{"id":2842,"date":"2018-06-03T10:40:14","date_gmt":"2018-06-03T10:40:14","guid":{"rendered":"https:\/\/www.collvilaro.com\/en\/?page_id=2842"},"modified":"2026-10-06T16:26:10","modified_gmt":"2026-10-06T14:26:10","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.collvilaro.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div class=\"wpb-content-wrapper\" id=\"wpb-content-root\"><p>[vc_row type=&#8221;container&#8221;][vc_column][vc_column_text]<\/p>\n<h2>Personal Data Protection Policy<\/h2>\n<p>COLL VILARO, S.A. is an organisation that collects personal data through the various means available to it. This entails significant responsibility for designing and organising procedures in such a way as to ensure compliance with data protection legislation.<\/p>\n<p>Therefore, COLL VILARO, S.A. will adopt all necessary security measures to ensure the protection of the data collected.<\/p>\n<p>In exercising these responsibilities, and with the aim of establishing the general principles that must govern the processing of personal data within the Organisation, COLL VILARO, S.A. approves this Personal Data Protection Policy, which it communicates and makes available to all its stakeholders, while also complying with the following regulations:<\/p>\n<ol>\n<li>Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).<\/li>\n<li>Organic Law 3\/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).<\/li>\n<li>Law 34\/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).<\/li>\n<\/ol>\n<h3>I. Scope of application<\/h3>\n<p>This Personal Data Protection Policy shall apply to COLL VILARO, S.A., its administrative and management bodies and staff, as well as to all persons who have a relationship with the Organisation, expressly including service providers with access to data (\u201cData Processors\u201d).<\/p>\n<p>The data controller responsible for the personal data collected by the Organisation is COLL VILARO, S.A., with Tax Identification Number (NIF): A58191784, whose representative is MARIA PERALTA COLL (hereinafter, the Data Controller).<\/p>\n<p>Its contact details are as follows:<\/p>\n<ul>\n<li><strong>Address:<\/strong> FRANCESC TEIXIDO 10 PARQUE EMPRESARIAL GRANLAND, BADALONA, BARCELONA, 08918<\/li>\n<li><strong>Contact telephone number:<\/strong> 934590618<\/li>\n<li><strong>Contact email:<\/strong> <a href=\"mailto:maria@collvilaro.com\">maria@collvilaro.com<\/a><\/li>\n<\/ul>\n<h3>II. Information about the Data Controller and the processing of personal data at COLL VILARO, S.A.<\/h3>\n<p>Additional information regarding data processing consists of more specific and detailed information that organisations must provide to data subjects concerning how their personal data is managed. This concept derives from the transparency principle established by the General Data Protection Regulation (GDPR) and supplements the basic information initially provided by offering a greater level of detail regarding data processing activities.<\/p>\n<p>COLL VILARO, S.A. provides the following additional information regarding the data processing activities it carries out:<\/p>\n<h4>Additional information on Data Protection<\/h4>\n<h5>Data Controller details<\/h5>\n<table>\n<tbody>\n<tr>\n<th>Identity<\/th>\n<td>COLL VILARO, S.A.<\/td>\n<\/tr>\n<tr>\n<th>Address<\/th>\n<td>FRANCESC TEIXIDO 10 PARQUE EMPRESARIAL GRANLAND, BADALONA, BARCELONA, 08918<\/td>\n<\/tr>\n<tr>\n<th>Contact telephone number<\/th>\n<td>934590618<\/td>\n<\/tr>\n<tr>\n<th>Email address<\/th>\n<td><a href=\"mailto:maria@collvilaro.com\">maria@collvilaro.com<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h5>Purposes of personal data processing<\/h5>\n<table>\n<thead>\n<tr>\n<th>Data processing activity<\/th>\n<th>Purpose of processing<\/th>\n<th>Retention period<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>WEB FORM<\/td>\n<td>PROFESSIONAL CONTACT, CUSTOMER MANAGEMENT, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT<\/td>\n<td>\n<ul>\n<li>Professional contact: for as long as the professional relationship is maintained and, following its termination, for up to 5 years.