DATA OF THE DATA CONTROLLER

COMPANY NAME: Miquel Angel Canal Servent (hereinafter, the “CONTROLLER”).
VAT NUMBER: 78085148x
ADDRESS: Av. Catalunya num 18 2on 1era, 25500 La Pobla de Segur, LLEIDA
PHONE: +34680239423
EMAIL for data protection communications: info@piritrek.com

APPLICABLE REGULATION: Our Privacy Policy has been designed in accordance with the General Data Protection Regulation of the EU 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), and Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights.

By providing us with your data through contact forms or similar and checking the option “I have read and accept the privacy policy” and consenting to the processing of your data by the Controller, you declare to have read and know this Privacy Policy, giving your unequivocal and express consent to the processing of your personal data in accordance with the purposes and terms expressed herein.

M. A. Canal may modify this Privacy Policy to adapt it to legislative, jurisprudential, or interpretation novelties of the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy, and the General Conditions that, if applicable, are collected for certain products or services, if this access implies any specialty in the protection of personal data.

DATA PROTECTION OFFICER: There is no Data Protection Officer appointed.

PURPOSE OF THE PROCESSING OF PERSONAL DATA: At PiriTrek, we request and process your personal information in general, to manage the relationship we have with you. The main purposes are as follows:

A. Provide information related to the products and services offered by the CONTROLLER and detailed on this website or other spaces. The data collected through a form for inquiries, suggestions, or professional contact will be used to respond and send the information that the user requires through the website or data collection processes owned by the Controller.

B. Send you by email and/or postal mail the news and updates about our entity, as well as the updates of our product and service catalog, and the sending of advertising communications by the Controller.

C. Carry out the management and contracting of our products or services through the acceptance of the corresponding estimate/order and/or the signing of a contract. As well as for the realization of any pre-contractual procedures necessary with potential clients.

D. Manage our commercial and/or administrative business relationship at all levels with our clients and suppliers, when necessary also through the corresponding “customer area” or portal/tool designated for this purpose.

E. Management of the candidate’s application in the selection processes of the CONTROLLER according to their professional profile that may arise in the future within the activities of the CONTROLLER of processing.

F. If applicable and with the prior consent of the interested party, publication of images in publications or media owned by the Controller in which the interested party appears individually or in a group (or their legal representative if applicable).

DATA RETENTION PERIOD: For purposes (A), (B), and (F), we will retain your personal data from the moment you give us your consent until you revoke it or request the limitation of processing. In these cases, we will keep your data blocked for the legally required periods.

Personal data processed for purposes (C), (D), and will be retained and processed for as long as the contractual or commercial relationship that binds us is valid. Once the contractual relationship or service provision is completed, the data retention period will be the minimum necessary to comply with legal, tax, and commercial obligations.

Personal data obtained for purpose (E) will be retained until you are assigned a job position or until you request its deletion. They will be kept for the time necessary for the purpose of the processing or for a maximum of 24 months; after this period, they will be blocked or destroyed.

If at any time we have collected your data to address you as a potential user of our products or services or to respond to an information request made by you, this data will be kept for a maximum of 12 months from the collection date, and it will be deleted after this period if a contractual relationship has not been formalized or when requested by you.

In any case, and as a general rule, we will keep your personal information as long as there is a contractual relationship that binds us or until you exercise your right to erasure and/or limitation of processing, and in this case, the information will be blocked without being used beyond its retention, as long as it may be necessary for the exercise or defense of claims or may derive any type of liability that must be addressed.

Regarding images, these will be kept for the entire duration of their public dissemination according to the characteristics of each medium used for their publication.

LEGAL BASIS: The legal basis for the processing of your data for purposes (A), (B), (F) is the express consent granted through a positive and affirmative act at the time of providing us with your personal data or those of your legal representative.

For purposes (C) and (D), the legal basis is the performance of a contract or pre-contract, in case of contracting a product or service with the DATA CONTROLLER, as well as compliance with legal obligations.

