Privacy policy

gentblaugrana.es, as the data controller, informs you that, in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 on Data Protection and Guarantee of Digital Rights (LOPDGDD), we will process your data as reflected in this Privacy Policy.

In this Privacy Policy, we describe how we collect your personal data and why we collect it, what we do with it, with whom we share it, how we protect it, and your options regarding the processing of your personal data.

This Policy applies to the processing of your personal data collected by gentblaugrana.es for the provision of its services. If you accept the measures of this Policy, you agree that we may process your personal data as defined herein.

Who will receive this data?

Your data is not shared with third parties at any time.
To provide services strictly necessary for the development of the activity, gentblaugrana.es shares data with the following providers under their corresponding privacy conditions:

Google Analytics: a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help gentblaugrana.es analyze how users use the website. The information generated by the cookie about your use of tacande.net (including your IP address) will be directly transmitted to and stored by Google on servers in the United States.

How Google uses information from sites or apps that use our services.

Purpose of processing

All data provided will be processed for the following purposes:

to respond to requests made by the data subject.
to carry out dissemination, promotion, and awareness activities related to the ethical and respectful treatment of animals.
to maintain any established relationship.
to send commercial communications related to our services.
The personal data provided will be kept as long as the business relationship is maintained, the data subject does not request its deletion, or they are necessary for the purposes of processing. Data will not be destroyed when there is a legal provision requiring its preservation; in such cases, data will be blocked and kept only at the disposal of public administrations, judges, and courts for the possible responsibilities arising from the processing, during their limitation period.

Currently, no automated decisions, including profiling, are made based on your personal data.

Legal basis for processing

All processing of your personal data has been previously and expressly consented to by you. Beforehand, you are informed of all aspects required by law so that you can provide informed consent.
You may revoke this consent at any time as detailed later in this document.

Recipients, disclosures, and data transfers

Your data will not be disclosed except when strictly necessary to fulfill the aforementioned purposes or by legal obligation.
Likewise, your data will not be transferred to countries outside the European Union unless it is essential for the stated purposes and you have previously and expressly authorized it.

Rights of data subjects

You may exercise at any time the rights detailed below by sending an email to info@gentblaugrana.es . The request must include your name, surname(s), and documentation proving the identity of the data subject or their legal representative, as well as proof of representation, a specific request, an address for notifications, the date, and the applicant's signature, along with supporting documents for the request made. If the request does not meet the specified requirements, correction will be requested.
The rights of data subjects are: access, rectification, restriction, portability, objection, and erasure; and their definitions are as follows:

Right of access

The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them is being processed and, if so, access to the personal data and the following information:

the purposes of processing.
the categories of personal data being processed.
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations.
where possible, the expected retention period of the personal data, or, if not possible, the criteria used to determine this period.
the existence of the right to request from the controller the rectification or erasure of personal data or restriction of processing concerning the data subject, or to object to such processing.
the right to lodge a complaint with a supervisory authority.
where the personal data have not been obtained from the data subject, any available information as to their source.
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4), and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Where personal data are transferred to a third country or an international organization, the data subject has the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer. The controller shall provide a copy of the personal data undergoing processing. The controller may charge a reasonable fee based on administrative costs for any further copies requested. Where the data subject makes the request by electronic means, unless otherwise requested, the information shall be provided in a commonly used electronic format.

Right of rectification

The data subject has the right to obtain without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of a supplementary statement.

Right of erasure (“right to be forgotten”)

The data subject has the right to obtain without undue delay the erasure of personal data concerning them, and the controller shall be obliged to erase such data without undue delay where one of the following grounds applies:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
the data subject withdraws consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a), and where there is no other legal ground for the processing.
the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects pursuant to Article 21(2).
the personal data have been unlawfully processed.
the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject.
the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).
Where the controller has made the personal data public and is obliged to erase it, the controller shall, taking account of available technology and the cost of implementation, take reasonable steps to inform third parties processing such data of the request for erasure of any links to or copies or replications of those personal data.

This right shall be limited by other rights such as the right to freedom of expression and information, by compliance with a legal obligation, or when there are reasons of public interest.

Right to restriction of processing

The data subject has the right to obtain from the controller restriction of processing where one of the following applies:

the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.

the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.

the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims.

the data subject has objected to processing pursuant to Article 21(1) pending verification of whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted, such data shall, except for storage, only be processed with the data subject’s consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Any data subject who has obtained restriction of processing shall be informed by the controller before the restriction is lifted.

Right to object

The data subject has the right to object at any time, on grounds relating to their particular situation, to processing of personal data concerning them based on Article 6(1)(e) or (f), including profiling based on those provisions.

The controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.

Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning them for such marketing, including profiling to the extent that it is related to such direct marketing.

Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), the data subject has the right, on grounds relating to their particular situation, to object to processing of personal data concerning them, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Right to data portability

The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format, and to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a), or on a contract pursuant to Article 6(1)(b); and
the processing is carried out by automated means.

In exercising their right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible.

The exercise of the right referred to in paragraph 1 shall not adversely affect Article 17. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out pursuant to Articles 16, 17(1), and 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if requested.

Withdrawal of consent: the data subject who has given consent for the processing of their personal data may also withdraw it just as easily. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The data subject has the right to lodge a complaint with the competent Supervisory Authority.

When personal data are to be further processed for purposes other than those for which they were collected, the controller shall inform the data subject of that fact.

Security measures: the Controller declares that it has adopted the necessary technical and organizational measures to guarantee data security and prevent alteration, loss, unauthorized processing, or access, considering the state of technology, the nature of the stored data, and the risks to which they are exposed, whether from human action or the physical or natural environment.

The websites contain links to other websites that may be of interest to the data subject. gentblaugrana.es assumes no responsibility for these links and cannot guarantee compliance with appropriate privacy policies, so the data subject accesses the content of those websites under the terms of use set by them and at their own sole responsibility.

If you have any questions, concerns, or recommendations about our Privacy Policy, you can contact us by email at the following address: info@gentblaugrana.es.