Facebook-f Instagram

Open every day of the year

RESERVE

Privacy policy

I. PRIVACY AND PERSONAL DATA PROTECTION POLICY

www.grupxativa.com

1. PERSONAL DATA PROTECTION POLICY

ARROSSERIA XATIVA BCN 1943, S.L. is an organization that collects personal data through the various means at its disposal. This entails a significant responsibility in designing and organizing procedures aligned with legal compliance in data protection. Therefore, ARROSSERIA XATIVA BCN 1943, S.L. will implement all necessary security measures to ensure the protection of the collected data.

In fulfilling these responsibilities and in order to establish the general principles governing the processing of personal data within the organization, ARROSSERIA XATIVA BCN 1943, S.L. hereby approves this Personal Data Protection Policy, which is notified and made available to all stakeholder groups, while also complying with the following regulations:

  1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  2. Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPD-GDD).
  3. Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

2. SCOPE OF APPLICATION

This Personal Data Protection Policy applies to ARROSSERIA XATIVA BCN 1943, S.L., its management and administrative bodies, its staff, and all individuals who interact with ARROSSERIA XATIVA BCN 1943, S.L., expressly including service providers with access to data (“Data Processors”).

The controller of the personal data collected by ARROSSERIA XATIVA BCN 1943, S.L. is: ARROSSERIA XATIVA BCN 1943, S.L., with Tax ID/CIF: B63128805, registered in the COMMERCIAL REGISTER with the following registration details: Volume 35379; Folio 139, Sheet B-265680, whose legal representative is: Mr./Ms. ALEJANDRO LOPEZ RIBERA (hereinafter, the “Data Controller”). Contact details are as follows:

Address: CL DE BORDEUS, 35
Phone: 933221058
Email: direccion@grupxativa.com

3. INFORMATION ON THE DATA CONTROLLER AND PERSONAL DATA PROCESSING AT ARROSSERIA XATIVA BCN 1943, S.L.

 
ADDITIONAL INFORMATION ON DATA PROTECTION
Who is the Data Controller?

Identity:

ARROSSERIA XATIVA BCN 1943, S.L. – B63128805

Postal Address:

CL DE BORDEUS, 35, 08029 BARCELONA, BARCELONA

Phone:

933221058

Email:

direccion@grupxativa.com
 
For what purposes do we process your personal data?

At ARROSSERIA XATIVA BCN 1943, S.L., we use the information provided by our stakeholders for the following processing purposes:

Data Processing Category

 Purpose of Processing

Data Retention Period

CUSTOMERS

➢ CUSTOMER, ACCOUNTING,

TAX, AND ADMINISTRATIVE MANAGEMENT

No automated decisions will be made based on this profile.

Processed personal data will be retained for as long as necessary to fulfill the purpose of the processing, and will be deleted upon request by the data subject, or once the processing purpose has ended, without prejudice to retention during the periods established by Tax legislation to address potential liabilities.
What is the legal basis for processing your data?

The legal bases for personal data processing at ARROSSERIA XATIVA BCN 1943, S.L. are as follows:

Data Processing Category

 Legal Basis for Processing

CUSTOMERS

Performance of a contract: sale of goods/provision of a service. If you do not provide your data, the agreed service cannot be delivered.
To whom will your data be disclosed?

These processing activities may involve sharing your data with third-party processors. Below is information on the anticipated disclosures of your data.

Data Processing Category

Disclosure Foreseen

 International Transfers

CUSTOMERS

Data will be disclosed to: ORGANIZATIONS OR INDIVIDUALS

DIRECTLY RELATED TO THE DATA CONTROLLER

PUBLIC ADMINISTRATIONS WITH

RELEVANT COMPETENCE

BANKING OR FINANCIAL ENTITIES

 No data will be transferred outside the EU.
What rights do you have when you provide your data?

Any individual has the right to obtain confirmation as to whether ARROSSERIA XATIVA BCN 1943, S.L. is processing personal data concerning them.

Data subjects have the right to access their personal data and to request the rectification of inaccurate data or, where applicable, request erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

Under certain circumstances, data subjects may request the restriction of processing of their data, in which case we will only retain them for the establishment, exercise, or defense of legal claims.

In certain situations and for reasons related to their particular circumstances, data subjects may object to the processing of their data. ARROSSERIA XATIVA BCN 1943, S.L. will cease processing unless there are compelling legitimate grounds or for the establishment, exercise, or defense of legal claims.

Likewise, under certain conditions and where technically feasible, data subjects have the right to receive their personal data and to transmit them directly to another controller upon request.

To exercise these rights, please contact us by sending a written request to:

➢ ARROSSERIA XATIVA BCN 1943, S.L., CL DE BORDEUS, 35, 08029 BARCELONA, BARCELONA, or by email to direccion@grupxativa.com, accompanied by a copy of your ID document.

