Privacy policy
In compliance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the “GDPR”) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (hereinafter, the “LOPD-GDD”), FORNÉS & SALAS AUDITORS, S.L. (hereinafter, “FORNÉS & SALAS” or the “Data Controller”) hereby informs you of the following in relation to the personal data you voluntarily provide to us through aufys.com:
DATA CONTROLLER: FORNÉS & SALAS AUDITORS, S.L., Tax ID No. B08711293, registered office at Av. Diagonal, 472-476, esc. A, 3º 1ª, 08006 Barcelona (BARCELONA) and contact address administracion@aufys.com, is the Controller of your personal data.
For any matter relating to this Privacy Policy, you may contact FORNÉS & SALAS at the postal address indicated above or at the email address provided for this purpose: administracion@aufys.com.
DATA PROTECTION OFFICER: The Data Controller informs you that it has appointed a Data Protection Officer (hereinafter, the “DPO”) to resolve any query, complaint or suggestion regarding the processing of your personal data. You may contact the DPO at the following address: administracion@aufys.com.
TYPES AND SOURCE OF PERSONAL DATA: FORNÉS & SALAS will process the following personal data:
DATA PROVIDED BY THE USER: This is the personal data you voluntarily provide to us through this Website, whether by means of the contact form, through the corporate email address provided or, where applicable, through the registration facility. In this case, the types of data processed by FORNÉS & SALAS are as follows:
- Identifying data: name, surname, national ID number, image, signature, etc.
- Personal characteristics data: gender, date of birth, etc.
- Contact data: postal address, corporate email address, personal email address, telephone number, etc.
- Professional and/or academic data: job title, professional category, corporate data relating to the company you work for or collaborate with, education, professional experience, other employment details, tax information for invoicing and information included in your CV.
- Economic, financial and billing data: bank details, account number and other financial information linked to the contractual or commercial relationship.
- Commercial information data: information relating to the services in which the User expresses an interest, requests for information, newsletter subscriptions, etc.
- Data contained in the user’s messages or communications: queries, suggestions, complaints or other information provided through the forms available on the Website or through the contact channels provided.
- Social media data: username, user profile, messages, interactions, participation in campaigns and content shared or sent voluntarily by the user.
DATA COLLECTED THROUGH COOKIES AND/OR SIMILAR TECHNOLOGIES: This is the data stored as a result of your browsing on our Website. You can find further information on the categories and types of data processed at https://www.aufys.com/en/cookies-policy/.
Unless you notify us otherwise, we will understand that the data provided has not been modified, that you undertake to notify us of any change, and that we have your consent to use it for the purposes stated above.
The forms made available to you may be completed in the language of your choice; however, FORNÉS & SALAS accepts no responsibility for errors or for any inability to deal with your request arising from the use of an unsuitable language. Completing the forms, as well as any other questionnaire that may be provided in the future, is entirely optional; however, refusing to provide certain data may make it impossible for us to meet your request.
PURPOSES AND LEGAL BASIS: The purposes and legal basis for the data processing carried out by FORNÉS & SALAS as Data Controller are exclusively those described below:
| Purpose | Description of the processing | Legal basis |
|---|---|---|
| Queries, requests for information and formal requests | To manage and respond to queries, requests for information, suggestions and complaints made by the User through the Website, email and the Data Controller’s social media channels. | – Express consent. – Legitimate interest of the Data Controller. – Legal obligation of the Data Controller. |
| Managing the relationship with prospective clients | Management of prospective clients, including sending the information requested and making initial commercial contact. | – Pre-contractual measures. |
| Managing the relationship with clients | Management and maintenance of the relationship with clients, tailoring the company’s commercial offering to the client’s particular characteristics, invoicing, accounting, etc. | – Performance of a contract. – Legal obligation of the Data Controller. |
| Provision of services | Management of the provision of the services contracted by the client. | – Performance of a contract. |
| Commercial and/or informational communications | Sending newsletters and commercial and informational communications of interest to you, and sending electronic bulletins with news relating to the Data Controller’s services. | – Express consent. |
| Managing the relationship with candidates | To manage applications when users send their CV, cover letters and letters of recommendation and/or take part in selection processes organised by the Data Controller, including the assessment of professional profiles and the conducting of interviews. | – Express consent. – Pre-contractual measures. |
| Management of events, training or corporate activities | To manage registration, participation and communications relating to events, training sessions, presentations or corporate activities organised by the Data Controller. | – Express consent. |
| Management of data protection rights | To manage and respond to the exercise of personal data protection rights, and to maintain up-to-date suppression lists so as not to contact the user where they so request. | – Legal obligation of the Data Controller. |
| Use of cookies | To enable the Website to function through the use of technical and functional cookies and, where the user authorises it, the use of personalisation, analytics and advertising cookies, in order to improve the browsing experience, compile statistics and carry out segmentation or promotional profiling. | – Express consent. |
| Anonymous statistics | To compile anonymous statistics on access habits and the activities carried out by users on the Website. | – Legitimate interest. |
| Satisfaction and improvement surveys | To carry out satisfaction surveys, quality studies and user experience analysis, in order to improve the Data Controller’s services and processes. | – Legitimate interest. |
| Legal obligations | Compliance with the Data Controller’s legal obligations. | – Legal obligation of the Data Controller. |
Your express consent may be withdrawn at any time, without this affecting the lawfulness of processing based on consent given before its withdrawal.
