Website privacy policy
1. Data processing controller
The body responsible for processing your personal data is Girbau S.A., with Tax ID No. A08276438 and registered office in Carretera de Manlleu, km 1, 08500, Vic, Barcelona.
If you have any questions or doubts relating to the processing of your personal data, do not hesitate to contact us via email: dataprotection@girbau.com.
2. Data processing
2.1 User registration (customer, distributor, consultant, expert, interested user)
Purpose:
Girbau S.A. will process personal data exclusively in order to manage and administer the registration of users on our website. This includes the registration process, account management and, when applicable, the deregistration of the user in the following scenarios:
- Customer of Girbau: If you have purchased products from Girbau, you can register as a customer. This will allow you to access the machinery catalogues and all documentation relating to the products purchased, such as brochures, instruction manuals and parts lists.
- Distributor of Girbau machinery: If you are a distributor, you can register to access all the information relating to the products you distribute.
- Expert consultant in Girbau machinery: Consultants specialised in Girbau machinery can register to obtain access to information on products about which they provide advice.
- Interested user: If you need more information about Girbau products, you can also register as an interested user.
Data communications
The data relating to this processing will not be shared with any third party.
Basis of legitimacy
Girbau S.A. will process the registration data based on the consent given by the user at the time of registration.
Retention period
The data processed for managing the registry shall be retained while keeping the user relationship active and to comply with any applicable legal deadline.
2.2. Commercial communications by electronic means
Purpose
Girbau S.A. will process the personal data solely for the purpose of sending commercial communications relating to our products, services and offers, as well as corporate information of the company, invitations to trade fairs, events and other relevant activities. This includes updates, news and promotions we think may be of interest to the user.
Data communications
The data relating to this processing will not be shared with any third party.
Basis of legitimacy
Girbau S.A. will process the data based on the consent given by the user when they subscribe to receive said commercial communications.
Retention period
The data processed for sending commercial communications will be retained while the user maintains their active consent and until they decide to unsubscribe from these communications, always complying with the applicable legal deadlines, or until we consider that they are no interested in them.
2.3 Contact
Purpose
Girbau S.A. will process the data solely for the purpose of managing and responding to queries from users interested in its products or services, as well as to establish professional relationships or explore possible collaborations. In cases where explicit consent has not been given, Girbau S.A. may process the data based on a legitimate interest in responding to the contact requests made by the user.
Data communications
The data relating to this processing will not be shared with any third party.
Basis of legitimacy
Girbau S.A. will process the data based on the consent given by the user on contacting us for those purposes.
Girbau S.A. will also process the data based on the legitimate interest of responding to related information requests. This legitimate interest is underpinned in a weighted analysis, in which the benefits of the processing have been assessed, both for our organisation and the data processing controller, and for third parties. You may, at any time, request more information about this weighting by contacting our Data Protection Officer (DPO) at the address indicated in the corresponding section of this privacy policy. Similarly, we would like to remind you that you have the right to oppose the processing based on the legitimate interest.
Retention period
The data compiled to address the contact requests will be stored for the time required to properly manage the request and shall be kept only during the period needed to comply with any applicable legal requirement.
2.4 Download of commercial information
Purpose
Girbau S.A. will process the data to allow the download of commercial information, such as brochures and other related documents.
Data communications
The data relating to this processing will not be shared with any third party.
Basis of legitimacy
Girbau S.A. will process the data based on the consent given by the user after requesting to receive said commercial information.
Retention period
The data compiled to address the commercial information requests will be stored for the time required to properly manage the request and shall be kept only during the period needed to comply with any applicable legal requirement.
2.5 After-sales and guarantees support service
Purpose
Girbau S.A. shall process personal data solely to manage the support service for after-sales support service and compliance with guarantees of the products and services.
Data Communications
Personal data provided shall not be shared with third parties, except in those cases in which the intervention of suppliers or external technical experts is required, complying in these cases with the current data protection regulations.
