Privacy policy
INTRODUCTION
Your privacy matters to us. This document explains what user data we collect, how we use them and for what purposes, among other information. People over the age of 14 may register as users without prior consent from their parents, guardians or legal representatives. For children under 14 or people identified as lacking legal capacity, we always require consent from a parent, guardian or legal representative. We will never request more information than we actually need for the services requested; we will never share it with third parties except where required by law or with your prior authorisation; and we will never use your data for a purpose not previously stated. Users should read this privacy policy carefully and regularly, and whenever they enter personal data. This document may change, as the provider may amend information appearing on the website to comply with legislation or update the policy. The provider is not required to give advance notice or notify users individually; publication on the provider’s website is sufficient.
DATA CONTROLLER
Identity: WindowSight S.L. (also referred to as the provider)
Tax identification number (NIF): B65907206
Postal address: Carretera de Montcada 670, 08227, Terrassa, Barcelona, Spain
Email: info@ariskcat.cat
WindowSight S.L., as the party responsible for the website, informs you that it has implemented the necessary technical and organisational security measures to protect the confidentiality, integrity and availability of the data entered, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR), Spanish Organic Law 3/2018 of 5 December (LOPDGDD), other applicable personal data protection legislation, and Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE).
HOW WE OBTAIN DATA AND WHAT WE COLLECT: The data we collect and how we obtain them are as follows:
- Through the contact form: name, email address and telephone number.
- Through the registration form: name, email address and telephone number.
- Through the newsletter subscription form: name and email address.
- Through the webinar registration form: name and email address.
- Through forum registration or comments: name and email address.
- Through the e-commerce data collection form: name, address, email address, age, telephone number, bank details or credit/debit card information.
We do not process special categories of protected data.
PURPOSES OF PROCESSING
Your personal data will only be used for the following purposes, with your consent for each purpose given in the corresponding section of the website:
- Contact form: to answer enquiries or provide information requested by the User;
- Registration form: to create a user account and enable reservations;
- Newsletter subscription form: to send commercial advertising by email, SMS, social communities or other electronic or physical means, where the User has expressly consented;
- Forum registration or comments: once registered, users can comment in the forum, ask questions and respond to others;
- If you purchase a service or product through https://www.ariskcat.cat, we will ask you to provide information about yourself, including your name, contact details and credit or debit card information.
- Other purposes:
- To carry out commercial, administrative, tax and accounting procedures required by applicable legislation;
- To learn your views and improve the services provided through the website;
- To analyse profiles and website usability through cookies, as described in the cookie policy;
- Social media: the relevant section explains how social media are used.
Use of photographs: For photographs posted on the website, including photographs of children, prior consent has been obtained from parents, guardians or legal representatives by signing forms prepared for this purpose by the centres the children attend. Parents, guardians or representatives exercising the children’s rights may formally request in writing that a child’s image no longer be used; in that case, the image will be pixelated.
You may withdraw consent at any time by writing to the email address above with the subject ‘Unsubscribe’.
In accordance with the LSSICE, WindowSight S.L. does not send spam or commercial emails that have not previously been requested or authorised by the User. Users can therefore withdraw their express consent to receive our communications in every communication sent by the provider.
We will not process your personal data for purposes other than those described unless required by law or a court order.
You will not be subject to decisions based on automated processing that have effects on your data.
LEGAL BASIS FOR PROCESSING
The legal basis for processing is the consent you give when providing your data in the relevant form and ticking the checkbox for the stated purposes.
Prospective or commercial offers of products and services are based on the consent requested from you. Withdrawal of that consent will not affect performance of the subscription contract.
Failure to provide the requested personal data or accept this privacy policy makes it impossible to fulfil the purposes described above.
Where a contractual relationship already exists between the parties, the legal basis for carrying out administrative, tax and accounting obligations required by applicable legislation is that pre-existing commercial relationship.
DATA RETENTION PERIOD
Your data will be kept for the duration of our commercial relationship or until you exercise your right to erasure, objection or withdrawal of consent. Even after you properly exercise your rights, we must retain your data with processing restricted for the periods required by applicable law.
RECIPIENTS OF DISCLOSURES OR TRANSFERS
WindowSight S.L. does not disclose or communicate data within or outside the EU. The provider will only supply information to law enforcement authorities under a court order or legal obligation, without prejudice to its ability to block or cancel your account if there are indications that you have committed an offence. Only information held by the provider at that time will be supplied.
