Be a member

PRIVACY POLICY

INTRODUCTION

Your privacy is important to us. This Privacy Policy explains what personal data we collect from users, how we process it, the purposes for which it is used and the rights that data subjects may exercise.

Persons over the age of 14 may provide their personal data and give their consent without the prior authorisation of their parents, guardians or legal representatives. In the case of children under the age of 14, the consent of the persons holding parental responsibility or guardianship will be required.

We will never request more information than is necessary to provide the requested services. Nor will we share personal data with third parties unless this is necessary to provide a service, required by law or authorised in advance by the data subject.

Personal data will not be used for purposes other than those specified in this Privacy Policy.

Users must read this Privacy Policy carefully whenever they provide personal data through the website. This document may be amended to reflect legislative, case-law or technical changes, or changes relating to the services provided.

Any amendments will be published on the website and will apply from the time of publication.

DATA CONTROLLER

Identity: ADECAT – ASSOCIACIO DE DECOLLETADORS I MECANITZADORS DE CATALUNYA
Tax Identification Number (NIF): G08725376
Postal address: Av. Europa, 21, 08401 Granollers, Barcelona
Telephone: 93 860 47 00 (ext. 3)
Email: adecat@adecat.org
Website: www.adecat.org

ADECAT – ASSOCIACIO DE DECOLLETADORS I MECANITZADORS DE CATALUNYA, hereinafter referred to as ADECAT or the data controller, processes personal data in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data; Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights; Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce; and all other applicable legislation.

ADECAT has adopted the necessary technical and organisational measures to guarantee the confidentiality, integrity, availability and security of the personal data processed.

METHODS OF DATA COLLECTION

Personal data may be collected through the following means:

  • Contact forms on the website.
  • Communications sent by email.
  • Registration for activities, conferences, training courses or events.
  • Relationships with members, companies, suppliers or partners.
  • Subscription to informational or commercial communications.
  • Interaction with ADECAT’s social media profiles.
  • Cookies and similar technologies, provided that the user has authorised their use where required.

Depending on the service or form used, the data processed may include:

  • First name and surname.
  • Email address.
  • Telephone number.
  • Company, entity or organisation.
  • Professional position.
  • Information voluntarily provided in a message or communication.
  • Data required to manage registrations, activities or services.
  • Browsing data obtained through cookies.

As a general rule, special categories of personal data are not processed. Users are asked not to provide specially protected information unless it is strictly necessary.

PURPOSES OF PROCESSING

Personal data may be processed for the following purposes:

Contact forms

To handle and respond to enquiries, requests for information or communications submitted by the user.

Management of members and associated companies

To manage relationships with members, prospective members, companies, professionals, partners and other persons or entities connected with ADECAT’s activities.

Activities, training and events

To manage registration, organisation, attendance, communications and follow-up relating to activities, courses, conferences, meetings, training sessions or events.

Informational communications

To send information relating to ADECAT’s activities, services, initiatives, news and events.

Where legally required, these communications will only be sent if the data subject has given their consent.

Administrative management

To carry out the administrative, accounting, tax, contractual and organisational procedures required for the operation of the association and to comply with applicable legal obligations.

Improvement of the website and services

To analyse the operation of the website, understand users’ opinions, compile statistics and improve the services and content provided.

Social media

To manage ADECAT’s presence on social media and provide information about its activities, initiatives, services and events.

Security

To prevent fraudulent use, unauthorised access, technical incidents or activities that may compromise the security of the website.

Personal data will not be processed for purposes other than those described, unless required by law or supported by an appropriate legal basis.

USE OF PHOTOGRAPHS AND AUDIOVISUAL MATERIAL

ADECAT may publish photographs or audiovisual material relating to its activities, conferences, training sessions, meetings or events.

Where individuals are clearly identifiable and it is legally required, ADECAT will obtain the corresponding consent in advance or rely on another appropriate legal basis.

In the case of minors, where necessary, consent will be obtained from the persons holding parental responsibility, guardianship or legal representation.

Data subjects may request information, object to the processing or request the removal of an image by sending a communication to [adecat@adecat.org](mailto:adecat@adecat.org).

The image will be removed whenever technically possible and provided that there is no legal basis justifying its retention or publication.

COMMERCIAL COMMUNICATIONS

ADECAT does not send commercial or informational communications by email without a legal basis permitting it to do so.