For purpose (E), The data you provide us with are necessary for the management and processing of the personnel selection processes of the DATA CONTROLLER, and not providing them would imply the impossibility of managing these selection processes. The processing, therefore, is based on the consent you have given through a clear affirmative action at the time of providing your data. In case you have not provided explicit consent, the processing of the data would be based on the pre-contractual relationship between you and the DATA CONTROLLER, as well as on the legitimate interest of the DATA CONTROLLER to carry out the necessary procedures to carry out the recruitment of personnel, in the same way that we understand that you, by sending your resume, reasonably expect your data to be processed for these purposes, so we understand that it is in line with your interests and respectful of your rights.

DATA CATEGORIES: We collect your personal information through various means, but you will always be informed at the time of collection through informative clauses about the Data Controller, the purpose and legal basis thereof, the recipients of the data, if applicable, and the retention period of your information, as well as how you can exercise your rights under data protection regulations.

In general, the personal information we process relates to the category of identifying data, such as: Name and Surnames, ID, Phone Number, Postal Address, Company, Email, as well as the IP address from which you access the data collection form. The data processed in the context of a contractual, pre-contractual, commercial, or business relationship may also include, in addition to the aforementioned: Contracted or supplied products or services, payment or billing data, banking information, manual or electronic signature, professional, academic data, etc.

The data requested for purpose (E) will be the professional and contact area: name, surnames, phone number, email, CV, cover letter, and any other personal data associated with the Curriculum or professional profile.

The data processed for purpose (F) will be the image/Voice of the interested party or their legal representative.

DATA PROCESSED AND OBLIGATION TO PROVIDE THEM OR NOT: The minimum data that will be requested to admit communication from an interested party will be the name and surname, email address, or, depending on the means of communication used, postal address, username, and/or phone number. In addition, in case of exercising a right by the interested party, a copy of the official identification document or the use of digital signature will be requested. The refusal of the interested party to provide this data may result in the rejection or return of the communication sent by the interested party and/or the non-attention or resolution of the request, suggestion, complaint, or other request from the interested party.

Additionally, all other categories of data that the interested party provides during communication, either voluntarily or at the request of the CONTROLLER, will be processed. In this second case, at the time of requesting additional data, the CONTROLLER will inform the interested party whether they are an essential requirement or not to address and resolve their request and what the possible consequences are of not providing them.

In general, the data is provided upon request from the CONTROLLER, and these will be the minimum necessary for the purpose pursued, so their provision is mandatory as a contractual requirement for the provision of services or sale of products and/or a legal obligation. The refusal of the interested party to provide the data will result in the inability to properly provide the services or sale of products, so the order cannot be formalized or, if already formalized, it will be grounds for the resolution of the corresponding service contract due to the interested party’s fault. If additional data is requested that is not essential to provide the services, the CONTROLLER will indicate this circumstance at the time of the request.

The data requested for the purpose of managing the candidacy of the interested party in the selection processes of the CONTROLLER will be necessary for the evaluation of their professional profile, and if they are incomplete, the CONTROLLER may not include them in current or future selection processes, making it mandatory to provide them.

DATA TRANSFER: There are no data transfers or international transfers of your data, except for those authorized by tax, commercial, and telecommunications legislation, as well as in cases where a judicial authority or state security forces and bodies require it. Identification and financial data may be communicated to banking entities or payment platform managers, as well as to insurance entities or intermediaries thereof.

Interested parties are informed that M. A. Canal has contracted external service providers, with whom we have legally required contracts under which compliance with their obligations as Data Processors is guaranteed.

With the prior consent of the candidate, the data provided and derived from the selection process may be transferred to third-party companies identified by the interested party for the request of references that may be necessary for the selection of the candidate.

If we transfer your data to third parties for any other purpose, the Data Controller will inform and request the consent of the data subject beforehand.

USER RIGHTS: Any data subject has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected without affecting previous processing. Under certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep them for the exercise or defense of claims. For reasons related to their particular situation, data subjects may object to the processing of their data. The DATA CONTROLLER will cease processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

In accordance with current legislation, you have the following rights: right to request access to your personal data, right to request rectification or deletion, right to request restriction of processing, right to object to processing, and right to data portability. As well as not being subject to decisions based solely on automated processing of your data, when applicable.

Likewise, especially if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may file a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid. (www.aepd.es).

