Privacy Policy

01Data controller

CAL PADRI FREIXES, S.L., with address at C/ Joan Maragall, 4, 08380 Malgrat de Mar (Barcelona), NIF B66980152, telephone 937 654 647 and email info@creublava.net.

Data Protection Officer: SEGURIDAD Y PRIVACIDAD DE DATOS, S.L. · Tel. 963 122 868 · infodpo@forlopd.es.

02Purposes of processing

We process the personal data of website users in order to:

• Handle the requests, complaints and incidents you send us through the website’s contact channels.
• Understand browsing behaviour in order to detect possible cyberattacks on our website.
• Comply with the legal obligations applicable to us.
• Protect and exercise our rights or respond to claims.
• Where applicable, send you commercial communications about our services or industry news. If you do not give us your authorisation, we will not be able to send them to you.
• Where applicable, manage your participation in competitions and promotions.
• Where applicable, send you satisfaction or quality surveys.
• Manage the scheduling of the appointment you request.

03Legal basis for processing

• Your consent to the processing of your data for the stated purposes. If you do not provide us with your data, we will not be able to process it for those purposes.
• Compliance with the legal obligations applicable to us. In this case you may not object to the processing.
• Our legitimate interest in protecting our image and our business by preventing attacks on the website. In this case you may not object to the processing, although you may exercise the rights indicated below.

04Contact form and online appointments

The data you send us via the contact form is stored on our own server and is consulted only by authorised Creu Blava staff, in order to reply to you.

Online appointments are managed by an external medical appointment scheduling provider. When you request an appointment through its platform, its terms and conditions and its privacy policy also apply.

05Third-party tools

• Google reCAPTCHA: on the contact form, to verify that it is submitted by a person and to prevent spam, on the basis of our legitimate interest in protecting the website. It is provided by Google, which applies its privacy policy.
• Google Analytics: only if you accept analytics cookies, to measure use of the website in aggregate form. More information in the cookie policy.
• Google Ads: only if you accept advertising cookies, to find out how many visits and contact requests come from our Google ads. More information in our cookie policy.

06Retention periods

We will retain your data for as long as necessary to fulfil the purposes for which it was collected.

When it is no longer necessary, it will be kept blocked, at the disposal of the competent public authorities and bodies, judges and courts or the Public Prosecutor’s Office, for the limitation period of any actions that may arise or for the legally established retention periods.

07Automated decision-making and profiling

The website does not make automated decisions or carry out profiling.

08Recipients

In the course of processing, we may disclose your data to:

• Judges and courts.
• State Security Forces and Corps.
• Other competent public authorities or bodies, where we are legally obliged to do so.
• Where applicable, the data processors that provide services to us.

09International transfers

Google reCAPTCHA and, if you accept it, Google Analytics and Google Ads may involve the processing of browsing data by Google LLC in the United States. Google adheres to the EU-U.S. Data Privacy Framework, which the European Commission recognises as an adequate safeguard. Other than in these cases, we do not carry out international data transfers.

10Social media

CAL PADRI FREIXES, S.L. has social media profiles so that you can keep up to date with our news. Unless we ask you for your data directly (for example, in a competition or promotion), your data will belong to the relevant social network, so we recommend that you read its terms of use and privacy policies and configure your preferences:

• Facebook privacy policy
• Instagram privacy policy

11Your rights

You may request further information about the processing of your data and exercise, at any time and free of charge, the rights of access, rectification and erasure, restriction of processing, objection and portability (where technically possible), withdraw the consent given and, where applicable, the right not to be subject to decisions based solely on automated processing.

To do so, write to us at the postal address or email address indicated at the beginning. We may ask you for your DNI (national identity card) or another equivalent document to prove your identity, provided that this cannot be done by less intrusive means.

If you consider that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

In accordance with Article 21 of the LSSI-CE, if you do not wish to receive further information about our services, you may unsubscribe by writing to info@creublava.net with the subject ‘BAJAS’.

12Accuracy of data

You guarantee that the data you provide to us is true, accurate, complete and up to date, and you undertake to notify us of any change. You will be liable for any damage or loss arising from breach of this obligation.

If you provide us with third-party data, you declare that you have their consent and undertake to pass on to them the information contained in this policy.

13Amendments

This policy may be amended due to legal requirements, to adapt it to the instructions of the Spanish Data Protection Agency (AEPD) or due to changes to the website. We advise you to consult it periodically.

If you have any questions about this policy, you may contact CAL PADRI FREIXES, S.L. at the postal address or email address indicated at the beginning.