Privacy policy
IMPORTANT: we invite you to read this Privacy Statement carefully to find out why we collect your personal data and how that data is processed by Acordia ACR, S.L., Mallorca, 264, 2ª 2ª, 08008 Barcelona.
This policy is subject to change, so we recommend that you check it each time you visit us.
This Privacy Policy was last modified on 16/12/2024.
SCOPE
This online privacy statement of Acordia ACR, S.L. is public and accessible to all users and clients of Acordia ACR, S.L., and applies to all websites of Acordia ACR, S.L., with acordiaacr.com being the main site or domain.
It also applies to those documents or messages issued by Acordia ACR, S.L. that link to this privacy policy or statement or, where applicable, indicate that you should access it so that you can find out how Acordia ACR, S.L. uses your personal data.
Below, we provide you with general information on the uses of your personal information. These uses and processing operations are then described in detail.
PERSONAL INFORMATION WE COLLECT
Information on the use of personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, which adapts the Regulation to the Spanish legal system and supplements and develops its provisions (LOPDGDD).
Acordia ACR, S.L. respects your right to privacy and applies all current regulations in order to protect the personal data of its clients and users.
Your personal data is processed with the utmost confidentiality, and Acordia ACR, S.L., as Data Controller, has adopted the technical and organisational measures necessary to guarantee the confidentiality and security of personal data, preventing its alteration, loss, unauthorised processing or access.
So that you can receive information and, where applicable, book or use the products and services that Acordia ACR, S.L. offers through its site(s), you need to provide us with certain personal data, so that we can personalise our services and tailor them to your interests and needs.
We remind you that it is the user’s duty to inform Acordia ACR, S.L. of any change in the data that you have registered on our sites, so that it can be updated in the corresponding files.
To improve the services we offer you, it is possible that, once the service we provide has ended, you will receive a satisfaction survey. In it you will be asked to rate the services received and to give a brief comment on your experience.
We collect your personal information for several reasons:
- To handle service requests
- To perform the services
- To prepare quotes
- To send you status messages on ongoing services
- To send promotions that we consider of interest to our clients
- Quality and satisfaction surveys to improve the services provided by Acordia ACR, S.L.
In addition, we may collect information relating to your use of our websites through various technologies, such as the use of cookies.
You may withdraw this consent at any time, as well as exercise your rights of access, rectification, erasure, restriction of processing, to be forgotten, data portability and objection by the means indicated in the chapter “EXERCISE OF RIGHTS” of this document.
METHODS OF COLLECTION
Acordia ACR, S.L. collects personal data through various channels: on the website acordiaacr.com; at the Acordia ACR, S.L. telephone contact centre; at Acordia ACR, S.L.’s own physical offices, when requesting a quote or a service; and on the Acordia ACR, S.L. page.
In all cases, and wherever applicable, we will give you the option to refuse to let us use your data for advertising mailings or communications.
DISCLOSURE TO THIRD PARTIES
For the management and performance of the contract, it may be necessary (and mandatory for the provision of the service) for your data to be disclosed to providers such as:
- Group companies that Acordia ACR, S.L. works with.
- IT service companies, third parties that help us provide digital and e-commerce services, CRM, web analytics and search engines, among others.
- Third-party transport companies, for example postal services, couriers, etc.
- Third parties that help us provide IT services, such as platform providers, hosting services, and maintenance and support of our databases, as well as of our software and applications, which may contain data about you.
All of these third-party companies are ones we trust completely. They are only given the information strictly necessary to carry out the service you have contracted, and the contract signed between these companies and Acordia ACR, S.L. expressly provides that they may not use your personal data for any purpose other than the one you contracted. We always make our best efforts to ensure that all the third parties we work with keep your personal data secure.
You authorise us to disclose data such as your name, tax ID (NIF) and bank details, etc., to the financial institutions that Acordia ACR, S.L. works with, solely for the purpose of managing the transfers, collections and payments arising from the business relationship and the use of our services.
Personal data will not be disclosed to third parties, except where required by law or by court order.
INTERNATIONAL DATA TRANSFERS
An international data transfer involves the processing of personal data that entails its transmission outside the European Economic Area (EEA). This may involve either the assignment or disclosure of data or the processing of data on behalf of the controller established in Spain.
The following parties are involved in an international transfer:
- Data exporter: a natural or legal person, public or private entity, or administrative body established in Spain that, in accordance with the General Data Protection Regulation (GDPR), transfers personal data to a country outside the EEA.
- Personal data importer: a natural or legal person, public or private entity, or administrative body that receives the data in the country of destination, acting as controller, processor or third party in an international data transfer.