The data subject also has the right to withdraw consent at any time, without affecting the lawfulness of the processing carried out before its withdrawal. To exercise your rights, you must contact the DATA CONTROLLER, who has at your disposal the form for exercising the chosen right, and it is not obligatory to use it.

HOW DO WE PROTECT YOUR INFORMATION?:

M. A. Canal is committed to protecting your personal information. We use physical, organizational, and technological measures, controls, and procedures that are reasonably reliable and effective, aimed at preserving the integrity and security of your data and ensuring its privacy. In addition, all personnel with access to personal data have been trained and are aware of their obligations regarding the processing of personal data.

In the case of contracts we enter into with our suppliers, we include clauses requiring them to maintain the duty of confidentiality regarding personal data to which they have had access by virtue of the commission carried out, as well as to implement the necessary technical and organizational security measures to ensure the permanent confidentiality, integrity, availability, and resilience of the systems and services for processing personal data.

All these security measures are periodically reviewed to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed, and there is no security system that is impregnable, so in the event that any information undergoing processing and under our control is compromised as a result of a security breach, we take appropriate measures to investigate the incident, notify the Supervisory Authority, and, if necessary, those users who may have been affected so that they can take appropriate measures.

CONSENT FOR SENDING COMMERCIAL OR ADVERTISING ELECTRONIC COMMUNICATIONS: Likewise, and in accordance with the provisions of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, by completing the data collection form and checking the corresponding box “I accept receiving advertising communications from the RESPONSIBLE party”, you are granting express consent to receive, at your email address, telephone, fax, or other electronic means, information about the COMPANY.

USER RESPONSIBILITY: By providing us with your data, the user guarantees that they are over 14 years of age and that the data provided to the Data Controller are true, accurate, complete, and up-to-date. To this end, the user confirms that they are responsible for the truthfulness of the communicated data and that they will keep this information properly updated so that it reflects their real situation, taking responsibility for any false or inaccurate data provided, as well as for any direct or indirect damages that may result from it.

PRIVACY POLICY and social media presence

M. A. Canal informs that it has created a page on various Social Networks for the main purpose of advertising.

By freely, affirmatively, and voluntarily consenting to the processing of your data, you explicitly include those personal data published on your profile. The user can access the privacy policies of the respective Social Network at any time, as well as configure their profile to ensure privacy. M. A. Canal has access to and processes the user’s public information, especially the contact name. This data is only used within the Social Network itself. It is not incorporated into any file.

DATA OF THE DATA CONTROLLER

LEGAL NAME: Miquel Angel Canal Servent (hereinafter, the “RESPONSIBLE”).

TAX IDENTIFICATION NUMBER (CIF): 78085148x

ADDRESS: Av. Catalunya num 18 2on 1era, 25500 La Pobla de Segur, LLEIDA

PHONE: +34680239423

EMAIL for data protection communications: info@piritrek.com

PURPOSES FOR WHICH DATA IS USED ON SOCIAL NETWORKS: The information and personal data voluntarily provided by the user through M. A. Canal’s social networks are processed for the following purposes:

Manage user registration, account creation, and use of M. A. Canal’s social networks.

Address any requests made through M. A. Canal’s social networks.

Send information and advertising from M. A. Canal, by any means, electronic or otherwise.

Know the opinion and evaluation of the user and keep them informed of activities, news, special offers, and promotions of interest from M. A. Canal.

Send information, advertising, and commercial promotion of products, services, and activities within M. A. Canal’s sector, by any means, including electronic (email or equivalent means, such as SMS, phones, mobiles). This is only done with the prior and express consent of the interested party.

Know the opinion and evaluation of the user and keep them informed of activities, news, special offers, and promotions of their interest.

The information provided by the user through M. A. Canal’s social networks, including personal data, may be published, depending on the services used by the user, making it available to other third-party users of the social networks. From the Profile of each social network, the user can configure which information they want to make public in each case, view the permissions granted, delete them, or deactivate them, like any third-party application that is no longer wanted to be used.

On social networks, the user can share texts, photos, videos, and other types of information or content, which they do freely, voluntarily, and knowingly. If they do so, this content will be subject to both this policy and the Rules and Conditions of Access and Use of the respective social network. The user will be RESPONSIBLE for ensuring that all content they publish complies with current legislation, this policy, and its legal notice. The user may only publish personal data, photographs, and information or other content of which they are the owner or for which they have the authorization of third parties.

