ETR Logistic PRIVACY POLICY AND DATA PROTECTION

PRIVACY POLICY AND DATA PROTECTION

Basic Information on Data Protection

Data Controller: ROGER BORRULL LOPEZ
Purpose: To respond to your request for information, perform the service contract, and send commercial communications with your consent.
Legal Basis: Performance of a contract and consent of the data subject (Art. 6.1(a) and (b) GDPR).
Recipients: Data will not be transferred to third parties, except where legally required.
Rights: You have the right to access, rectify, and delete your data, as well as other rights indicated in the additional information, which you may exercise by contacting AVD. BALMES Nº 8, 08711 ÓDENA, BARCELONA, SPAIN.

GENERAL INFORMATION:


For the purposes set out in the European Data Protection Regulation EU 2016/679 of 27 April, of the European Parliament and of the Council, in Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, and the rest of the applicable national legislation in force, ROGER BORRULL LOPEZ informs you that it fully complies with the current legislation on the protection of personal data, as well as with the confidentiality commitments inherent to its activity.

ROGER BORRULL LOPEZ informs you of the existence of an information processing system owned by ROGER BORRULL LOPEZ for the purposes of management, communication, and information. This system is described in the corresponding Record of Processing Activities (RPA).

SECURITY MEASURES AND LEVELS:


ROGER BORRULL LOPEZ has adopted the necessary measures to ensure the security of the information, as required by Article 32 of the GDPR, according to the nature of the personal data processed and the circumstances of the processing. The purpose of these measures is to prevent, insofar as possible and in accordance with the state of the art, any alteration, loss, unauthorized processing, or access, thereby guaranteeing the confidentiality, integrity, and availability of the data.

SCOPE OF APPLICATION:

The security measures described by ROGER BORRULL LOPEZ in the Record of Processing Activities shall be applied to all assets of the information processing system in which personal data are processed, for the purpose of complying with current legislation on data protection.

All personnel hired by ROGER BORRULL LOPEZ, as well as Data Processors, are required to comply with the aforementioned regulations, with special attention to their functions and obligations, including the duty of confidentiality. These obligations shall be duly established by ROGER BORRULL LOPEZ.

INTERNATIONAL DATA TRANSFERS:

ROGER BORRULL LOPEZ has its servers located in ______________. With regard to the personal data for which it is responsible and which are processed through this website, they are subject to the adequacy agreement between ___________ and the EU, which ensures the free flow of personal data between both parties, in accordance with Article 45 of the GDPR.

Likewise, the servers hosting the website of ROGER BORRULL LOPEZ comply with the appropriate safeguards set out in Article 46 of the GDPR.

DATA COLLECTION

Acceptance of these conditions requires the collection of essential data from the user in order to provide the services offered. These data will be requested personally through forms or through the website. At the time the data are collected, the user will be duly informed of their rights.

To ensure that the information contained in our processing system is always up to date and free of errors, we ask our clients and users to notify us, as soon as possible, of any modifications or corrections to their personal data.

EXERCISE OF RIGHTS:

To exercise the rights of access, objection, rectification, erasure, deletion, opposition, portability, or restriction of processing, you must contact ROGER BORRULL LOPEZ, at AVD. BALMES Nº 8, 08711 ÓDENA, BARCELONA, SPAIN, either in writing or by email at transport@etrlogistic.com.

You may also file a complaint before the Spanish Data Protection Agency (AEPD).

CONSENT:

The user gives consent for the use of their personal data by ROGER BORRULL LOPEZ in order to correctly provide the contracted services.

Completion of the form included on the website, or the sending of emails or other communications to ROGER BORRULL LOPEZ, implies the user’s express consent to the inclusion of their personal data in the aforementioned data processing system owned by ROGER BORRULL LOPEZ.

At the time this information is requested, the client or user will be informed of the recipient of the information, the purpose for which the data are collected, the identity and address of ROGER BORRULL LOPEZ, and the user’s right to exercise the rights of access, objection, rectification, cancellation, erasure, opposition, portability, restriction of processing, and the right to file a complaint before the Spanish Data Protection Agency (AEPD).

TRANSFER TO THIRD PARTIES:

ROGER BORRULL LOPEZ does not transfer personal data without the express consent of the data subjects. Such consent must be granted in each case, and data will only be transferred for the stated purpose and always with the user’s or client’s consent.

CONFIDENTIALITY AND PROFESSIONAL SECRECY:

All data collected in private communications between ROGER BORRULL LOPEZ and clients or users will be treated with absolute confidentiality. ROGER BORRULL LOPEZ undertakes the obligation of professional secrecy regarding personal data, the duty to safeguard them, and to adopt all necessary measures to prevent their alteration, loss, unauthorized processing, or access, in accordance with current legislation.

Furthermore, any information exchanged between the parties shall also be considered confidential, including information expressly designated as such or any information inherently confidential due to its content. The display of data over the Internet does not imply direct access to such data unless expressly authorized by the data subject in each instance.

We recommend that clients do not provide any third party with their identification details, password, or reference numbers that ROGER BORRULL LOPEZ may provide. Likewise, to guarantee the protection of professional secrecy between ROGER BORRULL LOPEZ and the client, the client/user must not disclose confidential information to third parties.

CHANGES TO THE SECURITY AND DATA PROTECTION POLICY:

ROGER BORRULL LOPEZ reserves the right to modify its security and data protection policy in order to adapt it to legislative or jurisprudential developments, as well as to changes that may result from……as well as those that may derive from existing sectoral codes or from strategic corporate decisions, with effect from the date on which such modification is published on the ROGER BORRULL LOPEZ website.

CONTACT ADDRESS:

The website WWW.ETRLOGISTIC.COM is managed by ROGER BORRULL LOPEZ, Tax ID (CIF) 47100206R.

The information processing system created is located at the registered office, which is established, for the purposes of this Legal Notice, at ROGER BORRULL LOPEZ, AVD. BALMES Nº 8, 08711 ÓDENA, BARCELONA, SPAIN, under the supervision and control of ROGER BORRULL LOPEZ, who assumes responsibility for adopting the technical and organizational security measures necessary to protect the confidentiality and integrity of the information, in accordance with the European Data Protection Regulation EU 2016/679 of 27 April, of the European Parliament and the Council; Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights; and the applicable national regulations and other relevant legislation.

In accordance with Law 34/2002 on Information Society Services and Electronic Commerce, ROGER BORRULL LOPEZ informs you that the broad definition of this Law includes, among these services, the provision of information through such means. In any case, the following legislation shall apply in this regard: the European Data Protection Regulation EU 2016/679 of 27 April of the European Parliament and the Council; Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights; and the applicable national legislation and its implementing regulations, especially concerning the collection of personal data, the information provided to data subjects, and the creation and maintenance of personal data processing activities.