Privacy policy

PRIVACY POLICY (this text comes from a maching translation, the original version is in catalan)

Who is responsible for processing your personal data?
MESCOMUNITAT 2015, S.L. is responsible for processing the USER's personal data and informs that these data will be processed in accordance with Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 (LOPDGDD).

Why do we process your personal data?
To maintain a commercial relationship with the user. The intended operations are: • Sending advertising commercial communications via email, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, enabling commercial communication. These communications will be made by the CONTROLLER and related to their products and services, or those of their partners or suppliers with whom promotion agreements have been made. In this case, third parties will never have access to personal data. • Conducting market research and statistical analysis. • Processing orders, requests, responding to inquiries, or any type of request made by the USER via any of the contact methods available on the CONTROLLER’s website. • Sending the online newsletter on updates, offers, and promotions related to our activity.

Why are we allowed to process your personal data?
Processing is lawful under Article 6 of the GDPR: • With the USER's consent: for sending commercial communications and newsletters. • For the CONTROLLER’s legitimate interest: to conduct market research, statistical analyses, and handle requests made by the USER.

How long do we keep your personal data?
Data will be retained only for as long as necessary to fulfill the purpose of the processing or as long as legal obligations require. Once no longer needed, the data will be securely deleted or anonymized.

Who do we share your personal data with?
No data will be communicated to third parties, except when necessary for the purposes described, to our communication service providers under signed confidentiality and data processing agreements as required by current legislation.

What are your rights?
The USER has the following rights: • Right to withdraw consent at any time. • Right to access, rectify, transfer, and delete data and to limit or oppose processing. • Right to file a complaint with the supervisory authority (www.aepd.es) if the USER considers that the processing is not compliant with the law.

MANDATORY OR OPTIONAL NATURE OF INFORMATION PROVIDED BY THE USER
By ticking the relevant boxes and entering data in fields marked with an asterisk (*) on the contact or download forms, USERS expressly, freely, and unequivocally accept that their data are necessary for their request to be processed by the provider. The USER guarantees the veracity of the personal data provided to the CONTROLLER and agrees to update any changes.

The CONTROLLER informs that all requested data through the website are mandatory, as they are necessary for providing optimal service. If not all data are provided, the CONTROLLER cannot guarantee that the services and information provided will fully meet the USER’s needs.

SECURITY MEASURES
In accordance with current data protection regulations, the CONTROLLER complies with GDPR and LOPDGDD provisions for processing personal data. They observe the principles outlined in Article 5 of the GDPR: data are processed lawfully, fairly, and transparently, relevant to the purposes and limited to what is necessary.

The CONTROLLER guarantees appropriate technical and organizational measures are in place to safeguard USERS’ rights and freedoms and has communicated adequate information to ensure they can exercise their rights.

For further information on data privacy guarantees, you may contact the CONTROLLER: MESCOMUNITAT 2015, S.L., Països Catalans, 1 - 17820 BANYOLES (Girona). Email: info@mescomunitat.com
Data Protection Officer: Jessica Jimenez Burguillos - dpo@mescomunitat.com

SOCIAL MEDIA PRIVACY POLICY

Who is responsible for processing your personal data?
MESCOMUNITAT 2015, S.L. (hereinafter, the CONTROLLER) informs the USER that it has created profiles on Facebook, Instagram, Twitter, LinkedIn, YouTube, Vimeo, and Google. The CONTROLLER is responsible for processing personal data carried out on those platforms and informs that such data will be processed in accordance with GDPR and LOPDGDD.

What do we process your personal data for?
Purpose: To maintain a relationship between the USER and the CONTROLLER, including: • Handling inquiries and requests submitted to the CONTROLLER. • Providing information about activities and events organized by the CONTROLLER. • Providing information about products or services offered by the CONTROLLER. • Interacting through official profiles.

Why are we allowed to process your personal data?
Legal basis: Article 6.1.a GDPR – the data subject has given consent for processing for one or more specific purposes. The USER has a profile on the same social network and has voluntarily joined the CONTROLLER’s profile, thereby consenting to the processing of their public profile data.

The USER can access the privacy policies of each social network and configure their profile to protect their privacy.

The CONTROLLER only accesses the USER’s public information (especially contact name) and will not add this to any internal file unless necessary to fulfill a request.

How long do we keep your personal data?
Data will be retained as long as the USER does not withdraw their consent, as set out in this privacy policy.

Who do we share your personal data with?
Data provided by the USER through the CONTROLLER’s social networks may be publicly visible depending on the services used and accessible to other users.

The USER can control what is made public through their profile settings, including granted permissions or third-party applications.

No data will be shared with third parties outside the social network, except as necessary to fulfill the intended purposes, with service providers under confidentiality and data processing agreements as required by privacy regulations.

What are your rights?
The USER has the following rights, limited to information controlled by the CONTROLLER: • Right to withdraw consent at any time • Right to access, rectify, transfer, and delete data and to limit or oppose processing • Right to file a complaint with the supervisory authority (www.aepd.es) if processing is considered unlawful

Contact details to exercise rights:
MESCOMUNITAT 2015, S.L., Països Catalans, 1 - 17820 BANYOLES (Girona). Email: info@mescomunitat.com
Data Protection Officer: Jessica Jimenez Burguillos - dpo@mescomunitat.com

PROFILE USAGE
The CONTROLLER will: • Access public profile information • Post content already published by the CONTROLLER to the USER’s profile • Send personal messages via the social network • Post page updates on the USER’s profile

The USER may always manage connections, remove unwanted content, and control sharing settings via their privacy configuration.

POSTS
Once following or joining the CONTROLLER’s social network, the USER may post comments, links, images, photos, or multimedia content. The USER must own the content or have permission from affected third parties.

Posting content that is offensive, unethical, in bad taste, or violates intellectual property, image rights, or law is strictly prohibited. The CONTROLLER reserves the right to remove such content and may block the USER permanently.

The CONTROLLER is not responsible for content freely posted by USERS. The USER remains primarily responsible for their own privacy.

Images posted on the social network will not be stored in any CONTROLLER file but will remain on the platform.

DATA OF MINORS OR INDIVIDUALS WITH SPECIAL NEEDS
Access and registration on the CONTROLLER’s social networks is prohibited for individuals under 14. If the USER has special needs, legal guardian involvement is required, with valid proof of representation.

The CONTROLLER is not liable for use by minors or individuals with special needs. The CONTROLLER’s social networks do not knowingly collect data from minors. If the USER is underage, they must not register or provide personal information.