This site reflects the translation of the original: https://www.cambrabcn.org/ca_ES/politica-de-privacitat

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("RGPD") and its implementing regulations, the Chamber informs you about the processing of personal data that it carries out, both on its website and, for all purposes, in the different areas of its activity.

The aforementioned information is made available to you through the following points:


1. Who is the Data Controller?

2. For all intents and purposes, for what purposes will we process your personal data?

3. What is the basis of legitimacy for the processing of your data?

4. For how long will we keep your information?

5. To which recipients will your data be disclosed?

6. What data will the Chamber process?

7. Where do we obtain your data from?

8. What are your rights when we process your information?

9. What happens if you do not provide us with the requested data?

10. Guardianship of the Chamber and the supervisory authority

11. Security measures


1. Who is the Data Controller?

 

La Cambra Oficial de Comerç, Indústria, Serveis i Navegació de Barcelona
Av. Diagonal, 452-454 08006 Barcelona
Telèfon: 902 448 448
E-mail: lopd@cambrabcn.org
CIF: Q0873001B

2.- For all purposes, for what purpose will we process your personal data?

  • To allow the Chamber to carry out the different public functions attributed to the corporation, based on the regulations governing the Chambers of Commerce.

  • To allow the Chamber to sell products and/or provide services to individuals or companies, through any of the possible marketing platforms, including this website through the spaces provided for this purpose.

  • To allow the registration and management of users of the website, including the management of the preferences expressed in their user area as well as the services they have contracted. In the case of users of the private area of the website, they will be considered clients of the Chamber, and in the event that they do not mark any preference regarding areas of interest, they will be sent communications regarding the products or services initially contracted.

  • Enable your registration as a user in the Integral Consultation System (SIC) and participate on behalf of yourself or your company in the consultations that the Chamber may set up.

  • To send information of business interest, not commercial, within the framework of the public-administrative functions established in the regulations governing the Chambers of Commerce.

  • To send information about the Chamber's products or services that we believe may be of interest to you, whether you are a user of the Chamber or not and you have expressly requested us to do so.

  • Respond to doubts or questions raised through the spaces provided for this purpose on the website or through other communication channels.

  • Enable the management of your application regarding any of the job offers published by the Chamber, through the website or any other channel provided by the Chamber.

  • To enable the correct management of the commercial relationship between clients and/or suppliers and the Chamber. To carry out audits and internal controls.

  • To enable compliance with the Chamber's legal obligations.

  • To assess their degree of satisfaction with regard to the Chamber's products and services, and to consider the assessments in order to enable the Chamber to improve the provision of services.

  • To guarantee the security of the facilities, goods and people accessing the Chamber's facilities through the video surveillance system.

  • To make it possible to control the access of persons to the Chamber's facilities.

  • To allow the recording of images of the events and proceedings held and/or organised by the Chamber, in order to inform of their celebration and to promote them.

  • Through the use of cookies on the Chamber's website, to enable the navigation and use of the website by its users, to carry out analysis and statistics in this respect, to provide advertising based on their browsing habits and to enable connectivity with social networks.

  • Basic Member of Club Cámara:
    The personal data provided by joining Club Cámara (Basic Member), will be used to:
    a) Use your data to establish contact with you, as an accredited contact person of your company, to enable the registration, remission of the card that identifies your company as a Basic Member, provision of the services of the Club Cámara.
    b) To send you, as an accredited contact person, the communications inherent to your company's status as a Basic Member of Club Cámara, both those relating to administrative matters, as well as to inform you of the advantages to which your company may have access as a Basic Member of Club Cámara (Offers and/or discounts both in services of the Chamber and of the Partners of Club Cámara).
    c) To send communications that we understand of your interest about the Chamber.

  • Member Business Club Cámara
    The personal data provided for membership of the Chamber Club (Member Business), will be used to:
    a) Identify the cards that will allow us to accredit your identity as a Business Club Member, manage your registration and enjoy the advantages associated with the contracting of this type of membership.
    b) To send you the communications inherent to your membership. Both those relating to administrative matters, as well as to inform you of the personal advantages to which you may have access as a Business Club Cámara Member (Offers and/or discounts on services of the Chamber and of the Partners of the Club Cámara).
    c) To send you communications that we believe may be of interest to you about the Chamber.

  • Llotja Virtual
    The data provided through the forms provided for registration in the Llotja Virtual as well as those sent, at the request of the interested party, through their own profiles on social networks will be used to:
    a) Manage your registration in the Llotja Virtual and enable your participation in the various events, conferences or activities organised, or membership of a particular community.
    b) To enable the sending of communications from the Llotja Virtual with respect to activities and activities organised by the Llotja Virtual.