Information you provide through this website will be hosted on WindowSight S.L.’s servers, contracted from the company providing the website hosting service. The processing of the organisation’s data is governed by a data processing agreement between the provider and that company.
DATA SUBJECT RIGHTS
As users and data subjects, you may ask WindowSight S.L. to exercise the following rights by writing to the postal address above or emailing info@ariskcat.cat with the subject ‘DATA PROTECTION: DATA SUBJECT RIGHTS’, enclosing a copy of your identity document or an equivalent legally recognised means of identification, as provided by law.
Rights:
- Right of access: allows data subjects to learn about and obtain information on their personal data being processed.
Right to rectification or erasure: allows errors to be corrected and inaccurate or incomplete data to be amended. - Right to erasure: allows inappropriate or excessive data to be deleted.
- Right to object: allows data subjects to prevent or stop the processing of their personal data.
- Restriction of processing: involves marking stored personal data to limit their future processing, for the establishment or defence of legal claims.
- Data portability: involves providing the processed data to the data subject so they can transfer them to another controller without hindrance.
- Right not to be subject to automated individual decisions, including profiling: the right not to be subject to a decision based on automated processing that produces effects or significantly affects you.
Users may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the supervisory authority if you believe your data protection rights have been infringed (www.aepd.es).
SECURITY MEASURES
The data you provide will be treated confidentially. The provider has adopted the necessary technical and organisational measures and levels of protection to ensure secure processing and prevent alteration, loss, theft, unauthorised processing or access, taking into account the state of technology and the nature of the stored data. It also ensures that processing and recording in files, programmes, systems, equipment, premises and centres meet the integrity and security requirements established by applicable legislation.
LANGUAGE
The applicable language of this privacy policy is Catalan. If any version provided in another language contradicts it, the Catalan version will prevail.
PROFILE ANALYSIS
By accessing this website, the user expressly consents to the use of this general information for profiling, segmentation and data categorisation for the purposes described above.
SOCIAL MEDIA
WindowSight S.L. may have a presence on social media. Processing of data belonging to people who follow WindowSight S.L.’s official social media pages, or link or connect to them through social media, is governed by this section and by the terms of use, privacy policies and access rules of the relevant social network previously accepted by the user.
WindowSight S.L. will process your data to manage your presence on the social network correctly, provide information about the provider’s activities, products or services, and fulfil other purposes permitted by the social network’s rules.
Publishing the following content is prohibited:
- Content that may be unlawful under national, European Union or international legislation, involve potentially unlawful activities, or contravene the principles of good faith.
- Content that infringes fundamental rights, breaches online etiquette, causes annoyance or may generate negative opinions among our users or third parties, and any content WindowSight S.L. considers inappropriate.
- In general, content that contravenes the principles of legality, honesty, responsibility,
protection of human dignity, protection of children, public order, privacy, consumer protection, or intellectual and industrial property rights.
WindowSight S.L. also reserves the right to remove content it considers inappropriate from its website or corporate social media pages without prior notice.
If you submit personal information through a social network, WindowSight S.L. accepts no liability for the security measures applicable to that platform. Users wishing to learn about them should consult the relevant social network’s specific terms.
SUBMITTING A CV
If you send your CV through our website, the data supplied will be processed to include you in any recruitment processes, analysing your profile to select the most suitable candidate for the controller’s vacancy. This is the only official procedure for accepting CVs; CVs sent by other means will not be accepted. If your information changes, please notify us in writing as soon as possible so we can keep it up to date.
Data will be retained for a maximum of one year and then deleted, with full respect for confidentiality during processing and subsequent destruction. If you wish to continue participating in the controller’s recruitment processes after that period, please send us your CV again.
Data may be processed by or disclosed to companies belonging to the controller’s group during the CV retention period, for the same purposes and for up to one year.
CONFIDENTIALITY AND PROFESSIONAL SECRECY
Data collected in private communications between WindowSight S.L. and customers or users will be treated in strict confidence. WindowSight S.L. undertakes to keep them secret, even after the commercial relationship ends, under the same conditions and confidentiality obligations. Personal information provided by email or through website forms will be recorded in a personal data file, duly registered with the General Data Protection Register, for which the provider is responsible. WindowSight S.L. complies with all applicable data protection legislation.
QUESTIONS
If you have questions about this Privacy Policy, please email info@ariskcat.cat.
Thank you for placing your trust in us.