M. A. Canal will have the right to unilaterally delete from this official page, without prior communication or authorization from the user, any content published by the user when the user infringes or violates current legislation, the rules established in this policy, and/or those of the social networks.

LEGITIMATION: The legal basis that legitimizes the processing for the indicated purposes is the consent of the interested party, which is granted by establishing or admitting contact on the network under the terms and conditions of the terms of use and privacy policies of the platform in question.

DATA PROCESSED AND OBLIGATION OR NOT TO PROVIDE THEM:

The minimum data necessary to contact on social networks will be those determined by the owners of the networks, usually the name and username. Their provision is an essential requirement to contact the network, and the refusal of the interested party to provide them will result in the impossibility of becoming a follower or contact of the RESPONSIBLE’s profile on the social network in question.

The rest of the data that may be processed by the RESPONSIBLE will be determined by the interested party in configuring the privacy settings of their profile on the network in question, as well as those voluntarily communicated to the RESPONSIBLE individually or made fully or partially public on the network.

RECIPIENTS:

There is no provision for the communication of data to third parties, except if applicable, to our service provider related to communication and press.

In addition, the data you publish on different social networks will have multiple recipients (individuals or entities), depending on your privacy settings on them.

RIGHTS:

M. A. Canal informs the user of the possibility of exercising the following rights:

Right to request access to your personal data being processed and receive this information in writing by the requested means.

Right to request the rectification of inaccurate personal data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

Right to request the limitation of the processing of your data.

Right to object to the processing of your personal data when applicable.

Right to data portability when the processing is based on consent and is carried out by automated means. In these cases, the data will be provided in a structured, commonly used, and machine-readable format.

Right to withdraw consent given.

Right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

You can exercise your rights by requesting to the address indicated above or by email to info@piritrek.com (Ref. Data Protection), indicating the right you wish to exercise and attaching a copy of your ID or official document proving your identity. Likewise, you have the right to request the protection of the Spanish Data Protection Agency through the website www.aepd.es.

However, the exercise of the above rights will be defined by the functionality of the Social Network itself and the access capacity to the information of the User’s profiles by the Responsible, being able to exercise them, only, in relation to that information that is under the control of the Responsible.

HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

Minimum contact data will be kept until the follower or contact condition is unsubscribed either by the interested party or by M. A. Canal, or for a longer period established by the corresponding platform.

The rest of the data shared on the network will be kept as determined by the platform owner in question. For this purpose, interested parties are informed that M. A. Canal only processes their data through the own platforms of each social network and does not separately incorporate them into its own information systems.

DATA OF MINORS OR INCAPACITATED:

Access and registration through M. A. Canal’s social networks are prohibited for minors under 18 years of age. If the user is incapacitated, the intervention of the legal guardian or guardian of the user or their legal representative is required through a valid document proving the legal representation of the incapacitated user for access.

M. A. Canal will be expressly exempt from any responsibility that may arise from the use of social networks by minors or incapacitated persons. M. A. Canal’s social networks do not knowingly collect any personal information from minors; therefore, if the user is a minor, they should not register or use M. A. Canal’s social networks or provide any personal information.

RESPONSIBILITY AND DATA QUALITY:

M. A. Canal is only RESPONSIBLE and guarantees the confidentiality, security, and processing of the data in accordance with this policy, and with respect to the personal data collected from the registered user also through their network identifier, having no responsibility whatsoever regarding the processing and subsequent use of the personal data that may be carried out both by the owner of the social network and by third-party service providers of information society services unrelated to M. A. Canal who may access this data by reason of the provision of their services or the exercise of their activity, third parties who establish hyperlinks to the social network.

M. A. Canal warns that no user can use another person’s identity and/or communicate personal data of third parties without previously obtaining the proper authorization, so the user must always bear in mind that they can only provide personal data corresponding to their own identity and that are suitable, relevant, current, accurate, and true. In any case, the user must respect the privacy of third parties, whether they are users or not of M. A. Canal’s social network.

