1. Initial information

CREATREATS, SLU considers your personal information very important. For this reason, we treat it confidentially and securely. We are committed to guaranteeing the privacy of personal data at all times and will not collect unnecessary information.

You do not need to register to access our website. If you require further information, you can contact us using the form on our website, provided you agree to our privacy policy, which you must accept to expressly consent to the processing of your data for the stated purposes.

In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, we provide you with information on the processing of your data through this Privacy Policy.

2. Who processes the data?

Identity: CREATREATS, SLU

NIF: B72446255

Address: Avda. Europa, 21, 1st floor, Office 12 – 08401 Granollers (Barcelona)

Email: info@creatreats.com

3. What data do we collect, for what purposes, and for how long?

DATA PROCESSING	PURPOSE AND LEGITIMACY	STORAGE PERIOD
How the Website Works	To manage the proper functioning of the website, as well as its operation: personal data will be processed to the extent strictly necessary for the purpose of providing and guaranteeing the security of the application and the information, the legitimate basis being the legitimate interest pursued by the controller, in accordance with art. 6.1.f) of the GDPR	The data collected will be kept for the time strictly necessary to fulfill the purpose for which it was collected, and in any case to determine any possible liabilities that may arise from this purpose, taking into account the periods established in the corresponding regulations
Contact	To respond to requests and/or queries made by the user, the legitimacy of the processing being the express consent in accordance with art. 6.1.a) of the GDPR.	The data will be kept until the request has been resolved. In any case, it may be kept to determine any possible liabilities that may arise from this purpose.
Email management	The purposes of data processing are to respond to inquiries received, as well as the management of the commercial and/or professional relationship, the legal basis being the contractual relationship between the Data Controller and the interested party, in accordance with art. 6.1.b) of the GDPR	The data collected will be kept for the time strictly necessary to fulfill the purpose for which it was collected, and in any case to determine the possible responsibilities that may arise from this purpose, taking into account the periods established in the corresponding regulations
CV Management	The data will be processed for the purpose of attending to your request and forming part of the selection process, the legitimacy of the processing being the express consent in accordance with art. 6.1.a) of the GDPR.	Data will not be kept longer than necessary for the purposes for which it was collected, unless there is a legal obligation to do so. In this case, it will be kept for a maximum period of two years.

4. Commercial/informational communications

CREATREATS, SLU forms a group of companies with PROVITAL, SA, whose details are as follows: PROVITAL, SA | A08584997 | Pol. Ind. Can Salvatella – Gorgs Lladó, 200 - 08210 Barberà del Vallès (Barcelona) | info@weareprovital.com

The user is informed that for the sending of communications both entities will jointly process personal data, acquiring the status of joint controllers of the processing.

The legitimate basis for receiving commercial communications is the consent that the user gives by selecting the box enabled for this purpose.

Consent can be withdrawn at any time by sending an email to info@creatreats.com or info@weareprovital.com , interchangeably.

5. To whom will the data be communicated?

Unless we are subject to regulations that legally require us to transfer your personal data, or you give us your express consent, we will not transfer your personal data to third parties.

 

6. Are international data transfers carried out?

No international data transfers are made to third countries outside the European Union.

7. What rights do you have as a user and how can you exercise them?

• Right of access

As a user, you can ask us to explain what we do with your personal data.

In addition, you can request information from us about the purpose of processing your personal data, how long we keep your data, what rights you have as a user, whether your data has been transferred to a third country or an international organization, the existence of automated decisions or whether there is profiling on the website, among other things.

• Right of rectification

If the personal data you have provided to us is inaccurate or incomplete, you have the right to correct or complete it. Please contact us and we will correct the data you request.

• Right to restriction of processing

As a User, you can request the limitation of the processing of your personal data when:

• You may contest the accuracy of your personal data, for a period that allows us to verify its accuracy.
• If the processing is unlawful and you oppose the deletion of your personal data and, instead of deleting it, request that its use be limited.
• If we no longer need your data for the purposes of the processing, but you need it to formulate, exercise or defend claims.

 

• Right of erasure

You can request that we delete your personal data immediately. We are obligated to delete this data immediately when it is no longer necessary for the purposes for which it was collected. You can also request that we delete your data when you change your mind about your consent, object to its processing, there are no legitimate grounds for processing, your data is being processed incorrectly, it must be erased to comply with a legal obligation, or your data was obtained in connection with a legitimate offer.

• Right to information

If you have exercised your right to rectification, erasure or restriction, we are obliged to inform all recipients to whom your personal data has been communicated about this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort.

As a User, you have the right to be informed by the data controller about who these recipients are.

• Right to data portability

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. Furthermore, you have the right to transmit this data to another controller without our being able to prevent you from doing so.

• Right to object

As a user, you have the right to object at any time, for reasons arising from your particular situation, to our use of the personal data made available to us.

We will stop processing your personal data unless we have compelling legitimate grounds for using it, which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

• Right to withdraw consent regarding data protection

As a User, you have the right to change your data protection consent statement at any time. This change of decision regarding consent will not affect the lawfulness of the processing that took place based on the consent given before its revocation.

• Automated individual decisions, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

• Right to lodge a complaint with a supervisory authority

As a User you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of infringement, if you consider that the processing of personal data creates a breach of the GDPR.

• Where can you exercise your rights?

You can request to exercise your rights by sending an email to: info@creatreats.com .

 

8. Is it mandatory to provide all the information requested in the data collection forms?

Regarding the website forms, you must complete those marked as "required". Failure to provide the required personal data, or providing it only partially, may prevent CREATREATS, SLU from processing your requests. Consequently, CREATREATS, SLU will be exempt from any liability for the non-provision or incomplete provision of the requested services.

The personal data that the User provides to CREATREATS, SLU must be current so that the information in the records is up-to-date and error-free. The User is responsible for the accuracy of the data provided.

9. What security measures do we have in place?

We inform you that we take care of and use your personal data in accordance with current regulations on data protection and information society services.

We have implemented the necessary technical and organizational security measures to guarantee the security of the User's personal data and prevent its alteration, loss, unauthorized processing and/or access in accordance with the state of technology, the nature of the data stored and the risks to which they are exposed, whether they come from human action or from the physical or natural environment, in accordance with the provisions of current regulations.