Data Protection Policy
This is the data protection policy of PUBLICIDAD PERMANYER SL. It refers to the data it processes in the exercise of its editorial activities in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and the Council, of 27 April 2016).
Who is the data controller?
The data controller is PUBLICIDAD PERMANYER SL (hereinafter PUBLICIDAD PERMANYER), with VAT No B08327512, domiciled at calle Mallorca, 310, 08037 Barcelona, telephone 93 207 5920, e-mail permanyer@permanyer.com, www.permanyer.com. Entity registered in the Companies Registry Office of Barcelona, volume 8.730, folio 219, page 72.874.
Who is the Data Protection Officer?
The Data Protection Officer (DPO) is the person who supervises the compliance of the data protection policy of PUBLICIDAD PERMANYER, guaranteeing that the personal data are adequately processed and that the persons’ rights are protected. One of his/her functions is to answer any doubt, suggestion, claim, or complaint of the data subjects. You may contact the Data Protection Officer, by sending a letter to Calle Mallorca 310, 08037 Barcelona, telephone 93 207 59 20, or by email at dpd@permanyer.com.
With what purpose do we process the data?
At PUBLICIDAD PERMANYER, we process personal data for the following purposes:
Contact: To answer the consultations of the persons who contact us by means of the contact forms of our webpage. We use them only for this purpose.
Telephone support: To answer the calls of the persons who contact us by phone. To offer more quality in the service, the conversations may be registered, with the person being previously informed.
Selection of personnel: Receipt of curricula vitae addressed to us by people interested in working with us and management of the personal data generated due to participation in selection processes, with the purpose of analyzing the adequacy of the applicants’ profiles according to the vacancies or newly created positions. We store the data of persons who are not hired for a maximum period of one year, in case a new vacancy arises. However, we delete the data immediately if the applicant requests it.
Service to customers: To register new customers and the additional data that may be generated due to the commercial relationship with the customers. Bank details (e.g., account or credit card numbers) may be required and communicated to banking entities for payment management (they can only use them for this purpose). The commercial relationship also involves other processes like accounting, invoicing, and communication with the tax administration.
Information about our products and services: While in a contractual relationship with customers, PUBLICIDAD PERMANYER SL uses their contact data to transmit information related to this relationship, which may occasionally include references to our products or services.
Subscribers: We register subscriber data to manage the subscriptions to our publications. In the context of the contractual relationship, data may be disclosed to the Tax Administration and to banking entities for fee collection.
Other information about products and services: With explicit customer consent, after the contractual relationship ends, contact data is stored to send advertising regarding our services or products, either general or tailored based on the customer’s characteristics. This information is also sent to individuals who, despite not being customers, have requested or accepted it through our forms.
Management of supplier data: We register and process data of suppliers providing services or goods to us. This data pertains to both individuals and legal entities. We collect only the necessary data to maintain the commercial relationship and use it solely for this purpose.
Video surveillance: When accessing our facilities, individuals are informed, if applicable, of the existence of video surveillance cameras through approved signage. The cameras record images only from areas deemed necessary to ensure security, and the images are used solely for this purpose.
Users of our web: The navigation system and software supporting our website collect data typically generated through Internet protocols. This includes data like IP addresses and domain names. This information is not linked to specific individuals and is used exclusively for statistical analysis of website usage. Our website does not use cookies for identifying specific individuals. Cookies are only used to collect technical information to facilitate accessibility and efficient website use.
Other channels for obtaining data: We also collect data through face-to-face interactions and other channels like email or our social media profiles. In all cases, the data is only used for the explicit purposes for which it was collected and processed.
What is the legal ground for the data processing?
The different data processing activities we carry out are based on different legal grounds:
In case of a precontractual relationship: This applies to data from potential clients or suppliers with whom we have prior relationships before formalizing a contractual relationship, such as preparing estimates or studies. It also applies to data from individuals who send us their curricula vitae or participate in selection processes.
