PRIVACY POLICY

The CENTRE D’INICIATIVES PER A LA REINSERCIÓ (CIRE), as the data controller, guarantees an adequate and coherent level of protection of natural persons with respect to their personal data, which is processed for the development of its powers, in accordance with the requirements of the General Data Protection Regulation (2016/679) and Organic Law 3/2018.   of 5 December, on data protection and guarantee of digital rights.

CIRE carries out the processing of personal data with full responsibility and loyalty, and in accordance with the legal bases that allow the lawfulness of the processing, in compliance with the General Data Protection Regulation and Organic Law 3/2018, of 5 December, on data protection and guarantee of digital rights.

In order to comply with data protection legislation, CIRE has prepared and published its Records of Processing Activities and has adopted the technical and organisational security measures, appropriate to the risks and objectively identified for the rights and freedoms of the data subjects, to which the data processed and the processing carried out by

CIRE could give rise. it applies the principle of transparency in the processing of personal data, providing data subjects with the information on processing required by the GDPR and by the LOPDGDD, in a concise, easily accessible, complete manner and with easy-to-understand language; at the same time, it facilitates the exercise of rights through forms available to interested parties.

On the other hand, CIRE has appointed a Data Protection Officer, in accordance with the provisions of Article 37.1.a) of the General Data Protection Regulation (2016/679) and Articles 34 and 36 of Organic Law 3/2018 on the protection of personal data and guarantee of digital rights. The Data Protection Officer’s contact email address is dpdcire@cirecat.org

Below, extended information is disseminated regarding each processing activity under the scope of responsibility of CIRE, inventoried in the Records of Processing Activities  that completes the basic information provided in each data collection procedure.

1. Data controller

2. Legal basis of the processing

The processing of the personal data of the interested parties, derived from the competences and functions of CIRE is based, in general, on the following legal bases, which are detailed for each processing activity in the Register of Processing Activities.

General Data Protection Regulation 2016/679

  • Article 6.1. a) The data subject has consented to the processing of his/her personal data for one or more specific purposes.
  • Article 6.1.b) The processing is necessary for the performance of a contract to which the data subject is a party or for the application of pre-contractual measures at the request of the data subject.

3. Purposes of data processing and storage

On the madeincire.cat website, we will process your data for the following purposes:

  • To respond to your requests for information through our contact e-mail and legitimised by the consent you give us when you contact us Article 6.1.a) GDPR 2016/679.
  • Carry out the purchase and shipping procedure of our products, legitimized by the existing contractual relationship. Article 6.1.b) GDPR 2016/679.

Once the purposes for which your data is processed have been fulfilled, they will be destroyed and only those necessary to carry out claims or comply with applicable regulations will be kept.

In the case of the data necessary to carry out commercial communications, they will be kept until the deadlines determined by law or until the moment in which the interested party opposes the processing.

4. Recipients of your data

Your data will not be communicated to third parties under any circumstances, except when there is a legal obligation.

5. International Data Transfers

There are no plans for international data transfers.

6. Automated decisions, including profiling

CIRE does not perform automated decision-making or profiling.

7. Data protection rights

As a madeincire.cat user, you will have the right to:

  • Access, rectify or request the erasure of your data, at the time you consider that they are not necessary for the purpose for which they were collected.
  • Request portability or limit processing, in which case we will only keep those strictly necessary to carry out the exercise of claims.
  • Withdraw your consent, at any time.

To exercise these rights, the interested person may contact CIRE, presenting the corresponding form available to the data subjects.

Likewise, if you are not satisfied with the response to the request to exercise your rights, and in any case, whenever you consider it appropriate, you may file a complaint with the Catalan Data Protection Supervisor through its website: apdcat.gencat.cat.