PUBLICATIONS: Once the user is connected to M. A. Canal’s page, they may post comments, links, images, or photographs, or any other type of multimedia content supported by the Social Network. The user, in all cases, must be the owner of such content, enjoy copyright and intellectual property rights, or have the consent of the affected third parties. It is expressly prohibited to publish on the page, whether texts, graphics, photographs, videos, etc., that violate or are likely to violate morality, ethics, good taste, or decorum, and/or that infringe, violate, or break intellectual or industrial property rights, image rights, or the Law. In these cases, M. A. Canal reserves the right to immediately remove the content, being able to request the permanent blocking of the user.

M. A. Canal will not be RESPONSIBLE for the content freely published by a user. The user must bear in mind that their publications will be known to other users, so they are the main RESPONSIBLE for their privacy. The images that may be published on the page will not be stored in any file by PiriTrek, but they will remain on the Social Network.

CONTESTS AND PROMOTIONS: M. A. Canal reserves the right to hold contests and promotions, in which the user connected to its page may participate. The terms of each of them, when using the Social Network platform, will be published therein, always complying with the LSSI-CE and any other applicable regulations. The Social Network does not sponsor, endorse, or administer any of our promotions in any way, nor is it associated with any of them.

ADVERTISEMENT: M. A. Canal will use the Social Network to advertise its products and services; however, if it decides to process contact data for direct commercial prospecting actions, it will always comply with the legal requirements of the GDPR/LOPDGDD and the LSSI-CE. Recommending PiriTrek’s page to other users so they can also enjoy promotions or be informed of its activities will not be considered advertising.

USE OF PIRITREK PROFILES ON MAIN SOCIAL NETWORKS

FACEBOOK

By clicking the “Follow” button, you will establish a connection with us and become a follower of this page. The connection will appear on your profile and your wall, and your friends may receive a notification about it. Although you may appear on the list of “people who like this page” or in ads about it, we will not be able to see your profile or your personal information, only the identifying data that Facebook allows and that you share according to the privacy settings you have selected on this social network. Nor will we have access to the “latest news” section with information about your activity. However, we will be able to see the information you have made available to “Everyone” on your profile, post content on your wall, or communicate with you through messages or periodic updates of our status, which will also be posted on your wall.

By becoming a fan of this page, by clicking the “Follow” button on this page, you consent to:

• The processing of your personal data within Facebook’s environment in accordance with its privacy policies.

• Miquel Angel Canal’s access to the data contained in your environment and that you publish on our page.

• Our information being displayed on your page or wall.

• You may receive personal and individual messages through Facebook, for example, answering a question or requesting information from us, as well as receiving updates on the status of this page, which will be posted on your wall.

Therefore, if you do not accept these conditions, please do not request to become a fan of this page.

If you want to stop being a follower of this page, you just have to click on the hyperlink that appears at the bottom left “Stop following this page.” To manage your privacy, as well as block or unblock a page, follow the steps indicated at http://ca-ca.facebook.com/help/privacy/pages.

Remember that you can always control your connections, immediately delete content that you no longer like, and restrict who you share your connections with in your privacy settings at https://www.facebook.com/privacy/explanation.

In the context of this treatment, you must bear in mind that M. A. Canal can only consult or unsubscribe your data as a fan. Any rectification must be made through your user settings.

INSTAGRAM

To the extent that you use this social network (for example, by commenting on photographs), this entity may request personal data, data for which the Owner of this website will no longer be RESPONSIBLE, and which will be subject to other terms and conditions (we advise you to visit the website of the aforementioned link). For our part, unless we notify otherwise, we will not create specific databases of users who follow us through this social network and will always treat their data within it, for example, limiting ourselves to responding to comments they make.

The user is responsible for all content posted on M. A. Canal’s social media profiles. If the publication of the content does not comply with current legality, its publication is prohibited, and the user is solely responsible for such publication.

Users can contact PiriTrek through the internal messaging service of the social network or through the following contact details:

ADDRESS: Av. Catalunya No. 18 2nd 1st, 25500 La Pobla de Segur, LLEIDA

PHONE: +34680239423

EMAIL for communications regarding Data Protection: info@piritrek.com