In case of a contractual relationship: This applies to relationships with subscribers, clients, and suppliers and the associated actions and uses involved.
In fulfillment of legal obligations: The communication of data to the tax administration is required by laws regulating commercial relationships. It may also be necessary to disclose data to judicial bodies or law enforcement authorities in compliance with legal obligations.
On the basis of consent: When we send information about our products or services, we process the contact data of recipients with their authorization or explicit consent. Navigation data obtained via cookies is collected with the consent of website visitors, which can be revoked at any time by removing these cookies.
For legitimate interest: The images captured by video surveillance cameras are processed for our legitimate interest in protecting our assets and facilities. Our legitimate interest also justifies the processing of data from contact forms.
To whom is the data disclosed?
As a general rule, we only disclose data to public administrations or authorities to fulfill legal obligations. When issuing invoices to clients, data may be disclosed to banking entities. In certain cases, data may be disclosed to law enforcement authorities or judicial bodies when necessary. If consent is obtained, data may also be disclosed to other companies within our group for the purposes previously indicated. No data is transferred outside the European Union (international transfer).
Additionally, for certain tasks, we contract external companies or individuals with relevant expertise. These external entities may need to access personal data under our responsibility. This is not considered data transfer, as these external entities act as data processors. We only contract services with companies that ensure compliance with data protection regulations. When such services are contracted, confidentiality obligations are formalized, and their actions are monitored. Examples include data hosting services, IT support services, or legal and tax advisory services.
For how long do we store the data?
We comply with the legal obligation to limit data storage to the minimum necessary period. Therefore, data is retained only for the time necessary and justified for the purpose for which it was obtained. In some cases, such as data in accounting and invoicing documents, tax legislation requires us to store the data until the related liabilities expire. In the case of data processed based on the consent of the individual, the data is retained until the individual withdraws their consent. Images obtained through video surveillance are stored for a maximum period of one month. However, in the case of incidents requiring extended storage, images will be retained for the necessary time to facilitate actions by law enforcement authorities or judicial bodies.
What are the rights of the data subjects?
As provided for in the General Data Protection Regulation, data subjects have the following rights:
To know if the data is processed: Any person has the right to know if we process their data, regardless of whether a prior relationship existed.
To be informed at the time of collection: When personal data is obtained directly from the individual, they must be clearly informed of the purposes for which it will be processed, who the data controller is, and other related aspects.
To access: A broad right that includes knowing exactly which personal data is being processed, the purpose of the processing, the recipients of the data (if applicable), and the right to obtain a copy or know the estimated storage period.
To request rectification: The right to have inaccurate data corrected.
To request deletion: Under certain circumstances, there is a right to request the deletion of data when it is no longer necessary for the purposes for which it was collected.
To request limitation to processing: In certain circumstances, the right to request limitation of data processing is recognized. In this case, the data will no longer be processed and will only be stored for purposes related to legal claims.
To portability: In cases provided for by law, individuals have the right to obtain their personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller if desired.
To oppose the processing: An individual can invoke reasons related to their specific situation to stop the processing of their data if it could cause harm, except in cases of legitimate interests or legal claims.
Not to receive commercial information: Requests to stop sending commercial information to individuals who have previously authorized it will be promptly fulfilled.
How can the data subjects exercise or defend their rights?
The above-mentioned rights can be exercised by sending a written request to PUBLICIDAD PERMANYER SL, Calle Mallorca 310, 08037 Barcelona, telephone 93 207 5920, or by sending an email to permanyer@permanyer.com, with the subject “Personal data protection.”
If a satisfactory response is not received when exercising these rights, individuals may submit a complaint to the Agencia Española de Protección de Datos (Spanish Data Protection Agency) using the forms or other channels available on their website at www.agpd.es.
In all cases, for submitting complaints, requesting clarifications, or making suggestions, individuals can contact the Data Protection Officer by emailing dpd@permanyer.com.