Where communications are based on consent, the data subject may withdraw that consent at any time through:

  • The unsubscribe link included in the communication.
  • An email sent to adecat@adecat.org.

The withdrawal of consent will not affect the lawfulness of any processing carried out before its withdrawal.

ADECAT does not engage in the mass distribution of unsolicited communications or spam.

LEGAL BASIS FOR PROCESSING

The legal grounds that may authorise the processing of personal data are as follows:

Consent

Where the data subject expressly agrees to the processing of their data, for example by submitting a form, registering for an activity or agreeing to receive communications.

Performance of a contractual or membership relationship

Where processing is necessary to manage the relationship with members, clients, suppliers, partners, participants or other persons connected with ADECAT.

Compliance with a legal obligation

Where data must be processed to comply with accounting, tax, administrative, employment or any other obligations established by the applicable legislation.

Legitimate interest

Where processing is necessary for the operation, security, management or improvement of ADECAT’s activities and services, provided that the rights and freedoms of the data subjects do not take precedence.

Refusal to provide mandatory data may prevent ADECAT from responding to an enquiry, managing a registration, providing a service or maintaining a relationship with the data subject.

DATA RETENTION PERIOD

Personal data will be retained for as long as is necessary to fulfil the purpose for which it was collected.

Thereafter, the data may be duly restricted and retained for the periods established by the applicable legislation in order to address any potential legal, administrative, tax or contractual liabilities.

Where processing is based on consent, the data will be retained until the data subject withdraws that consent, without prejudice to any applicable statutory retention periods.

Data relating to informational or commercial communications will be retained until the data subject requests to unsubscribe or objects to the processing.

RECIPIENTS OF THE DATA

ADECAT will not sell, rent or disclose users’ personal data to third parties for commercial purposes.

Data may be disclosed:

  • To public authorities, government bodies, courts, tribunals or law enforcement agencies where required by law.
  • To banks or payment service providers where necessary.
  • To consultants, administrative service providers, auditors or other professionals providing services to ADECAT.
  • To providers of technology, web hosting, email, communications, maintenance, analytics, registration management or other services necessary for the operation of the organisation.

These providers will act as data processors and must comply with the obligations established under data protection legislation.

ADECAT will enter into the corresponding agreements with its data processors and require them to implement appropriate security and confidentiality measures.

INTERNATIONAL TRANSFERS

Some technology providers or platforms used by ADECAT may be located outside the European Economic Area or may process data from third countries.

Where an international data transfer takes place, ADECAT will verify that appropriate safeguards are in place, such as:

  • An adequacy decision issued by the European Commission.
  • Standard contractual clauses.
  • Binding corporate rules.
  • Any other mechanism authorised under the applicable legislation.

The use of certain external services may also depend on the user’s consent, particularly in relation to cookies, analytics or embedded third-party content.

RIGHTS OF DATA SUBJECTS

Data subjects may exercise the following rights:

Right of access

This right enables data subjects to determine whether ADECAT processes their personal data and to obtain information about such processing.

Right to rectification

This right enables data subjects to request the correction of inaccurate or incomplete data.

Right to erasure

This right enables data subjects to request the deletion of their data where it is no longer necessary, consent has been withdrawn or any other legally established circumstance applies.

Right to object

This right enables data subjects to object to the processing of their personal data in certain circumstances.

Right to restriction of processing

This right enables data subjects to request that the processing of their data be restricted while a complaint is resolved or one of the legally established circumstances is verified.

Right to data portability

This right enables data subjects to receive the personal data they have provided in a structured, commonly used and machine-readable format and to transmit it to another controller where technically possible.

Right to withdraw consent

This right enables data subjects to withdraw their consent at any time without affecting the lawfulness of processing carried out beforehand.

Right not to be subject to automated decision-making

This right enables data subjects not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects them.

To exercise these rights, the data subject may submit a request to:

Postal address: Av. Europa, 21, 08401 Granollers, Barcelona Email: [adecat@adecat.org](mailto:adecat@adecat.org)

The communication must include the following subject line:

“Data protection: exercise of rights”

The request must include the information required to identify the data subject and specify the right they wish to exercise.

Proof of identity may only be requested where there are reasonable doubts concerning the identity of the person submitting the request.

