Frequently asked questions about privacy

In accordance with EU Regulation 2016/670, 27th April 2016 (GDPR) and the Spanish Organic Law 3/2018, of 5th December 2018, relating to the Protection of Personal Data and guaranteeing digital rights (LOPDGDD), we offer you the following information about how your personal data will be handled:

Who is the Data Controller responsible for processing your data?

Identity: AGUSTÍN VILAR S.A.

NIF: A08553687

Address: c/ De la Terra, 26. Pol. Ind. “Els Bellots” 08227 Terrassa (Barcelona). Spain.

Tel.: 937315059

Email: info@agustinvilar.com

For what purposes do we process your data?

• We process the information that you give us in order to supply you with our processed paper and cardboard for extrusion.
• If you get in touch with us through the contact form on our website, we process the information supplied in order to offer you an appointment.
• If you grant your consent, we will also process your personal data to send you information about our activities, products and services.
• Upon entering our facilities, your image may be captured on CCTV cameras for security reasons.
• If you send us a CV, we will process your data in order to manage our applicant database for staff recruitment and selection.

How long will we store your data?

• We will store your data for as long as you use our services or would like to receive information from us and, after this period ends, we will continue to

     store it for the duration established by legal requirements. In the case of financial and business data, this is a period of 6 years in accordance with Art

     30 of the Commercial Code, and, for tax purposes, 4 years in accordance with articles 66 and 70 of the Spanish General Taxation Act.

• CCTV footage will be stored for one month.
• CV data will be stored for one year.

What is the legal basis for the processing of my data?

The legal basis consists in fulfilling the service contract and the various instances in which you give us consent.  

Regarding data collected from people under the age of 16, a guardian’s consent is a fundamental requirement for their data to be processed. If their guardian’s consent is not given, the child’s legal representative must advise us as soon as they become aware of this. 

Regarding the CCTV footage, the legal basis lies in the need to safeguard people and property.

Who will receive data?

Your data will not be supplied to third parties; the exceptions to this are if it is required by law or if it is necessary to fulfil the service.

What are my rights when I provide you with my data?

• Everyone has the right to obtain confirmation as to whether or not we are processing their personal data.
• Data subjects have the right to access their personal data, and to request the correction of any inaccurate data or, where aplicable, request their erasure

     when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

• In certain circumstances data subjects may request the restriction of processing of their data; in this case we will only retain them to file or defend

     claims.

• Also, in certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case

     we will stop processing the data, except for compelling legitimate reasons or for the filing or defence of possible claims.

• Data subjects are also entitled to the portability of their data.
• Any data subject shall have the right not to be the subject of a decision based solely on automated processing, including profiling, that produces legal

     effects thereon or significantly affects the data subject in a similar way.

• Finally, data subjects have the right to file a claim with the competent Control Authority.

How should I exercise my rights?

Please send your written request together with a photocopied document to identify you, either to our postal or email address.

How have we obtained your data?

The personal data we collect comes from the data subject. You warrant that the data you provide us with is true and you take responsibility for telling us about any changes which might take place. Data fields marked with an asterisk are mandatory for the service which you require. 

What data do we process?

The categories of data which we may process in the course of providing you our services are as follows:

• Identifying data
• Postal or email addresses

In the case of CCTV cameras:

• Images

In the case of CVs:

• Personal data
• Academic and professional data

The data is limited, since we only treat the data necessary for the provision of our services and the management of our activity.

Do we use cookies? 

We use cookies when you are on our website, subject to the user’s consent. The user can customise their browser to be notified when cookies are used and/or to avoid them. Please refer to our cookie policy. 

What security measures do we take?

We take security measures established by article 32 of the GDPR and, as such, we use the necessary security measures to guarantee you a level of security suited to the risk associated with the data we process, using mechanisms which allow us to guarantee confidentiality, integrity, availability and resilience in our data processing systems and services.

Some of these measures are:

• Information regarding our data use.
• Periodically backing up data.
• Restricted access to data.
• Periodic verification and evaluation processes.