3.- What is the legitimate basis for the processing of your data?

  • For the development of the public functions legally attributed: the processing necessary for the fulfilment of a mission carried out in the public interest, in the exercise of the powers conferred by Law 4/2014, of 1 April, Basic of the Official Chambers of Commerce, Industry, Services and Navigation.

  • To enable the management of the commercial relationship with clients (marketing of products or services) and/or suppliers: Contractual compliance or a legitimate interest of the Chamber, depending on whether it is a necessary processing to comply with the contract or whether it is a processing associated with the internal management of the Chamber (carrying out audits and internal controls, a legitimate interest of the Chamber).

  • For the registration and management of web users: Contractual compliance.

  • For the registration as a user of the Chamber's Integral Consultation System SIC and to participate in the consultations organised in this context, in accordance with the consent expressed by you in the user registration and the public administrative functions of the Chamber according to Law 4/2014 of 1 April, basic of the official chambers of commerce, industry, services and navigation.

  • For the sending of communications of business interest of a non-commercial nature: fulfilment of a mission carried out in the public interest in the exercise of the powers conferred by Law 4/2014, of 1 April, Basic Law of the Official Chambers of Commerce, Industry, Services and Navigation.

  • For the remission of information, regarding products or services of the Chamber, in the case of a consumer/user of products or services of the Chamber: a legitimate interest of marketing direct of the Chamber / art 21.2 Law 34/2002 LSSI.

  • In case it is not a consumer or user of products or services of the Chamber: the basis of legitimacy for the realization of shipments of the Chamber: the consent given / art 21.1 Law 34/2002 LSSI.

  • To enable the response to doubts or questions raised in the Chamber: The basis of legitimacy could vary depending on the nature of the issues raised, being the fulfilment of a mission of public interest or a legitimate interest of customer service.

  • For the management of job applications or personnel selection processes: A legitimate interest of the Chamber in the management of its human resources.

  • Compliance with the different legal obligations of the Chamber. That which is contemplated in the regulations that are applicable in each case, both the regulations governing the Chambers of Commerce and the labour, tax or accounting regulations.

  • Regarding the assessment of their degree of satisfaction, with respect to products or services provided: a legitimate interest of the Chamber in the continuous improvement of processes and services and their quality control.

  • In the case of the capture of images, through the video-surveillance system, of the Chamber's facilities: A public interest with respect to the security of the facilities, goods and people who are at the Chamber's facilities.

  • Access control to the Chamber's facilities: a legitimate interest of the Chamber in the security of persons and facilities, e.g. in case of evacuation or emergency.

  • In relation to the recording of images in Chamber events and proceedings: a legitimate interest of the Chamber in promoting its activities.

  • Regarding the use of cookies on the website: a legitimate interest of the Chamber to rationalise the management and design of the website, to improve its usability and functioning, and to analyse its use.

  • With regard to the processing related to the Basic Member Club of the Chamber:
    a) For the sending of the card to your company, as well as the provision of Club Cámara services, including the sending of the Club's own communications, the processing of the contact person's data would be based on: Contractual execution.
    b) For the sending of communications from the Chamber, not strictly related to the Club Chamber: A legitimate interest of marketing direct from the Chamber, with respect to its customers / art. 21.2 Law 34/2002 LSSI.

  • Regarding the treatments related to the Club Chamber Member Business:
    a) For the issuance of cards that identify you as a person belonging to a company Member Business, manage the registration, provide services and enjoy the benefits of the Club, including the sending of communications inherent in the status of partner: The contractual execution.
    b) For the sending of communications from the Chamber, not strictly related to the Chamber Club: A legitimate interest of direct marketing of the Chamber, with respect to its customers / art. 21.2 Law 34/2002 LSSI.

  • Regarding Llotja Virtual:
    a) Regarding their registration and management of their participation in its activities or communities: The consent expressed in your registration.
    b) Regarding the sending of communications from the Virtual Llotja: A legitimate interest of direct marketing of the Chamber, with respect to its customers / art. 21.2 Law 34/2002 LSSI.

4.- How long will we keep your information?

  • The data provided will be kept for the time necessary for each of the purposes for which the information is intended.

  • In any case, and for all purposes:

  • With regard to the information generated from the provision of services by the Chamber, a history of services provided will be kept indefinitely. With regard to the fiscal, accounting documentation or that which is not necessary for the historical record of services rendered, it shall be eliminated within the established legal periods, four (4) years.

  • With regard to your registration in the SIC, as long as the system remains active or you do not express your intention to cease to be part of it, you or your company.

  • With respect to mailings made by the Chamber, whether or not of a commercial nature, until you state otherwise.

