Privacy Policy

LLENYES I CARBONS VALLES SL is an Organization in which personal data is collected through the various means at its disposal, which entails an important responsibility in the design and organization of procedures, so that they are aligned with legal compliance regarding Data Protection. Therefore, LLENYES I CARBONS VALLES SL will adopt all the necessary security measures to ensure the protection of the data collected.

In the exercise of these responsibilities, and with the purpose of establishing the general principles that must govern the processing of personal data within the Organization, LLENYES I CARBONS VALLES SL approves this Personal Data Protection Policy, which it notifies and makes available to all its Stakeholders, also respecting the following regulations:

1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
2. Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
3. Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

I. SCOPE OF APPLICATION
This Personal Data Protection Policy shall apply to LLENYES I CARBONS VALLES SL, its management, executive bodies and staff, as well as to all persons who have dealings with the Organization, expressly including service providers with access to data (“Data Processors”).
The controller of the personal data collected by the Organization is: LLENYES I CARBONS VALLES SL, with Tax Identification Number: B60455367, whose representative is: ISIDRE BUXÓ CAELLES (hereinafter, the Data Controller). Its contact details are as follows:
Address: CTRA. DE SABADELL A - GRANOLLERS, KM. 1,5, POLINYA, BARCELONA, 08213
Contact telephone: 937273666
Contact email: info@carbonsvalles.cat

II. INFORMATION ABOUT THE CONTROLLER AND PROCESSING OF PERSONAL DATA AT LLENYES I CARBONS VALLES SL
Additional information on data processing is a set of more specific and detailed information that entities must provide to data subjects regarding how their personal data is managed. This concept derives from the principle of transparency under the General Data Protection Regulation (GDPR) and complements the basic information initially provided, offering a greater level of detail regarding the processing activities.
Below, LLENYES I CARBONS VALLES SL provides additional information about the data processing activities it carries out:

III. PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA
The Personal Data Protection Policy is a proactive accountability measure intended to ensure compliance with the applicable legislation in this area and, in relation thereto, respect for the right to honour and privacy in the processing of personal data of all persons who have dealings with LLENYES I CARBONS VALLES SL.
In implementation of the provisions of this Policy, the Principles governing data processing within the organization are established and, consequently, the procedures and organizational and security measures that the persons affected by this Policy undertake to implement within their area of responsibility.
In relation to the foregoing, LLENYES I CARBONS VALLES SL shall ensure compliance with the following principles:
– Lawfulness, fairness, transparency and purpose limitation.
Data processing must always be communicated to the data subject through established clauses and procedures; and shall only be considered lawful if consent to the processing of data has been obtained (with particular attention to consent given by minors), or if another valid legal basis exists, and its purpose is consistent with the applicable Regulations.
– Data minimisation.
The data processed must be adequate, relevant and limited to what is necessary in relation to the various purposes of the processing.
– Accuracy.
The data must be accurate and, where necessary, kept up to date. In this regard, the necessary measures shall be adopted to ensure that personal data that is inaccurate with regard to the purposes of the processing is deleted or rectified without delay.
– Storage limitation.
Data shall be kept in a form which permits identification of the data subjects for no longer than is necessary for the purpose of the processing in question.

– Integrity and Confidentiality.
Personal data shall be processed in such a way as to ensure appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, through the implementation of appropriate technical or organizational measures.
– Data disclosures.
The purchase or obtaining of personal data whose origin comes from illegitimate sources is prohibited, as is obtaining such data in cases where it has been collected or disclosed in breach of the law or where its legitimate origin is not sufficiently guaranteed.
– Contracting of suppliers with access to data.
Only suppliers that offer sufficient guarantees to implement appropriate technical and security measures in the processing of data shall be selected for contracting. The corresponding contract shall be duly documented with them in this regard.
– International transfers of data.
Any processing of personal data subject to European Union regulations that involves a transfer of data outside the European Economic Area must be carried out in strict compliance with the requirements established in the applicable law.

– Rights of data subjects.
The Organization shall facilitate the exercise by data subjects of their rights of access, rectification, deletion, restriction of processing, objection and portability, establishing for this purpose internal procedures and, in particular, the forms necessary and appropriate for exercising such rights, which must satisfy, at a minimum, the legal requirements applicable in each case.

LLENYES I CARBONS VALLES SL shall promote the consideration of the principles set out in this Personal Data Protection Policy:

1. In the design and implementation of all work procedures
2. In the products and services offered
3. In all contracts and obligations that they formalize or assume and
4. In the implementation of all systems and platforms that allow access by its workforce or third parties and/or the collection or processing of personal data.

IV. PERSONAL DATA OF MINORS

In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, only persons over 14 years of age may lawfully give their consent to the processing of their personal data by LLENYES I CARBONS VALLES SL. If the person is under 14 years of age, the consent of their parents or legal guardians will be required for the processing, and such processing will only be considered lawful insofar as they have authorized it.

V. CONFIDENTIALITY AND SECURITY OF PERSONAL DATA
LLENYES I CARBONS VALLES SL undertakes to inform the user, without undue delay, when a personal data security breach occurs that is likely to result in a high risk to their rights and freedoms. In accordance with Article 4 of the GDPR, a personal data security breach means any breach of security that leads to the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or to the unauthorized disclosure of or access to such data.
Personal data shall be treated as confidential by the Data Controller, who undertakes to inform and ensure, by means of a legal or contractual obligation, that such confidentiality is respected by its employees, associates and any person to whom the information is made accessible.

VI. COMMITMENT OF LLENYES I CARBONS VALLES SL STAFF
In view of the foregoing, we state that the employees and workers of LLENYES I CARBONS VALLES SL have been informed of this Policy and acknowledge that personal information is an asset of LLENYES I CARBONS VALLES SL and, in this regard, adhere to it, undertaking to do the following:

• Complete the Data Protection awareness training that LLENYES I CARBONS VALLES SL makes available to them.
• Apply the user-level security measures applicable to their position, without prejudice to any responsibilities relating to their design and implementation that may be attributed to them according to their role within LLENYES I CARBONS VALLES SL
• Use the established forms for the exercise of Rights by affected users, and immediately inform LLENYES I CARBONS VALLES SL so that an effective response can be provided.
• Inform LLENYES I CARBONS VALLES SL, as soon as they become aware, of any deviations from the provisions of this Policy, particularly regarding “Personal data security breaches”, using the form established for this purpose.

VII. MONITORING AND EVALUATION
LLENYES I CARBONS VALLES SL shall carry out an annual verification, evaluation and assessment, as well as whenever there are significant changes in data processing activities, of the effectiveness of the technical and organizational measures in place to ensure the security of the processing.