to be removed from the website, you may contact the Provider using the contact details set out in this Privacy Policy.
PINTEREST ADS
Pinterest Ads is Pinterest’s advertising platform, enabling businesses to promote content designed to attract the attention of their target audience.
Due to the characteristics of the platform, advertising on Pinterest shares many similarities with search engine advertising rather than traditional social media advertising.
Pinterest is a visual discovery platform where users collect ideas based on their interests, save inspiring content, and search for images using keywords.
As a result, Pinterest also functions as a search engine, allowing brands to increase their visibility by appearing among the top search results.
Users may manage how Pinterest uses their information for personalised content and advertising through their Pinterest Privacy and Data Settings.
GOOGLE SIGNALS
Google Signals is a feature developed by Google that works in conjunction with Google Analytics.
When Users are signed in to their Google Account and have expressly consented to this functionality, Google Signals associates website activity with those Users in order to personalise advertising.
This functionality may include:
- Identifying Users across multiple devices;
- Recording browsing and search history associated with the website;
- Recording whether Users have accessed YouTube;
- Producing aggregated and anonymised statistics regarding user behaviour across different devices;
- Delivering more relevant advertising based on Users’ interests.
USE OF GOOGLE reCAPTCHA
This website uses Google reCAPTCHA, a service provided by Google LLC, to protect online forms against automated submissions and spam.
For the purposes of this processing activity, the owner of this website acts as the Data Controller, while Google acts as the Data Processor.
Google reCAPTCHA analyses user behaviour in order to determine whether an interaction is performed by a natural person. In doing so, it may collect information including:
- IP address;
- Browser information;
- Operating system;
- Mouse movements;
- Time spent on the website;
- Other interaction-related data.
This processing is based on the Provider’s legitimate interest in ensuring the security of the website and preventing malicious automated access.
Further information regarding Google’s processing of personal data is available in Google’s Privacy Policy.
The processing of personal data relating to individuals who contact ELISABET BACH OLLER through WhatsApp shall be governed by this section, together with WhatsApp’s applicable Terms of Service, Privacy Policy, and access conditions previously accepted by the User.
ELISABET BACH OLLER will process your personal data for the purpose of managing and responding to your enquiry, as well as carrying out any administrative actions necessary for the provision of the requested service.
Your personal data will be shared with WhatsApp Ireland Limited, whose technical and organisational security measures ensure the confidentiality, integrity, and availability of personal data in accordance with its Privacy Policy, as well as with WhatsApp LLC, located in the United States and participating in the EU–U.S. Data Privacy Framework approved by the European Commission.
No other disclosures of personal data are envisaged unless required by law or by a judicial authority.
Your personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected. Once no longer required, the data will be securely blocked, archived, and retained for the legally prescribed retention periods before being permanently deleted.
The use of ELISABET BACH OLLER’s WhatsApp service for sending content that is unrelated to the purpose of the enquiry, unlawful under national or international legislation, infringes fundamental rights, or otherwise violates the principles of legality, honesty, accountability, privacy protection, consumer protection, or intellectual and industrial property rights is strictly prohibited.
CHANGES TO THIS PRIVACY POLICY
ELISABET BACH OLLER reserves the right to amend this Privacy Policy at any time in order to reflect legislative developments, case law, or changes in the criteria established by the competent data protection authorities.
Any amendments will be published on this website and shall become effective immediately upon publication.
WITHDRAWAL OF CONSENT
Where the processing of personal data is based on your consent, you may withdraw that consent at any time by contacting ELISABET BACH OLLER using the procedure described in this Privacy Policy for the exercise of data subject rights.
Withdrawal of consent shall not affect the lawfulness of any processing carried out prior to such withdrawal.
GOVERNING LAW
As a general rule, the relationship between ELISABET BACH OLLER and Users of the services provided through this website shall be governed by Spanish law.
The parties expressly submit to Spanish law, and any disputes arising out of or relating to the use of this website shall fall within the jurisdiction of the Courts and Tribunals of Granollers (Spain).