Privacy policy

3.1 PRIVACY POLICY WWW.GIRBAULAB.COM

1. Data processing controller

The body responsible for processing your personal data is Girbau S.A., with Tax ID No. A08276438 and registered office in Carretera de Manlleu, km 1, 08500, Vic, Barcelona.

If you have any questions or doubts relating to the processing of your personal data, do not hesitate to contact us via email: dataprotection@girbau.com.

2. Data processing

2.1 Queries and requests for information

Purpose

Girbau S.A. will process your data to manage and respond to queries or requests, regardless of the medium through which they are received. This includes providing you with information about our products and services, as well as ensuring that your concerns are attended to effectively.

Data communications

The data relating to this processing will not be shared with any third party.

Basis of legitimacy

Girbau S.A. will process the data based on the consent given by the user on contacting us for those purposes.

Girbau S.A. will also process the data based on the legitimate interest of responding to related information requests. This legitimate interest is underpinned in a weighted analysis, in which the benefits of the processing have been assessed, both for our organisation and the data processing controller, and for third parties. You may, at any time, request more information about this weighting by contacting our Data Protection Officer (DPO) at the address indicated in the corresponding section of this privacy policy. Similarly, we would like to remind you that you have the right to object to the processing based on the legitimate interest.

Retention period

The data processed to respond to the requests for collaboration or contracting shall be retained for as long as they are needed to properly manage the request and will comply with the applicable legal retention periods.

2.2. Commercial communications by electronic means

Purpose

Girbau S.A. will process the personal data solely for the purpose of sending commercial communications relating to our products, services and offers, as well as corporate information of the company, invitations to trade fairs, events and other relevant activities. This includes updates, news and promotions we think may be of interest to the user.

Data communications

The data relating to this processing will not be shared with any third party.

Basis of legitimacy

Girbau S.A. will process the data based on the consent given by the user when they subscribe to receive said commercial communications.

Retention period

The data processed for sending commercial communications will be retained for as long as the user gives their active consent and until they decide to unsubscribe from these communications, always complying with the applicable legal deadlines, or until we consider that they are no interested in them.

2.3 Newsletter

Purpose

Girbau S.A. will process the data solely for the purpose of sending you information about our offers, services and promotions relating to our products through our Newsletter. We are committed to ensuring that these communications are aligned with your needs and interests.

Data communications

The data relating to this processing will not be shared with any third party.

Basis of legitimacy

Girbau S.A. will process the data based on the consent given by the user on subscribing to the Newsletter

Retention period

The data processed for the Newsletter subscription will be retained for as long as the user gives their active consent and until they decide to unsubscribe from these communications, always in compliance with the applicable legal deadlines, or until we consider that they are no interested in them.

3. Data Communications

Without prejudice to that indicated in each one of the previous processings, personal data may be accessed by certain suppliers who provide services to our company, such as the sending of communications, storage of data or website management, but in no case will the data be processed for our own purposes.

4. International transfers

As a rule, we always try to process personal data in Europe or the European Economic Area, ensuring that compliance with the GDPR, on our part and on the part of our service providers, who process the data in our name and under our instructions.

However, we provide our services globally, therefore it is possible that we must also process data from other countries, who may or may not offer the same guarantees as the GDPR. In the event that it becomes necessary to make international transfers from the EU to countries outside of the EU that do not comply with these guarantees, we commit ourselves to always carry them out under the assurance that they are protected with the appropriate safeguards that may be included in (i) Standard clauses approved by the EU, (ii) Third-party certifications, (iii) Binding corporate rules or (iv) any other valid compliance mechanism with the regulations or approved by the competent authorities.

5. Rights of individuals

Whenever you provide us with your personal data, you have a set of rights that you can exercise in relation to their processing. Your rights and how you can exercise them are detailed below:

1. Access: You have the right to access your personal data and to request the correction of any information you consider inaccurate.
2. Rectification: You may request modification of your personal data whenever they are inaccurate or incomplete, to ensure that they are always up to date.
3. Deletion: You may request the deletion of your data whenever they are no longer required for the purposes for which they were collected.
4. Limitation: In certain circumstances, you have the right to request the limitation of the processing of your data. In that case, we will keep them only for the current period or for defending against legal claims.
5. Opposition: You may object to the processing of your data for reasons relating to your particular situation. If you decide to exercise this right, Girbau S.A. will stop processing your data, unless there are legitimate reasons that justify their processing or which become necessary for defending against legal claims.
6. Portability: You have the right to request the portability of your data in accordance with current regulations.

If you wish to exercise any of these rights, you may do so by contacting us by email at dataprotection@girbau.com or by sending a letter to the following address: Carretera de Manlleu, km 1 08500 Vic, Barcelona. Please ensure you state “Data Protection” on the envelope and include your full name and the email address associated with your account.

If you believe your rights have not been respected, you have the option to file a complaint with the Spanish Data Protection Agency or with other competent public bodies regarding personal data protection.

Updated in February 2025.