In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and the Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you about the processing of the personal data you provide to us through the website perito.barcelona.
1. Data Controller
- Owner: Albert Vilardell Serra
- Professional Address: Carrer Numància, 95, Local 5, Distrito de Les Corts, 08029 Barcelona, Spain
- Email: info@perito.barcelona
- Website: https://perito.barcelona
2. Purpose of Data Processing
Your personal data will be processed for the following purposes, depending on the reason you have provided them to us:
- Contact Form and Email Communications: To manage and respond to requests for information, inquiries, service proposals, or any type of request made by the user through the contact means made available.
- Management of the Contractual Relationship: In the event of contracting our services, for administrative management, invoicing, and compliance with the contractual and legal obligations arising from the provision of said expert, audit, or consulting services.
- Browsing analytics by means of cookies: To understand in aggregate form how the website is used, by means of Google Analytics 4 configured with Consent Mode v2. Analytics cookies are only set if you accept them beforehand in the consent notice; if you do not, measurement continues in an anonymous, cookieless mode, with no persistent identifier capable of recognising your browser across visits.
- Anonymous technical performance measurement: To measure the loading and interaction performance of the pages (Core Web Vitals metrics) in order to detect and correct technical problems. This measurement uses no cookies and no identifier, and cannot recognise or follow a person.
Details of the cookies used, of the information stored in your browser and of how to withdraw consent are set out in the Cookie Policy.
3. Legal Basis for Data Processing
- For handling inquiries and information requests, the legal basis is your express consent, given by checking the acceptance box and submitting the form (Article 6.1.a of the GDPR).
- For the provision of contracted services, the legal basis is the performance of a contract for the provision of services and compliance with applicable legal obligations (Article 6.1.b and 6.1.c of the GDPR).
- For browsing analytics by means of cookies, the legal basis is your consent, given in the cookie notice (Article 6.1.a of the GDPR and Article 22.2 LSSICE). You may withdraw it at any time, with the same effort as you gave it, through the "Cookies" link in the footer.
- For the anonymous technical performance measurement, the legal basis is the Controller's legitimate interest in knowing and improving the technical operation of its website (Article 6.1.f of the GDPR). As no information is stored on or read from your device, this measurement requires no consent.
4. Data Retention Periods
- Data collected through the contact form will be kept as long as its deletion is not requested by the data subject.
- In the case of clients, the data will be kept for the duration of the contractual relationship and, subsequently, for the periods legally established for compliance with tax and legal obligations (generally, a minimum of 6 years).
5. Data Recipients
Your personal data will not be transferred to third parties, unless there is a legal obligation to do so.
Apart from that general rule, the browsing data processed with the analytics tool is disclosed to Google as the provider of Google Analytics, whether you accept cookies or measurement is carried out in anonymous, cookieless mode. This may entail an international transfer of data to a country outside the European Economic Area. [PENDING: confirm which Google entity is the contracting party for the European Economic Area and the applicable transfer mechanism — EU-US Data Privacy Framework or standard contractual clauses — under the data processing agreement entered into with Google.]
Save as indicated in the preceding paragraph, no international data transfers are made to countries outside the European Economic Area.
6. Rights of the Data Subject
You have the right to exercise your rights of Access, Rectification, Erasure, Restriction of processing, Portability, and Objection regarding your personal data at any time.
To exercise these rights, you can send a written communication to the email address info@perito.barcelona, clearly indicating the right you wish to exercise and attaching a copy of your ID card or equivalent identification document.
Furthermore, if you believe your rights have been violated, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD).
7. Security Measures
The Data Controller has adopted the necessary technical and organizational measures to ensure the security of personal data and to prevent its alteration, loss, or unauthorized access or processing.
8. Changes to the Privacy Policy
The Data Controller reserves the right to modify this policy to adapt it to new legislation or jurisprudence. In such cases, the changes introduced will be announced on this page with reasonable advance notice of their implementation.