In order to provide the service you have contracted with us, it may be necessary to transfer and store your personal data in a country outside the EEA. Likewise, your information may be handled by staff outside this region who work for us or for our service providers.
Acordia ACR, S.L. transfers personal data outside the EEA securely and in compliance with the law. Because some countries have no regulations governing the use and transfer of personal data, we take measures to ensure that third parties comply with the commitments in this Policy. These measures may include reviewing the privacy and security standards of third parties and signing specific contracts based on the standard contractual clauses adopted by the European Commission.
Service providers located outside the EEA, such as Facebook, Inc. or Google, LLC, may access your personal data. These providers adhere to the “Privacy Shield”, which commits them to protecting your personal data under the rules and safeguards established by the European Union.
PROCESSING AND USES
You may withdraw at any time the authorisation you have given to allow your data to be used in a specific way. Such withdrawal of authorisation shall not have retroactive effect.
Provision and management of the contracted service and invoicing
Without the requested data, it will not be possible to provide the service.
Personal data, as well as data relating to the service, will be kept in our files for the time necessary to honour the warranty on the service provided (5 years).
Data relating to the invoicing of the service will be kept in our files for the time necessary to comply with the legal and tax obligations applicable to the services provided by Acordia ACR, S.L. (5 years plus the current year).
In relation to this data processing, you may, if you consider it necessary, exercise the following rights:
- Access, to find out what data we hold and process.
- Rectification, if you consider that the data is incorrect or has changed (for example, your contact details).
Handling of enquiries
Personal data, contact details and images will be kept in our files for the time necessary to handle the request made.
In relation to this data processing, you may, if you consider it necessary, exercise the following rights:
- Access, to find out what data we hold and process.
- Objection and restriction, so that personal data is not processed -from the moment your request is processed- for the purpose of the information service.
- Rectification, if you consider that the data is incorrect or has changed.
- Erasure, if you withdraw your consent to this processing.
Quality Service.
To meet our quality commitments to clients, we occasionally carry out a survey to find out how satisfied our clients and users are with the work performed, so that we can improve our services.
These surveys are carried out by electronic means (you receive an e-mail with a link to the website where the survey is completed) and they do not collect any personal data beyond what you have previously provided to us.
In any case, the personal contact data collected in order to send you the quality survey will only be used if you give us your explicit consent.
Personal data relating to this processing will be kept for this purpose for 3 months.
In relation to this data processing, you may, if you consider it necessary, exercise the following rights:
- Objection and restriction, so that personal data is not processed -from the moment your request is processed- for the purpose of the quality service.
- Rectification, if you consider that the data is incorrect or has changed.
Information about the services of Acordia ACR, S.L.
To keep you informed about the services provided by Acordia ACR, S.L. and about occasional promotions, we need to process your contact details.
Moreover, each communication sent will offer you the opportunity to unsubscribe; in addition, you may exercise the rights set out below at any time.
In relation to this data processing, you may, if you consider it necessary, exercise the following rights:
- Objection and restriction, so that personal data is not processed -from the moment your request is processed- for the purpose of the information service.
- Rectification, if you consider that the data is incorrect or has changed.
- Erasure, if you withdraw your consent to this processing.
Preparation of quotes
The data you provide to us for the preparation of the quote will be kept in our files until you inform us that you decline to proceed, or for 2 years, after which it will be deleted. Otherwise, it will become part of the Provision of the Service processing.
In relation to this data processing, you may, if you consider it necessary, exercise the following rights:
- Access, to find out what data we hold and process.
- Rectification, if you consider that the data is incorrect or has changed (for example, your contact details).
- Erasure, if you definitively decide against the work quoted by Acordia ACR, S.L.
Review of job applications
Regarding the data you provide to us in order to take part in our recruitment processes, if you are selected for the next stage, we will let you know of that decision. The data you provide will be kept for a maximum of 1 year, after which it will be deleted.
In relation to this data processing, you may, if you consider it necessary, exercise the following rights:
- Access, to find out what data we hold and process.
- Rectification, if you consider that the data is incorrect or has changed (for example, your contact details).
- Erasure, if you withdraw your consent to this processing.
Browsing
When browsing Acordia ACR, S.L., non-identifiable data may be collected, which may include IP addresses, geographical location (approximate), a record of how the services and sites are used, and other data that cannot be used to identify the user. Non-identifying data also includes data relating to your browsing habits through third-party services.
We use this information to analyse trends, administer the site, track users’ movements around the site and gather demographic information about our user base as a whole.
reCAPTCHA service
The browsing IP address will be sent to Google as part of the system used to distinguish a human from an automated form-filling and submission system.