Basis of legitimacy
The processing of the data is based on the execution of the contractual relationship or service and in compliance with the legal obligations concerning consumer guarantees and rights.
Retention period
The data shall be retained for the time required to provide the after-sales support service and manage the applicable guarantees. Once these services are completed, the data shall be retained solely for the period necessary to comply with any applicable legal requirement relating to guarantees and after-sales.
2.6 Surveys
Purpose
Girbau S.A. shall process the data solely to contact the persons who have consented to take part in surveys launched by the company. The aim of these surveys is to record opinions and comments that enable us to improve our services and optimise the customer experience.
Data communications
The data relating to this processing will not be shared with any third party.
Basis of legitimacy
Girbau S.A. shall base the processing of the data on the consent given by the user to take part in the survey.
Retention period
The data processed for the management of the survey shall be retained for the time required to carry out the analysis of the results and, once analysed, the data shall be retained only for the period required to comply with any applicable legal requirement.
2.7 Job Applications and Opportunities
Purpose
Girbau S.A. shall process personal data for the purposes of managing and evaluating your candidature for job opportunities in our company, as well as to carry out staff selection processes. We may also contact you with any updates in the process or for future employment opportunities that may be of interest to you so as to authorise them.
Data communications
The personal data provided will not be sold, rented, made available to or communicated to any third party, except in the case of staff recruitment or consulting firms that are taking part in the selection process.
Basis of legitimacy
This processing is based on the consent provided by the candidate on sending their job application, as well as on the pre-contractual obligations entered into.
Retention period
The processed data for the management of candidates and selection processes shall be retained for the time required to complete the selection process. If you are not selected, your data may be kept for an additional period of 24 months for future opportunities, provided that you give us your consent for this.
3. Data communications
Without prejudice to that indicated in each one of the previous processings, personal data may be accessed by certain suppliers who provide services to our company, such as the sending of communications, storage of data or website management, but in no case will the data be processed for our own purposes.
4. International transfers
As a rule, we always try to process personal data in Europe or the European Economic Area, ensuring that compliance with the GDPR, on our part and on the part of our service providers, who process the data in our name and under our instructions.
However, we provide our services globally, therefore it is possible that we must also process data from other countries, who may or may not offer the same guarantees as the GDPR. In the event that it becomes necessary to make international transfers from the EU to countries outside of the EU that do not comply with these guarantees, we commit ourselves to always carry them out under the assurance that they are protected with the appropriate safeguards that may be included in (i) Standard clauses approved by the EU, (ii) Third-party certifications, (iii) Binding corporate rules or (iv) any other valid compliance mechanism with the regulations or approved by the competent authorities.
5. Rights of data subjects
Whenever you provide us with your personal data, you have a set of rights that you can exercise in relation to their processing. Your rights and how you can exercise them are detailed below:
- Access: You have the right to access your personal data and to request the correction of any information you consider inaccurate.
- Rectification: You may request modification of your personal data whenever they are inaccurate or incomplete, to ensure that they are always up to date.
- Deletion: You may request the deletion of your data whenever they are no longer required for the purposes for which they were collected.
- Limitation: In certain circumstances, you have the right to request the limitation of the processing of your data. In that case, we will keep them only for the current period or for defending against legal claims.
- Opposition: You may oppose the processing of your data for reasons relating to your particular situation. If you decide to exercise this right, Girbau S.A. will stop processing your data, unless there are legitimate reasons that justify their processing or which become necessary for defending against legal claims.
- Portability: You have the right to request the portability of your data in accordance with current regulations.
If you wish to exercise any of these rights, you may do so by contacting us by email at dataprotection@girbau.com or by sending a letter to the following address: Carretera de Manlleu, km 1 08500 Vic, Barcelona. Please ensure you state “Data Protection” on the envelope and include your full name and the email address associated with your account.
If you believe your rights have not been respected, you have the option to file a complaint with the Spanish Data Protection Agency or with other competent public bodies regarding personal data protection.