You may also contact the Spanish Data Protection Agency to file a complaint, especially if you have not received a satisfactory response from us regarding the exercise of your rights.
ADDITIONAL INFORMATION ON DATA PROTECTION
Who is the Data Controller?

Identity:

ARROSSERIA XATIVA BCN 1943, S.L. – B63128805

Postal Address:

CL DE BORDEUS, 35, 08029 BARCELONA, BARCELONA

Phone:

933221058

Email:

direccion@grupxativa.com
 
For what purposes do we process your personal data?

At ARROSSERIA XATIVA BCN 1943, S.L., we use the information provided by our stakeholders for the following processing purposes:

Data Processing Category

 Purpose of Processing

Data Retention Period

PROVIDERS

➢ CUSTOMER, ACCOUNTING,

TAX, AND ADMINISTRATIVE MANAGEMENT

No automated decisions will be made based on this profile.

Processed personal data will be retained for as long as necessary to fulfill the purpose of the processing, and will be deleted upon request by the data subject, or once the processing purpose has ended, without prejudice to retention during the periods established by Tax legislation to address potential liabilities.
What is the legal basis for processing your data?

The legal bases for personal data processing at ARROSSERIA XATIVA BCN 1943, S.L. are as follows:

Data Processing Category

Legal Basis for Processing

PROVIDERS

Performance of a contract: sale of goods/provision of a service. If you do not provide your data, the agreed service cannot be delivered.
To whom will your data be disclosed?

These processing activities may involve sharing your data with third-party processors. Below is information on the anticipated disclosures of your data.

Data Processing Category

Disclosure Foreseen

 International Transfers

PROVIDERS

Data will be disclosed to: ORGANIZATIONS OR INDIVIDUALS

DIRECTLY RELATED TO THE DATA CONTROLLER

PUBLIC ADMINISTRATIONS WITH

RELEVANT COMPETENCE

BANKING OR FINANCIAL ENTITIES

 No data will be transferred outside the EU.
What rights do you have when you provide your data?

[Identical rights text as in the CUSTOMERS section]
ADDITIONAL INFORMATION ON DATA PROTECTION
Who is the Data Controller?

Identity:

ARROSSERIA XATIVA BCN 1943, S.L. – B63128805
For what purposes do we process your personal data?

Data Processing Category

 Purpose of Processing

Data Retention Period

CURRICULUM

➢ CUSTOMER, ACCOUNTING, TAX, AND ADMINISTRATIVE MANAGEMENT

➢ HUMAN RESOURCES

No automated decisions will be made based on this profile.

Personal data will be retained for as long as necessary for the purpose and deleted upon request or when processing ends, without prejudice to retention periods under applicable regulations to address potential liabilities.
What is the legal basis for processing your data?

CURRICULUM

Consent of the data subject, which may be withdrawn at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
To whom will your data be disclosed?

CURRICULUM

Data will be disclosed to: ORGANIZATIONS OR INDIVIDUALS DIRECTLY RELATED TO THE DATA CONTROLLER

 No data will be transferred outside the EU.
What rights do you have when you provide your data?

[Identical rights text as above]

NEWSLETTER

➢ CUSTOMER, ACCOUNTING, TAX, AND ADMINISTRATIVE MANAGEMENT

➢ ADVERTISING AND COMMERCIAL PROSPECTING

No automated decisions will be made based on this profile.

 Personal data will be retained as long as necessary for the purpose and deleted upon request or when processing ends, without prejudice to applicable legal retention periods.

NEWSLETTER

Consent of the data subject, which may be withdrawn at any time, without affecting the lawfulness of prior processing.

NEWSLETTER

Data will be disclosed to: ORGANIZATIONS OR INDIVIDUALS DIRECTLY RELATED TO THE DATA CONTROLLER

 No data will be transferred outside the EU.

WEB FORM
  • CUSTOMER, ACCOUNTING, TAX, AND ADMINISTRATIVE MANAGEMENT
  • PROFESSIONAL CONTACT

No automated decisions will be made based on this profile.

 Personal data will be retained as long as necessary for the purpose and deleted upon request or when processing ends, without prejudice to applicable legal retention periods.

WEB FORM

Consent of the data subject, which may be withdrawn at any time, without affecting the lawfulness of prior processing.

WEB FORM

Data will be disclosed to: ORGANIZATIONS OR INDIVIDUALS DIRECTLY RELATED TO THE DATA CONTROLLER

 No data will be transferred outside the EU.

VIDEO SURVEILLANCE
  • CUSTOMER, ACCOUNTING, TAX, AND ADMINISTRATIVE MANAGEMENT
  • VIDEO SURVEILLANCE

No automated decisions will be made based on this profile.