<\/li>\n<li>Customer management: for the duration of the contractual relationship and, following its termination, for up to 5 years.<\/li>\n<li>Accounting: 6 years.<\/li>\n<li>Tax: 4 years.<\/li>\n<li>Administrative: 5 years.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>SUPPLIERS<\/td>\n<td>CUSTOMER MANAGEMENT, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT<\/td>\n<td>\n<ul>\n<li>Customer management: 5 years.<\/li>\n<li>Accounting: 6 years.<\/li>\n<li>Tax: 4 years.<\/li>\n<li>Administrative: 5 years.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>HUMAN RESOURCES<\/td>\n<td>CUSTOMER MANAGEMENT, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT, PAYROLL MANAGEMENT, OCCUPATIONAL RISK PREVENTION, HUMAN RESOURCES<\/td>\n<td>\n<ul>\n<li>Customer management (commercial\/contractual): 6 years from the last accounting entry\/document supporting it.<\/li>\n<li>Accounting, tax and administrative management: 6 years (accounting) and 4 years (tax obligations) from the end of the tax period or from the filing\/self-assessment date.<\/li>\n<li>Payroll management: 4 years.<\/li>\n<li>Occupational risk prevention: 5 years.<\/li>\n<li>Human resources: 4 years.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>VIDEO SURVEILLANCE<\/td>\n<td>VIDEO SURVEILLANCE<\/td>\n<td>Maximum of 1 month from the date of recording.<\/td>\n<\/tr>\n<tr>\n<td>CUSTOMERS<\/td>\n<td>CUSTOMER MANAGEMENT, ACCOUNTING, TAX AND ADMINISTRATIVE MANAGEMENT<\/td>\n<td>\n<ul>\n<li>Customer management: 5 years.<\/li>\n<li>Accounting: 6 years.<\/li>\n<li>Tax: 4 years.<\/li>\n<li>Administrative: 5 years.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h5>Legal basis for the processing of personal data<\/h5>\n<table>\n<thead>\n<tr>\n<th>Data processing activity<\/th>\n<th>Legal basis<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>WEB FORM<\/td>\n<td>Explicit consent of the data subject.<\/td>\n<\/tr>\n<tr>\n<td>SUPPLIERS<\/td>\n<td>Performance of a purchase and sale agreement and\/or service provision agreement.<\/td>\n<\/tr>\n<tr>\n<td>HUMAN RESOURCES<\/td>\n<td>Performance of an employment contract.<\/td>\n<\/tr>\n<tr>\n<td>VIDEO SURVEILLANCE<\/td>\n<td>Public interest in video surveillance.<\/td>\n<\/tr>\n<tr>\n<td>CUSTOMERS<\/td>\n<td>Performance of a purchase and sale agreement.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h5>Recipients of your personal data<\/h5>\n<table>\n<thead>\n<tr>\n<th>Data processing activity<\/th>\n<th>Expected disclosures<\/th>\n<th>International transfers<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>WEB FORM<\/td>\n<td>No disclosures are expected.<\/td>\n<td>No<\/td>\n<\/tr>\n<tr>\n<td>SUPPLIERS<\/td>\n<td>PUBLIC ADMINISTRATIONS WITH AUTHORITY IN THE RELEVANT MATTER, BANKING OR FINANCIAL INSTITUTIONS<\/td>\n<td>No<\/td>\n<\/tr>\n<tr>\n<td>HUMAN RESOURCES<\/td>\n<td>No disclosures are expected.<\/td>\n<td>No<\/td>\n<\/tr>\n<tr>\n<td>VIDEO SURVEILLANCE<\/td>\n<td>PUBLIC ADMINISTRATIONS WITH AUTHORITY IN THE RELEVANT MATTER<\/td>\n<td>No<\/td>\n<\/tr>\n<tr>\n<td>CUSTOMERS<\/td>\n<td>PUBLIC ADMINISTRATIONS WITH AUTHORITY IN THE RELEVANT MATTER, BANKING OR FINANCIAL INSTITUTIONS<\/td>\n<td>No<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h5>Your rights and how to exercise them<\/h5>\n<p>Any person has the right to obtain confirmation as to whether COLL VILARO, S.A. is processing personal data concerning them.<\/p>\n<p>Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.<\/p>\n<p>Under certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will retain it solely for the establishment, exercise or defence of legal claims, as well as to comply with legally established retention periods.<\/p>\n<p>Data subjects may also object to the processing of their personal data. In such cases, COLL VILARO, S.A. will cease processing their data unless there are compelling legitimate grounds for the processing or it is required for the establishment, exercise or defence of possible legal claims.<\/p>\n<p>Likewise, under certain circumstances and where technically feasible, data subjects shall have the right to have their personal data transmitted directly to another data controller or processor, upon request.