CZFB - Privacy policy and GDPR

PRIVACY POLICY

At Consorci Zona Franca de Barcelona, hereinafter (CZFB), we are committed to protecting privacy and ensuring the proper use of personal data.

For this reason, this Privacy Policy aims to inform you about the processing of personal data carried out by CZFB on this website and any of its subdomains.

Who is the Data Controller for your personal data? CZFB, CIF: Q0876006H, is the entity responsible for data processing.

You can contact us at:

Av. Parc Logístic, 2-10, 08040 BARCELONA
Phone: + 3493263811
Email: info@zfbarcelona.es
Data Protection Officer: DPD@zfbarcelona.es

What do we process your contact data for? We may process your personal data for different purposes:

Web forms and email:
The personal data collected through the contact form or when you send us an email will be processed on behalf of CZFB, as the data controller, to manage and respond to your request, questions, complaints, etc., or for the specific purpose stated in the web form.
Newsletter:
Additionally, if you explicitly authorize us by checking the corresponding box or through your express request, we will keep you informed about CZFB’s activities.
Applications: “Work with us.”
We may also process your data to consider your application for possible vacancies or job positions at CZFB that match your profile and experience, if you send them to info@zfbarcelona.es.
Social media:
If you use social networks where we have an official profile, we may process your data based on your interactions with our profile.
Video surveillance in buildings and facilities:
We have a video surveillance system to ensure the security of assets, facilities, and premises, as well as the people working or accessing them.

What is the legal basis that legitimizes the processing of your personal data?
The legal basis that legitimizes the processing of your data may vary:

In some cases, it may be your consent (subscription to a newsletter, filling out a web form, submitting a CV, etc.). When processing is based on consent, it will be considered unequivocally granted, with your action being a clear affirmative act that expresses consent.

In other cases, it may be the fulfillment of a legal obligation on our part, the execution of a contract, or the legitimate interest of the Data Controller (management of contact data and, if applicable, data related to the role or position held by individuals working in a legal entity). The provision of requested data is mandatory because it is essential to address your request or provide our services; if not provided, we will not be able to process your request or provide our services.

How long do we retain your personal data?
Personal data will be retained for as long as necessary to address the subject of the communication, and in cases based on consent, as long as it has not been revoked.

For CVs, if no updates are received within two years, they will be destroyed.

Furthermore, in order to ensure that the data in our files (digital or paper) is accurate, we will aim to keep it updated. Users can notify us of updates by email at DPD@zfbarcelona.es.

Who can be recipients or assignees of your personal data?
Personal data will not be transferred or communicated to third parties except when necessary to address the query and as provided by law.

What are your data protection rights and how can you exercise them?
The interested party can exercise the following data protection rights:

Right to access their personal data.
Right to request rectification or deletion.
Right to request the limitation of processing.
Right to object to processing.
Right to data portability.

These rights can be exercised by writing to Av. Parc Logístic, 2-10, 08040 BARCELONA or sending an email to DPD@zfbarcelona.es.

If acting through a legal or voluntary representative, a document proving the representation and the representative’s identification document must be provided.

If you believe your personal data protection rights have been violated, you can contact our Data Protection Officer at DPD@zfbarcelona.es or file a complaint with the Catalan Data Protection Authority (gencat.cat).

ADDITIONAL DATA PROTECTION INFORMATION

Web Forms and Emails:
Personal data collected through the contact form or email will be processed on behalf of CZFB to address your requests or information inquiries. The legal basis for processing is your consent (Article 6.1 a) GDPR). The data will not be shared with third parties, but may be transferred within the group for administrative management purposes under the legitimate interest (Article 6.1 f) GDPR).
Newsletter:
We process your data to keep you informed about CZFB activities. The legal basis for processing is your consent, which can be revoked at any time. The data will be kept until you unsubscribe.
Job Applications:
Personal data from job applications is processed to conduct selection processes. In the case of spontaneous applications, processing is based on your consent (Article 6.1 a) GDPR). CVs will be kept until updated or revoked. Unselected CVs will be deleted after two years.
Social Media:
CZFB may have profiles on social media platforms, and any interaction with these platforms may result in international data transfers. Personal data shared through social media plugins will be handled by the respective platform’s privacy policies.
Video Surveillance in Buildings and Facilities:
CZFB uses video surveillance to ensure security. The legal basis for processing is public interest (Article 6.1 e) and legitimate interest (Article 6.1 f) GDPR). Video footage is kept for up to one month.