Personal data will be retained as long as necessary for the purpose and deleted upon request or when processing ends, without prejudice to retention periods established under Private Security regulations to address potential liabilities.

VIDEO SURVEILLANCE

Public interest: video surveillance.

VIDEO SURVEILLANCE

Data will be disclosed to: ORGANIZATIONS OR INDIVIDUALS DIRECTLY RELATED TO THE DATA CONTROLLER

 No data will be transferred outside the EU.

HUMAN RESOURCES
  • CUSTOMER, ACCOUNTING, TAX, AND ADMINISTRATIVE MANAGEMENT
  • HUMAN RESOURCES
  • PAYROLL MANAGEMENT

No automated decisions will be made based on this profile.

Personal data will be retained as long as necessary for the purpose and deleted upon request or when processing ends, without prejudice to retention periods established under Labour legislation to address potential liabilities.

HUMAN RESOURCES

Performance of an employment contract. If you do not provide your data, the agreed service cannot be delivered.

HUMAN RESOURCES

Data will be disclosed to: ORGANIZATIONS OR INDIVIDUALS DIRECTLY RELATED TO THE DATA CONTROLLER

PUBLIC ADMINISTRATIONS WITH RELEVANT COMPETENCE

BANKING OR FINANCIAL ENTITIES

 No data will be transferred outside the EU.
 

4. PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA

The Personal Data Protection Policy is a proactive responsibility measure aimed at ensuring compliance with applicable legislation in this area and, accordingly, respecting the right to honor and privacy in the processing of personal data of all individuals who interact with ARROSSERIA XATIVA BCN 1943, S.L.

In accordance with this Policy, the following principles govern data processing within the organization, and consequently, affected individuals commit to implementing the corresponding procedures and organizational and security measures within their area of responsibility:

  • Lawfulness, fairness, transparency, and purpose limitation.
  • Data minimization.
  • Accuracy.
  • Storage limitation.
  • Integrity and confidentiality.
  • Data disclosures.
  • Engagement of vendors with data access.
  • International data transfers.
  • Rights of affected individuals.

ARROSSERIA XATIVA BCN 1943, S.L. will ensure that the principles set forth in this Personal Data Protection Policy are taken into account:

  1. In the design and implementation of all work procedures.
  2. In the products and services offered.
  3. In all contracts and obligations entered into or assumed.
  4. In the implementation of any systems and platforms that allow employee or third-party access and/or collection or processing of personal data.

5. PERSONAL DATA OF MINORS

In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights, only individuals aged 14 or older may lawfully provide consent for the processing of their personal data by ARROSSERIA XATIVA BCN 1943, S.L. In the case of children under 14, parental or guardian consent is required, and processing will only be lawful to the extent authorized by the parent or guardian.

6. CONFIDENTIALITY AND SECURITY OF PERSONAL DATA

The website uses an SSL (Secure Socket Layer) certificate, which ensures that personal data are transmitted securely and confidentially, as all data transmissions between the server and the user are fully encrypted.

However, since ARROSSERIA XATIVA BCN 1943, S.L. cannot guarantee the total security of the internet or the complete absence of hackers or others who might fraudulently access personal data, the Data Controller undertakes to inform the user without undue delay in the event of a personal data breach that is likely to result in a high risk to their rights and freedoms. As defined in Article 4 of the GDPR, a personal data breach means a security violation leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure—through legal or contractual obligations—that this confidentiality is respected by employees, collaborators, and any third party to whom the information is made accessible.

7. COMMITMENT OF ARROSSERIA XATIVA BCN 1943, S.L. STAFF

Accordingly, we confirm that all employees of ARROSSERIA XATIVA BCN 1943, S.L. are informed of this Policy and acknowledge that personal data constitute a company asset. They therefore adhere to this Policy and commit to the following:

  • Complete the data protection awareness training provided by ARROSSERIA XATIVA BCN 1943, S.L.
  • Apply user-level security measures relevant to their workplace, without prejudice to design and implementation responsibilities assigned based on their role.
  • Use the designated forms for data subjects to exercise their rights and immediately notify ARROSSERIA XATIVA BCN 1943, S.L. to ensure timely response.
  • Immediately report to ARROSSERIA XATIVA BCN 1943, S.L. any deviations from this Policy, particularly “personal data breaches,” using the designated reporting form.

8. MONITORING AND EVALUATION

ARROSSERIA XATIVA BCN 1943, S.L. will carry out an annual verification, evaluation, and assessment—as well as whenever significant changes occur in data processing activities—of the effectiveness of technical and organizational measures to ensure the security of processing.

Below, ARROSSERIA XATIVA BCN 1943, S.L. provides its Data Protection Policy and detailed information about its data processing activities.

ARROSSERIA XATIVA BCN 1943, S.L.

Reserve