Next, the Privacy Policy is exposed according to the new General Data Protection Regulation, with regulatory framework established by the European Regulation 2016/679, of 27 of April, already in force since May 2016 and with application date 25 May 2018.
Updated on: 30/05/2018
Approved on: 30/05/2018
1. Introduction
In Pyrenean Ravines (www.barrancospirenaicos.es) we respect the rights and freedoms of people, among which is the fundamental right to the protection of personal data. We follow the following behavioral guidelines to:
- Protect the confidentiality of information of a personal nature that has been entrusted to us, be of clients, employees or suppliers.
- To facilitate to those interested relevant information about how we use and store your personal data.
- Inform about how to access and correct the data we handle.
- Keep all personal data with the security measures suitable, acting quickly and responsibly if at any time security is compromised.
The Privacy Policy was born with the aim of strengthening the digital trust of our interested parties, employees, clients and suppliers. Establishing the way in which all agents related to Barrancos Pirenaicos, they must behave in order to protect the privacy of all those people who entrust us with their information.
2. Goal
The purpose of this Policy is to establish and regulate the principles that govern the Barrancos Pirenaicos, in protecting the privacy of all those people who entrust us with their information.
3. Information processed by Barrancos Pirenaicos
Barrancos Pirenaicos collects and uses many types of information from a wide range of sources for different purposes.. Among them are included, but not limited, to the following:
3.1 PURPOSE OF INFORMATION COLLECTION:
Promote and provide the contracted services, always safeguarding the privacy of the interested parties.
Select and manage our employees and collaborators.
Possibly, collect information for other purposes, that will be communicated in a simple and transparent way, always giving the customer the possibility to oppose to new treatments, always in accordance with the applicable legislation.
3.2 HOW WE COLLECT INFORMATION:
We identify and collect personal information of the interested parties among others, when they sign up or use our products, services and applications, when they access our websites, they send queries or communicate incidents and when they participate in market research studies, as well as from sources accessible to the public.
3.3 TYPES OF INFORMATION PROCESSED:
We treat the necessary information to be able to provide and improve our products and services, adjust the offer of products and services to your needs and identify potential services of interest to our interested parties.
4.Transparency and choice in the use of personal information
- We are committed to informing interested parties in a clear and simple way about the data we collect and how we use it.
- we inform, transparently, of the use of data for purposes other than those communicated at the time of collection, and we get, in your case, your informed consent in accordance with current legislation.
- We obtain the consent of the interested parties, required in each case by current legislation, before processing your personal data to send you commercial information that is not related to the services you have contracted.
5.Right of access, rectification, opposition and cancellation of personal information
We inform the interested parties about how they can access their data or correct it. Likewise, we inform about how they can request its cancellation or oppose its treatment. The way in which the interested parties can exercise their access rights, rectification, cancellation and opposition, is indicated on the main website and there is a Data Protection Officer to respond to this type of request.
6.Security and integrity of personal data
6.1 WE MANAGE AND STORE OUR CUSTOMER INFORMATION RESPONSIBLY, KEEPING IT SAFE.
The levels of security required of our employees to preserve the protection and integrity of the data of our clients and interested parties. This Policy pursues the adoption of actions aimed at preserving the four basic components of security applied to information:
- Confidentiality: We allow access to the data and our systems only to those duly authorized persons following the "principle of necessity of use".
- Integrity: We preserve the accuracy of the information and systems against any type of alteration, loss or destruction, either accidentally or fraudulently.
- Availability: We establish the necessary mechanisms so that the information and systems can be used in the manner and time required.
- Auditability: We make it easy for any action or transaction to be unequivocally related, ensuring compliance with key controls established in the corresponding regulations..
6.2 WE COMMIT TO ACT WITH SPEED AND RESPONSIBILITY, IF THE SECURITY OF THE INFORMATION OF OUR CUSTOMERS AND INTERESTED PARTIES IS AT RISK.
We will use appropriate resources to investigate security breaches that endanger the privacy of our customers and stakeholders., ensuring that appropriate corrective measures are implemented. We will keep a record of security incidents available to local supervisory authorities.
We will inform our clients of those relevant cases in which the loss, Improper use or disclosure of the information has been caused by a breach in the security of the company's systems and networks or derived from an internal technical decision or action. In these cases, We will inform our clients about the corrective actions carried out and we will give the appropriate recommendations to help protect their interests..