<\/p>\n<p>To exercise the rights indicated above, please contact us by writing to:<\/p>\n<ul>\n<li>COLL VILARO, S.A., FRANCESC TEIXIDO 10 PARQUE EMPRESARIAL GRANLAND, BADALONA, BARCELONA, 08918.<\/li>\n<li>Email: <a href=\"mailto:maria@collvilaro.com\">maria@collvilaro.com<\/a>.<\/li>\n<\/ul>\n<p>We recommend that you include a copy of your ID document with your request.<\/p>\n<h3>III. Principles applicable to the processing of personal data<\/h3>\n<p>The Personal Data Protection Policy is a proactive accountability measure intended to ensure compliance with the legislation applicable in this area and, in relation thereto, respect for the right to honour and privacy in the processing of personal data of all persons who have a relationship with COLL VILARO, S.A.<\/p>\n<p>In accordance with this Policy, the principles governing data processing within the Organisation are established, together with the procedures and organisational and security measures that persons affected by this Policy undertake to implement within their areas of responsibility.<\/p>\n<p>In this regard, COLL VILARO, S.A. shall ensure compliance with the following principles:<\/p>\n<h4>Lawfulness, fairness, transparency and purpose limitation<\/h4>\n<p>Data subjects must always be informed of the processing of their data through the established clauses and procedures. Processing shall only be considered lawful where consent has been given for the processing of the data (with particular attention to consent provided by minors), or where another valid legal basis exists, and provided that the purpose of the processing complies with the applicable legislation.<\/p>\n<h4>Data minimisation<\/h4>\n<p>The data processed must be adequate, relevant and limited to what is necessary in relation to the various purposes for which it is processed.<\/p>\n<h4>Accuracy<\/h4>\n<p>The data must be accurate and, where necessary, kept up to date. Appropriate measures shall be taken to ensure that personal data that is inaccurate with regard to the purposes for which it is processed is erased or rectified without delay.<\/p>\n<h4>Storage limitation<\/h4>\n<p>Data shall be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.<\/p>\n<h4>Integrity and confidentiality<\/h4>\n<p>Personal data shall be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, through the implementation of appropriate technical or organisational measures.<\/p>\n<h4>Data disclosures<\/h4>\n<p>The purchase or acquisition of personal data originating from illegitimate sources is prohibited, as is the acquisition of data that has been collected or disclosed in breach of the law or where its legitimate origin cannot be sufficiently guaranteed.<\/p>\n<h4>Engagement of suppliers with access to data<\/h4>\n<p>Only suppliers that provide sufficient guarantees to implement appropriate technical and security measures for data processing shall be selected. The appropriate agreement governing such processing shall be documented with these suppliers.<\/p>\n<h4>International data transfers<\/h4>\n<p>Any processing of personal data subject to European Union legislation that involves the transfer of data outside the European Economic Area must be carried out in strict compliance with the requirements established by the applicable legislation.<\/p>\n<h4>Rights of data subjects<\/h4>\n<p>The Organisation shall facilitate the exercise by data subjects of their rights of access, rectification, erasure, restriction of processing, objection and portability, establishing the appropriate internal procedures and, in particular, the forms required for their exercise, which must comply, at a minimum, with the applicable legal requirements in each case.<\/p>\n<p>COLL VILARO, S.A. shall promote the consideration of the principles set out in this Personal Data Protection Policy:<\/p>\n<ol>\n<li>In the design and implementation of all working procedures.<\/li>\n<li>In the products and services offered.<\/li>\n<li>In all contracts and obligations entered into or assumed.