Full details of Google’s privacy policy can be read at https://policies.google.com/privacy?hl=es
reCAPTCHA
We use the reCAPTCHA service of Google Inc. (Google) to protect the data submitted through the forms on our users’ pages. This service makes it possible to distinguish data submitted by people from automated messages and involves the transmission of the IP address and other data required by Google for the use of the reCAPTCHA service. For this purpose, the data will be transmitted to Google so that it can be used. The IP address will be encrypted by Google within European Union member states as well as in states associated with the European Economic Area. Only in exceptional cases will IP addresses be transmitted to a Google server in the United States for encryption. On behalf of the owner of this website, Google will use this information to assess users’ use of the service. The IP address transmitted by reCAPTCHA will be kept separate from other Google data. Google’s privacy policy applies to this data. Full details of Google’s privacy policy can be read at https://policies.google.com/privacy?hl=es
By using the reCAPTCHA service, the user consents to the processing of the data about them that Google holds, in the manner and for the purposes set out above.
GOOGLE ANALYTICS
This website uses Google Analytics, a web analytics service provided by Google, Inc., a Delaware company whose head office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”).
Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted directly to, and stored by, Google on servers in the United States. Google will use this information on our behalf to track your use of the website, compile reports on website activity and provide other services relating to website activity and internet usage.
Google may transmit this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
You may refuse the processing of data or information by rejecting the use of cookies through the appropriate settings in your browser; however, please note that if you do so you may not be able to use the full functionality of this website. By using this website, you consent to the processing of information about you by Google in the manner and for the purposes indicated above.
EXERCISE OF RIGHTS
In line with our philosophy, we consider the protection of your personal data to be fundamental. We therefore inform you that, with regard to the privacy of your data, you have the following rights:
- Right to transparency of information, which means receiving all the information about how we use your personal data in a transparent, clear and plainly written way. If you wish to exercise this right, please use one of the channels listed at the end of this section.
- Right of access: You have the right to know and to access all the personal data that our company holds about you. If you wish to exercise this right, please use one of the channels listed at the end of this section.
- Right to erasure (also known as the Right to be Forgotten). Everyone has the right to request the removal of their personal information from internet service providers, provided there is no legitimate reason for that data to be kept. If you request it, we are obliged to notify third parties with whom we have shared your data of the need to delete any link to, copy of or replica of that information. The purpose is to permanently remove from the web and from search engines any trace of the data of the person who wishes to be “forgotten”. If you wish to exercise this right, please use one of the channels listed at the end of this section.
- Right to restriction: You have the right to ask our company to restrict the processing of your data where it is inaccurate, the processing is unlawful, it is no longer necessary for our purposes, or if you have lodged an objection under Article 21(1) GDPR, while it is determined whether our company’s legitimate grounds override your interests. If you wish to exercise this right, please use one of the channels listed at the end of this section.
- Right to data portability: The European Data Protection Regulation, together with Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, which implements it in Spain, and Law 34/2002 of 11 July on information society services and e-commerce (LSSI), provide for the possibility of transmitting, transferring, copying or moving data from our databases to others. This gives you the right to have your personal data transferred directly, where technically possible. If you wish to exercise this right, please use one of the channels listed at the end of this section.
- Right to rectification: You have the right to have your personal data rectified where it is inaccurate or no longer valid, or to have it completed where it is incomplete. If you wish to exercise this right, please use one of the channels listed at the end of this section.
- Right to object: You may object at any time to our company processing your personal data. If you wish to exercise this right, please use one of the channels listed at the end of this section.
You may send written communications to exercise your rights to:
Acordia ACR, S.L.
B59063529
registered in the Barcelona Commercial Registry, volume 25,440, folio 182, sheet B89,788, entry 3, by sending your requests to the following address:
Acordia ACR, S.L.
Mallorca, 264, 2ª 2ª, 08008 Barcelona
You may also send your communications through the following channels:
- In person, at our offices
- By email at rgpd@acordiagroup.com
- By phone on +34 932 721 411, where we are at your disposal to assist you.
Data requests submitted may require you to provide additional documentation needed to confirm your identity.
You may also lodge a complaint directly with the Spanish Data Protection Agency (AEPD) in the following situations:
- If you have requested to exercise your rights and have not received a response from the data controller within one month.
- If you have received a response but do not agree with it.
- If you believe the data controller has infringed data protection regulations in any of its activities.
In any case, you can obtain general information on privacy and personal data protection at the following link: www.agpd.es