Privacy Policy and Data Protection

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data, by which Directive 95/46/EC is repealed (hereinafter, GDPR), of Law 34/2002, of July 11, on information society services and electronic commerce (hereinafter, LSSI-CE) and Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights, KREATIU CAT SL guarantees the protection and confidentiality of personal data, of any type that our clients provide us, in accordance with the provisions of the General Data Protection Regulation.

The Data Protection Policy of KREATIU CAT SL is based on the principle of proactive responsibility, according to which the Data Controller is responsible for compliance with the regulatory and jurisprudential framework, being able to demonstrate it to the corresponding control authorities.

The data provided will be processed in the terms established in the GDPR; in this sense, KREATIU CAT SL has adopted the levels of protection that are legally required, and has installed all the technical measures at its disposal to avoid loss, misuse, alteration, unauthorized access by third parties, set forth below. However, the user must be aware that security measures on the Internet are not impregnable.

Data Controller: Who are we?

Name: KREATIU CAT SL

CIF: B19936814

Address: Calle Dels Vilabella no5, 08500, Barcelona, Vic

Phone: 722601050

Email: aroma@kreatiu.cat

Data Processing: What data do we process and what is its origin?

Depending on the relationship you may have with us, the following categories of personal data may be processed, as well as obtaining data from different sources:

  • Contact forms and calls: The data comes from the interested party themselves, or from their legal representative. The categories of data that will be processed are "Identifying data" (name, email and phone).
  • Quote requests: The data comes from the interested party themselves, or from their legal representative. The categories of data that will be processed are "Identifying" (name, email, phone).
  • Service provision or product sales: The data comes from the interested party themselves, or from their legal representative. The categories of data that will be processed are "Identifying" (name, email, phone, postal address) and "Economic" (banking data).
  • Sending commercial communications: The data comes from the interested party themselves, or from their legal representative. The categories of data that will be processed are "Identifying" (name, email, phone, image). Express consent will be requested for this.

Purpose of processing: What will we use your data for?

  • Contact forms: All data provided by our visitors on the KREATIU CAT SL website will be included in the register of personal data processing activities, created and maintained under the responsibility of KREATIU CAT SL, essential to resolve doubts or information requests sent by our visitors.
  • Customer service: All data provided by our clients will be included in the register of personal data processing activities, created and maintained under the responsibility of KREATIU CAT SL, essential to provide the services contracted by our clients, as well as to resolve doubts or questions that they raise through our customer service channels.
  • Received calls: All data provided by interested parties who contact KREATIU CAT SL will be included in the register of personal data processing activities, created and maintained under the responsibility of KREATIU CAT SL, essential to resolve doubts or information requests that they make to us.
  • Web visitors: We perform anonymized tracking of visitors to the KREATIU CAT SL website, to know which pages and services have greater relevance for our potential clients.
  • Newsletter products and services: To clients who check the consent box for sending commercial communications/advertising, we will send them information related to the products/services we offer.

Legitimacy of processing: Why do we need your data?

  • a) Contractual relationship: This applies when you contract any of our services/products.
  • b) Legitimate interest: To attend to the queries and claims that you raise to us and to manage the collection of amounts owed.
  • c) Your consent: If you are a user of our website, by checking the box that appears in the contact form, you authorize us to send you the communications necessary to respond to the query or information request raised and the sending of advertising with the prior consent of the user.

Recipients: Who do we share your data with?

We transfer your personal data to the entities necessary to achieve the purpose of the processing and to those entities to which we are obliged for the purpose of compliance with any law.

In the event that, apart from the cases mentioned, we need to disclose your personal information to other entities, we will previously request your permission through clear options that will allow you to decide in this regard.

Communication: Where could we send your data?

We will not make international transfers of your personal data for any of the indicated purposes.

Conservation: How long will we keep your data?

We will only keep your personal data for as long as necessary to achieve the purposes for which they were collected. When determining the appropriate retention period, we examine the risks involved in the processing, as well as our contractual, legal and regulatory obligations, internal data retention policies and our legitimate business interests described in this Privacy Notice and Cookie Policy.

In this sense, KREATIU CAT SL will keep personal data once your relationship with us has ended, properly blocked, during the limitation period for actions that may arise from the relationship maintained with the interested party.

Once blocked, your data will be inaccessible to KREATIU CAT SL, and will not be processed except for their provision to Public Administrations, Judges and Courts, for the attention of possible responsibilities arising from the processing, as well as for the exercise and defense of claims before the Spanish Data Protection Agency.

Security: How are we going to protect your data?

We employ all reasonable efforts to maintain the confidentiality of personal information that is processed in our systems. We maintain strict security levels to protect the personal data that we process against accidental loss and unauthorized access, processing or disclosure, taking into account the state of technology, the nature and risks to which the data are exposed. However, we cannot be responsible for the use you make of the data (including username and password) that you use on our website. Our staff follows strict privacy standards and in the event that we contract third parties to provide support services, we require them to comply with the same standards and allow us to audit them to verify their compliance.

Your rights: What rights can you exercise as an interested party?

We inform you that you may exercise the following rights:

  • a) Right of access to your personal data, to know which ones are being processed and the processing operations carried out with them;
  • b) Right of rectification of any inaccurate personal data;
  • c) Right of deletion of your personal data, when this is possible (for example, by legal imperative);
  • d) Right to limit processing of your personal data when the accuracy, legality or need for processing of the data is doubtful, in which case, we may keep them for the exercise or defense of claims.
  • e) Right to object to the processing of your personal data, when the legal basis that enables us for its processing of those indicated is our legitimate interest. KREATIU CAT SL will stop processing your data unless it has a legitimate interest or is necessary for the defense of claims, when this right applies.
  • f) Right to portability of your data, when the legal basis that enables us for its processing is the existence of a contractual relationship or your consent.
  • g) Right to revoke the consent granted to KREATIU CAT SL.

To exercise your rights, you can do so free of charge and at any time, by contacting us at Calle Dels Vilabella no5, 08500, Barcelona, Vic, or by writing an email to aroma@kreatiu.cat.

Protection of rights: Where can you file a claim?

If you understand that your rights have been ignored by our entity, you can file a claim with the Spanish Data Protection Agency, through any of the following means:

  • Electronic headquarters: https://www.aepd.es
  • Postal mail: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid
  • Phone: 901.100.099 and 912.663.517

Filing a claim with the Spanish Data Protection Agency does not entail any cost and the assistance of a lawyer or attorney is not necessary.

Updates: What changes can there be in this Privacy Policy?

KREATIU CAT SL reserves the right to modify this policy to adapt it to legislative or jurisprudential novelties that may affect compliance with it.

In order to guarantee compliance with the regulations on the protection of personal data, KREATIU CAT SL has received consulting and advisory services from ClickDatos.