<\/li>\n<li>In the implementation of any systems and platforms that allow access by its employees or third parties and\/or the collection or processing of personal data.<\/li>\n<\/ol>\n<h3>IV. Personal data of minors<\/h3>\n<p>In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3\/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, only persons over the age of 14 may lawfully provide their consent to the processing of their personal data by COLL VILARO, S.A.<\/p>\n<p>Where the data subject is under 14 years of age, the consent of their parents or legal guardians shall be required for the processing, and such processing shall only be considered lawful to the extent that they have authorised it.<\/p>\n<h3>V. Confidentiality and security of personal data<\/h3>\n<p>COLL VILARO, S.A. undertakes to notify the data subject without undue delay where a personal data breach is likely to result in a high risk to their rights and freedoms.<\/p>\n<p>In accordance with Article 4 of the GDPR, a personal data breach means a breach of security leading to the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or to the unauthorised disclosure of or access to such data.<\/p>\n<p>Personal data shall be treated as confidential by the Data Controller, who undertakes to inform and ensure, through a legal or contractual obligation, that such confidentiality is respected by its employees, associates and any person to whom the information is made accessible.<\/p>\n<h3>VI. Commitment of COLL VILARO, S.A. staff<\/h3>\n<p>In view of the above, the employees of COLL VILARO, S.A. are informed of this Policy and acknowledge that personal information is an asset of COLL VILARO, S.A. In this regard, they adhere to this Policy and undertake to:<\/p>\n<ul>\n<li>Complete the Data Protection awareness training made available by COLL VILARO, S.A.<\/li>\n<li>Apply the user-level security measures applicable to their position, without prejudice to any responsibilities for their design and implementation that may be assigned to them according to their role within COLL VILARO, S.A.<\/li>\n<li>Use the established procedures and forms for the exercise of rights by affected data subjects and immediately inform COLL VILARO, S.A. so that an appropriate response can be provided.<\/li>\n<li>Inform COLL VILARO, S.A., as soon as they become aware of them, of any deviations from the provisions of this Policy, particularly \u201cpersonal data breaches\u201d, using the procedure established for this purpose.<\/li>\n<\/ul>\n<h3>VII. Monitoring and assessment<\/h3>\n<p>COLL VILARO, S.A. shall carry out an annual review, assessment and evaluation, as well as whenever significant changes occur in data processing activities, of the effectiveness of the technical and organisational measures implemented to ensure the security of processing.<\/p>\n<p>COLL VILARO, S.A.[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>[vc_row type=&#8221;container&#8221;][vc_column][vc_column_text] Personal Data Protection Policy COLL VILARO, S.A. is an organisation that collects personal data through the various means available to it. This entails significant responsibility for designing and organising procedures in such a way as to ensure compliance with data protection legislation. Therefore, COLL VILARO, S.A. will adopt all necessary security measures to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-2842","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.collvilaro.com\/en\/wp-json\/wp\/v2\/pages\/2842","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.collvilaro.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.collvilaro.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.collvilaro.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.collvilaro.com\/en\/wp-json\/wp\/v2\/comments?post=2842"}],"version-history":[{"count":1,"href":"https:\/\/www.collvilaro.com\/en\/wp-json\/wp\/v2\/pages\/2842\/revisions"}],"predecessor-version":[{"id":5015,"href":"https:\/\/www.collvilaro.com\/en\/wp-json\/wp\/v2\/pages\/2842\/revisions\/5015"}],"wp:attachment":[{"href":"https:\/\/www.collvilaro.com\/en\/wp-json\/wp\/v2\/media?parent=2842"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}