MINORS UNDER 18: Please note that the use of the forms available at aufys.com is restricted to users aged 18 or over. By using any of them, you warrant that you meet this requirement and accept any consequences arising should this not be the case.
USER RESPONSIBILITY: The User declares that all data provided is true, accurate, complete and up to date, and is liable for any direct or indirect damage or loss that may arise as a result of any breach of this obligation. Should the data provided belong to a third party, the User warrants that they have informed that third party of the matters set out in this document and obtained their authorisation to provide their data to FORNÉS & SALAS for the purposes indicated. The User will be liable for any false or inaccurate information provided through the Website owned by FORNÉS & SALAS and for any direct or indirect damage or loss this causes to FORNÉS & SALAS or to third parties.
AUTOMATED DECISION-MAKING: Please note that your personal data is not subject to automated decision-making. All decision-making processes within our organisation relating to such processing involve human intervention.
RECIPIENTS OF YOUR PERSONAL DATA: On the one hand, FORNÉS & SALAS does not envisage disclosing your personal data; however, should it need to communicate it to third parties for purposes other than those described in this section, it will first request your consent. On the other hand, your personal data may be communicated to:
(i) The competent Public Administrations, where necessary in order to fulfil the purposes of the processing, in accordance with the obligations to which FORNÉS & SALAS is subject given its nature and activity and in accordance with applicable legislation.
(ii) Public Authorities, Courts and Tribunals, where they so require.
(iii) Suppliers who need to access it in order to provide the services contracted by FORNÉS & SALAS, with whom it has entered into the Data Processor agreements required by data protection legislation.
INTERNATIONAL TRANSFERS: Furthermore, FORNÉS & SALAS does not carry out international transfers of personal data; however, it may contract services from suppliers located outside the European Economic Area that do not have legislation equivalent to that of the European Union. In such cases, FORNÉS & SALAS ensures that the contracting of those services complies with the requirements laid down by applicable data protection legislation, applying to such transfers the guarantees and safeguards necessary to protect the privacy of your personal data.
RETENTION PERIOD: Your personal data will be retained for as long as your relationship with the Data Controller continues and, once that relationship has ended for any reason, for as long as you do not notify us otherwise and for the applicable statutory limitation periods. In that case, it will be processed solely for the purpose of evidencing compliance with the Data Controller’s legal or contractual obligations. Once those limitation periods have elapsed, your data will be deleted or, alternatively, anonymised.
DATA SUBJECT RIGHTS:
FORNÉS & SALAS informs you that you may exercise your rights of restriction of processing, data portability, access, rectification, erasure, objection and not to be subject to automated individual decision-making, including profiling, by writing to administracion@aufys.com or to the postal address indicated above.
Likewise, if you consider that the processing of your personal data infringes applicable data protection legislation, you may lodge a complaint with the Supervisory Authority, in this case the Spanish Data Protection Agency (Agencia Española de Protección de Datos), through its electronic register or postal address.