Following the principles of lawfulness, fairness, and transparency, we provide you with this Privacy Policy.
Who is responsible for the processing of your data?
| Controller | ROMAN Y ASOCIADOS S.A. |
| Tax ID | A-59046763 |
| Registered address | Avinguda Diagonal, 575, Module 2, 6th Floor, L’Illa Diagonal, 08029 Barcelona |
| BARCELONA@ROMANYASOCIADOS.ES | |
| Phone | 934142340 |
| Data Protection Officer | LOPD@ROMANRM.COM |
For what purpose do we process your personal data?
At ROMAN Y ASOCIADOS S.A., depending on the category of data subject, we process the information you provide us for the following purposes:
| Data subjects | Processing purposes |
| Potential clients | Manage the potential commercial and/or professional relationship, manage the sending of requested information and/or respond to inquiries, provide offers of our services and/or products of interest. |
| Clients | Manage the commercial and/or professional relationship, provide offers of our services and/or products of interest. |
| Suppliers | Manage the commercial and/or professional relationship. |
| Candidates | Manage the recruitment process. |
| Website users | Manage the analysis of your browsing data. |
What is the legal basis for processing your data?
The legal basis for processing your personal data, depending on the category of data subject, may be:
| Data subjects | Legal basis (Article 6 GDPR) |
| Potential clients | Art. 6.1.b GDPR: application, at the request of the data subject, of pre-contractual measures (quotes, engagement letters, service offers…). |
| Art. 6.1.f GDPR: legitimate interest (sending requested information, responding to inquiries…). | |
| Art. 6.1.a GDPR: consent of the data subject (providing offers of our services and/or products). | |
| Clients | Art. 6.1.b GDPR: performance of a contract to which the data subject is a party. |
| Suppliers | Art. 6.1.b GDPR: performance of a contract to which the data subject is a party. |
| Candidates | Art. 6.1.a GDPR: consent of the data subject. |
| Website users | Art. 6.1.a GDPR: consent of the data subject. |
The data we request from you is adequate, relevant, and strictly necessary, and you are under no obligation to provide it. However, failure to provide it may affect the purpose of the service or make it impossible to provide it.
How long will we retain your personal data?
Your data will be retained for the minimum time necessary for the proper provision of the service offered, as well as to meet any responsibilities that may arise from it and any other legal requirement.
To which recipients will your data be disclosed?
ROMAN Y ASOCIADOS S.A. will not disclose your data to any third party unless expressly informed.
Additionally, we inform you that certain data, by virtue of current regulations or the contractual relationship you maintain with ROMAN Y ASOCIADOS S.A., may be disclosed to:
- Banks and financial institutions for the collection of contracted services and/or purchased products.
- Public administrations with competence in the sectors of activity of ROMAN Y ASOCIADOS S.A., when required by current regulations.
Are international data transfers carried out?
ROMAN Y ASOCIADOS S.A. may carry out international data transfers from this Website derived from the acceptance of cookies:
Google LLC and Google Ireland Limited transfer data to the United States based on the user’s consent when accepting cookies.
By accepting cookies from these entities, the user consents to their personal data collected through the use of cookies being transferred to the United States, a country that offers a level of protection comparable to that of the European Union, only for those U.S. companies included in the EU–U.S. Data Privacy Framework (hereinafter, “DPF”). If U.S. companies are not adhered to the DPF, it will be understood that they do not guarantee a level of protection comparable to the European one.
If the user does not consent to this international data transfer to the United States, they must reject these cookies, and the functionalities or services offered through these cookies will not be provided or obtained.
You can find information about transfers to third countries, where applicable, carried out by the third parties identified in the cookies policy in their respective policies.
What are your rights when you provide us with your data?
The data protection rights that data subjects may exercise, where applicable, are:
| Right | What does it consist of? |
| Right of access | To consult what personal data the Controller processes. More information, here. |
| Right to rectification | To modify personal data processed by the Controller when it is inaccurate, incorrect, or incomplete. More information, here. |
| Right to object | To request that the Controller does not process your personal data for certain specific purposes. More information, here. |
| Right to erasure | To request that the Controller deletes your personal data. More information, here. |
| Right to restriction | To request that the Controller restricts the processing of your personal data. More information, here. |
| Right to data portability | When processing is carried out by automated means, to receive your personal data in a structured, commonly used, machine-readable and interoperable format, and to transmit it to another controller. More information, here. |
| Right not to be subject to automated individual decisions | This right aims to ensure that you are not subject to a decision based solely on the processing of your data, including profiling, that produces legal effects on you or significantly affects you in a similar way. More information, here. |
| Right to lodge a complaint with the competent authority | To file a complaint against the Controller with the Spanish Data Protection Agency (AEPD) if the user considers that the entity has processed their personal data in breach of the regulations. |
Data subjects may exercise their data protection rights by sending a written communication to the registered address of ROMAN Y ASOCIADOS S.A. at Avinguda Diagonal, 575, Module 2, 6th Floor, L’Illa Diagonal, 08029 Barcelona or by email to: LOPD@ROMANRM.COM.
You may use the following templates to exercise your rights:
More information on the exercise of rights on the official website of the Spanish Data Protection Agency (AEPD), at the following link.
Can I withdraw consent?
You have the possibility and the right to withdraw consent for any specific purpose granted at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
Where can I file a complaint if I consider my data is not processed correctly?
If any data subject considers that their data is not processed correctly by ROMAN Y ASOCIADOS S.A. or that requests to exercise rights have not been satisfactorily addressed, they may file a complaint with the corresponding data protection authority, the Spanish Data Protection Agency (AEPD) being the competent authority in Spain. More information on its website: www.aepd.es.
Security and updating of your personal data
In order to safeguard the security of your personal data, we inform you that all necessary technical and organizational measures have been adopted to guarantee the security of the personal data provided. All of this to prevent its alteration, loss, and/or unauthorized processing or access, as required by regulations, although absolute security does not exist.
It is important that, in order for us to keep your personal data up to date, you inform us whenever there is any modification to it.
Confidentiality
ROMAN Y ASOCIADOS S.A. informs you that your data will be treated with the utmost care and confidentiality by all personnel involved in any stage of processing. We will not transfer or disclose your data to any third party, except in legally provided cases, or unless expressly authorized by the data subject.