  • Regarding your job applications or participation in selection processes for a period of one (1) year.

  • Regarding the sending of commercial communications by electronic means, indefinitely, until you tell us otherwise.

  • Regarding the satisfaction analyses of the Chamber's products or services, until the corresponding analyses have been completed.

  • In all matters related to access control and video surveillance, a maximum of 30 days.

  • The data associated with membership of the Chamber Club will be kept indefinitely in relation to contact details and the history of services provided.

  • The rest of the processing associated with membership of the Club Cámara in any of its modalities, as long as you or your company continues to belong to the Club.

  • With regard to the management of the Llotja Virtual, while you are a member.

5.- To which recipients will your data be communicated?

 

  • The communication of your information to third parties is foreseen in those cases in which the communication is essential to comply with the different purposes for which the data were collected, for example, to provide the contracted services if the assistance of a third party is essential to provide the aforementioned services (for example, in the case of certain procedures). 

  • In addition to the communications that may be legally established (communications to the tax administration, other administrations and public authorities, local, regional, state or community, in the case of the execution of administrative procedures, application for aid or subsidies, security forces and bodies, judges, courts, etc.).

  • Any other communication to third parties will only be carried out if prior consent has been given.

  • Llotja Virtual. No communications to third parties are foreseen.

  • Apart from the aforementioned, third parties in charge of data processing may have access to your data.

 

6.- What data will the Chamber process?

 

The categories of data that we may process are:

Data of an identifying nature:

  • Postal or electronic addresses

 

In the case of the video surveillance system/image capture at events:

  • Image

 

In the case of CVs, also:

  • Personal characteristics

  • Academic and professional 

 

The data is limited, given that we only process the data necessary for the provision of our services and the management of our activity. In any case, in addition to the aforementioned data, we will process the data generated from the provision of our services.

 

Llotja Virtual:

Name, surname. E-mail address, VAT number, post code, position and sector of activity.

7.- Where do we obtain your data from?

 

Your data has been provided by you or the company you represent or work for, in the context of the provision of some of the services the Chamber has provided to you or the company you represent.

The other information we may process will relate to interactions with you or your company from the provision of our various services or from public records and authorities.


8.- What are your rights when we process your information?

 

As long as the Chamber processes your personal data, you have the right to request:

Access - The data subject shall have the right to obtain from the data controller confirmation as to whether or not the data concerning him/her are being processed, as well as detailed information on certain aspects of the processing being carried out.

Rectification: The data subject shall have the right to obtain the rectification of any inaccurate personal data that may exist or the completion of any incomplete data.

Deletion: The data subject shall have the right to request the deletion of his or her personal data; in any case, deletion shall be subject to the limits established in the regulatory regulation.

Limitation of processing: The data subject shall have the right to request the limitation of the processing of his or her personal data.

Opposition to processing: In certain circumstances, and for reasons related to their particular situation, data subjects may object to the processing of their data. The Chamber will stop processing the data, except for legitimate, compelling reasons, or the exercise or defence of possible claims.

Right to portability of your information - That is, you have the right to receive the personal data you have provided to one controller in a structured, commonly used and machine-readable format and to transmit it to another controller.

The aforementioned rights may be exercised by means of a written and signed request, addressed to the Chamber at Avda. Diagonal, 452 - 08006 Barcelona or via the e-mail address: lopd@cambrabcn.org.

9.- What happens if you do not provide us with the requested data?

 

In the event that identifying and contact data belonging to the client/user are not provided, as well as any other data that is essential for the provision of services or is required by law, the refusal to provide them could make it impossible to access the services or to respond to a specific request.

Failure to provide data that are not indicated as obligatory or that do not form part of the strict contracting or provision of a service will not prevent the establishment of the contractual relationship.


10.- Guardianship of the Chamber and the supervisory authority

 

The Chamber has appointed a Data Protection Committee. One of its functions is to mediate in the resolution of possible claims or disputes that you may have with the Chamber, in relation to the processing of your personal data. You may address your claims through the e-mail address lopd@cambrabcn.org.

In the event that you consider that the Chamber's response to your complaints is not satisfactory and you consider it appropriate, you may request the protection of the Chamber's corresponding supervisory body, which is the Catalan Data Protection Authority http://apdcat.gencat.cat C/ Rosselló, 214, Esc. A, 1.º 1.ª 08008 Barcelona.


11.- Security measures

 

The Chamber has adopted the security measures established in article 32 GDPR and has adopted the necessary security measures to guarantee a level of security appropriate to the risk of the data processing we carry out, with mechanisms that allow us to guarantee the confidentiality, integrity, availability and permanent resilience of the processing systems and services.

Last updated: June 2021

PRIVACY POLICY