COMPLAINT TO THE SUPERVISORY AUTHORITY

The data subject has the right to lodge a complaint with the Spanish Data Protection Agency if they believe that the processing of their personal data infringes the applicable legislation.

Exercising this right does not prevent the data subject from contacting ADECAT beforehand in an attempt to resolve any issue or complaint.

SECURITY MEASURES

The personal data provided will be processed confidentially.

ADECAT has adopted appropriate technical and organisational measures to:

  • Prevent unauthorised access to the data.
  • Prevent its alteration, loss, destruction or theft.
  • Guarantee the confidentiality and integrity of the information.
  • Restrict access to authorised persons.
  • Properly manage any security incidents.

These measures are adapted to the state of technology, the nature of the data processed, the existing risks and the characteristics of the processing.

However, users should be aware that no technological or information transmission system operating over the Internet can guarantee absolute security.

COOKIES AND BROWSING ANALYSIS

The website may use cookies and similar technologies to enable its operation, remember preferences, analyse browsing activity or display third-party content.

Cookies that are not strictly necessary will only be installed where the user has given their consent.

The information obtained through these cookies may be used to:

  • Analyse the use of the website.
  • Compile aggregated statistics.
  • Determine which content is most useful.
  • Identify errors and improve the browsing experience.
  • Adapt services and content to users’ needs.

Users may accept, reject or configure cookies through the consent management system available on the website.

For detailed information on the cookies used, their providers, purposes and retention periods, users may consult the Cookie Policy.

PROFILING

ADECAT will not make decisions that produce legal effects or significantly affect data subjects based solely on automated processing.

Where the user accepts analytics cookies or other similar technologies, general statistics or user segments may be created in relation to:

  • Use of the website.
  • Content viewed.
  • The device used.
  • Approximate location.
  • Traffic source.
  • General browsing habits.

This information will be used to understand how the website operates and to improve ADECAT’s services and content.

SOCIAL MEDIA

ADECAT may have a presence on various social media platforms.

The processing of data belonging to persons who follow, contact or interact with ADECAT’s official profiles will be governed by this Privacy Policy and by the terms, policies and rules of each social media platform.

ADECAT may process this data for the following purposes:

  • To manage its presence on social media.
  • To respond to enquiries, comments or messages.
  • To provide information about activities, services, conferences, training sessions or events.
  • To share content related to the purposes of the association.
  • To manage users’ participation in initiatives or activities.

The publication of the following content is prohibited:

  • Content that contravenes national, European or international legislation.
  • Content that promotes unlawful conduct or conduct contrary to good faith.
  • Content that infringes fundamental rights, dignity, honour, privacy or a person’s image.
  • Content that is discriminatory, offensive, defamatory, violent or inappropriate.
  • Content that infringes the rights of minors or consumers, or intellectual and industrial property rights.
  • Content that may compromise the security of users or the organisation.

ADECAT reserves the right to remove, hide or report, without prior notice, any content it considers inappropriate or contrary to these rules.

Where a person provides personal data through a social media platform, the privacy policy of the corresponding platform will also apply. ADECAT is not responsible for the security measures, conditions or processing activities carried out directly by such platforms.

LANGUAGE

The language applicable to this Privacy Policy is Catalan.

Where translated versions are provided in other languages and any discrepancy of interpretation arises, the Catalan version will prevail, without prejudice to the rights granted to users under the applicable legislation.

CHANGES TO THE PRIVACY POLICY

ADECAT reserves the right to amend this Privacy Policy in order to adapt it to:

  • Legislative or case-law developments.
  • Criteria issued by supervisory authorities.
  • Changes to the organisation’s services or activities.
  • Technical changes to the website.
  • The addition of new providers or processing systems.

The version in force will be the version published on the website at any given time.

WITHDRAWAL OF CONSENT

Consent given by the data subject may be withdrawn at any time.

Withdrawal may be communicated to ADECAT by email at [adecat@adecat.org](mailto:adecat@adecat.org) or through the unsubscribe mechanisms provided in the communications.

Withdrawal will not have retroactive effect and will not affect the lawfulness of processing carried out before consent was withdrawn.

APPLICABLE LEGISLATION

This Privacy Policy is governed by the applicable Spanish and European legislation on personal data protection, information society services and electronic commerce.

Any dispute relating to the website or the processing of personal data will be resolved by the competent courts and tribunals in accordance with the applicable legislation.