By means of this notice, “Construcciones Mecánicas Guill, S.A.” (hereinafter “Guill”) hereby informs the users of the website www.guill.es, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation) and other applicable regulations, of its policy on the protection of personal data for the purposes expressly, freely and voluntarily decided by the latter, to provide “Guill” with the personal data requested of them, motivated by the request for information or for the contracting of the various technical engineering and construction services tailored to the rotary dryers for the chipboard industry.
Unless specifically specified otherwise, all the data requested on the form or similar should be provided in a true, accurate, complete and updated manner. Failure to do so may result in “Guill”, depending on the case, deciding not to register the user or denying the specific service requested. All the data provided by the user/data subject will be processed according as detailed below.
Information regarding the processing of personal data
Identification of the data controller: “Construcciones Mecánicas Guill, S.A.”, with registered office at Miquel Torelló i Pagès 44, 08750 Molins de Rei (Barcelona), with Spanish tax identification number: A58241241, registered in the Barcelona Mercantile Register in Volume 7875, Book 7135 Section 2, Sheet 23, Page 91699, Entry 1. Contact e-mail address email@example.com.
Purpose of the processing:
All data provided will be processed for the following purposes:
– Respond to requests made by the data subject.
– Provision of technical engineering services.
– Maintenance of the relationship that may be established.
– Management, administration, information, provision and improvement of the services you decide to hire.
– Commercial communications related to our products and services.
The personal data provided will be stored as long as the business relationship is maintained, the data subject does not request its erasure or is necessary for the purposes of the processing. The destruction of the data will not proceed when there is a legal provision requiring their storage, in which case the data will be blocked and will only be stored at the disposal of public administrations, judges and courts, for the purpose of dealing with possible liabilities arising from the processing, during the period of prescription of the data.
No automated decisions, including profiling, are currently made based on your personal information. In the event that such automated decisions are to be made in the future, prior consent will be sought.
Legitimization of processing:
Any processing of your personal data has been authorised by you. in a prior and express manner. Prior to this, you will be informed of all the matters required by law in order to give informed consent.
You may revoke this consent at any time as detailed below.
Recipients, assignments and transfers of data:
Your data will not be transferred unless it is strictly necessary for the fulfilment of the aforementioned purposes or legal obligation.
Similarly, your data will not be transferred to countries outside the European Union unless it is indispensable for the fulfilment of the purposes for which it was collected and you authorize us in advance and expressly.
Rights of the data subjects: You may exercise the following rights at any time by sending a letter to “Guill”, Miquel Torelló i Pagès 44, 08750 Molins de Rei (Barcelona) or by sending an e-mail to firstname.lastname@example.org. The application must contain the name, surname and the documents proving the identity of the data subject or of his/her legal representative, as well as the document supporting the representation, the petition specifying the request, the address for notification, the date and signature of the applicant and the documents supporting the petition made. If the application does not meet the specified requirements, its correction will be required.
The rights of the data subjects are: of access, rectification, restriction, portability, objection and erasure; and its definition is:
Right of access:
The data subject shall have the right to obtain confirmation from the controller as to whether or not personal data concerning himself/herself are being processed and, if so, the right of access to the personal data and to the following information:
a) the purposes of processing
b) the categories of personal data concerned
c) the recipients or categories of recipients to whom the personal data were or will be disclosed, in particular recipients in third parties or international organisations
d) if possible, the period for which the personal data are to be stored or, if not possible, the criteria used to determine this period
e) the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data relating to the data subject, or to object to such processing
f) the right to lodge a complaint with a supervisory authority
g) where personal data have not been obtained from the data subject, any available information on their origin
h) the existence of automated decisions, including profiling, referred to in Article 22(1) and (4) and, at least in such cases, significant information on the logic applied and the importance and expected consequences of such processing for the data subject.
Where personal data are transferred to a third country or an international organisation, the data subject shall have the right to be informed of appropriate safeguards under Article 46 relating to the transfer. The controller shall provide a copy of the personal data being processed. The controller may charge a reasonable fee based on administrative costs for any other copy requested by the person concerned. Where the data subject submits the application by electronic means, and unless the data subject requests otherwise, the information shall be provided in a commonly used electronic format.
Right of rectification:
The data subject shall have the right to have inaccurate personal data concerning himself/herself corrected without undue delay by the controller. Subject to the purposes of the processing, the data subject shall have the right to have incomplete personal data made complete, including by additional declaration.
Right of erasure:
The data subject shall have the right to obtain without undue delay from the controller the erasure of personal data concerning himself/herself, who shall be obliged to delete the personal data without undue delay in the event of any of the following circumstances:
a) personal data are no longer necessary for the purposes for which they were collected or otherwise processed
b) the data subject withdraws the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) and the processing is not based on any other legal basis
c) the data subject objects to processing pursuant to Article 21(1) and no other legitimate grounds for processing prevail, or the data subject objects to processing pursuant to Article 21(2)
d) the personal data have been unlawfully processed
e)personal data must be erased in order to comply with a legal obligation laid down in Union or Member State law which applies to the controller of the processing
f) the personal data have been collected in connection with the provision of information society services referred to in Article 8(1)
Where the controller has made public the personal data of which the data subject has exercised his or her right of erasure, the controller shall, taking into account the available technology and the cost of its implementation, take reasonable steps to communicate to third parties processing such information the request for erasure of the data, as well as any links to such data or any copies or replicas of such data.
This right will be limited by other rights such as the right to freedom of expression and information, by the fulfilment of any legal obligation, or when there are reasons of public interest.
Right to restriction of processing:
The data subject shall have the right to obtain from the controller the restriction of the processing of the data when any of the following conditions are fulfilled:
a) the data subject contests the accuracy of the personal data, for a period of time allowing the data subject to verify the accuracy of the data
b) the processing is unlawful and the data subject objects to the erasure of the personal data and instead requests the restriction of their use
c) the controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the purposes of formulating, exercising or defending claims
d)the data subject has objected to processing pursuant to Article 21(1) while it is being checked whether the data subject’s legitimate reasons prevail over those of the data subject
Where the processing of personal data has been restricted pursuant to paragraph 1, such data may be processed, with the exception of their storage, only with the consent of the data subject or for the purpose of making, exercising or defending claims, or for the protection of the rights of another natural or legal person or on grounds of important public interest of the Union or of a particular Member State.
Any data subject who has obtained a restriction on processing in accordance with paragraph 1 shall be informed by the controller before the restriction is lifted.
Right of objection:
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data relating to himself/herself or her on the basis of Article 6(1)(e) or (f), including the drawing up of profiles on the basis of those provisions.
The controller shall cease to process personal data, unless he can show compelling legitimate reasons for processing which outweigh the interests, rights and freedoms of the data subject, or for making, exercising or defending claims.
Where the processing of personal data is for the purpose of direct marketing, the data subject shall have the right to object at any time to the processing of personal data concerning himself/herself, including profiling in so far as it relates to such marketing.
Where the data subject objects to processing for the purposes of direct marketing, personal data shall no longer be processed for those purposes.
Where personal data are processed for scientific or historical research or statistical purposes in accordance with Article 89(1), the data subject shall have the right, on grounds relating to his or her particular situation, to object to the processing of personal data relating to him or her, unless this is necessary for the performance of a task carried out in the public interest.
Right to data portability:
The data subject shall have the right to receive the personal data concerning himself/herself/her which he or she has provided to a controller, in a structured, commonly used and machine-readable format, and to transmit them to another controller without being prevented by the controller to whom they were provided, when:
a)the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b), and
b)the processing is carried out by automated means.
- When exercising his right to data portability in accordance with paragraph 1, the data subject shall have the right to have personal data transmitted directly from data controller to data controller where technically possible.
The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. Such right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority conferred on the controller.
The controller shall communicate any rectification or erasure of personal data or restriction of processing pursuant to Articles 16, 17(1) and 18 to each of the recipients to whom the personal data have been disclosed, unless this is impossible or requires a disproportionate effort. The data controller shall inform the data subject of such addressees if he/she so requests.
Withdrawal of consent: The data subject, who at the time had given his or her consent to the processing of his or her personal data, may also withdraw it with equal ease. Withdrawal of consent shall not constitute unlawfulness of the processing previously carried out.
The data subject shall have the right to lodge a complaint with the competent supervisory authority.
Where personal data are to be further processed for different purposes, the controller shall inform the data subject accordingly.
Security measures: The Data Controller states that has adopted the measures of a technical and organisational nature required to guarantee the security of the data and to prevent the same from being altered, lost, processed or accessed without authorization, taking into account the state of technology, the nature of the data stored and the risks to which the data is exposed with regard to both human activity and the physical or natural environment
The “Guill” website contains links to other sites which may be of interest to party concerned. “Guill” shall not be held liable for these links and no guarantees shall be made in relation to the privacy policies of the same, whereby the party concerned access the content of such sites in accordance with the conditions of use set forth in the same and at their own liability.