Responsible – who is responsible for processing the data?

Identity: Krustagroup, S.A.U.
Registered office: C/100, no 33-35 Polígon Industrial Pratenc 08820 PRAT DE LLOBREGAT – BARCELONA)
CIF: A21008560
Phone: +34 932 237 575
E-mail: atencionalcliente@krustagroup.com
Contact: Customer Service
Domain name: https://www.krustagroup.com/

Purpose – what purpose do we use your data for?

In compliance with the provisions of European Regulation 2016/679 General Data Protection, we inform you that we will treat the data you provide for:

Manage the hiring of services through the Platform, as well as billing and delivery.

Periodically send communications on services, events and news related to the activities developed by Krustagroup, S.A.U., by any means (telephone, mail or email), unless otherwise indicated or the user opposes or revokes their consent.

Send commercial and/or promotional information related to the contracted services sector and added value for end users, unless otherwise indicated or the user opposes or revokes their consent.

To comply with legally established obligations, as well as verify compliance with contractual obligations, including fraud prevention.

Transfer of data to bodies and authorities, provided they are required in accordance with legal and regulatory provisions.

Categories of data – What data do we process?

Derived from the above-mentioned purposes, Krustagroup, S.A.U. manages the following categories of data:

Identifying data

Electronic communications metadata

Commercial information data. In the event that the user provides data from third parties, he/she declares to have their consent and undertakes to transfer the information contained in this clause to them, exempting Krustagroup, S.A.U. from any responsibility in this regard.

Nevertheless, Krustagroup, S.A.U. may carry out the verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.

Legitimation – what is the legitimacy for the treatment of your data?

The processing of data for the purpose of sending periodic newsletters on services, events and news related to our professional activity is based on the consent of the interested party, expressly requested to carry out such processing, in accordance with current legislation.

In addition, the legitimacy for the processing of data related to offers or collaborations are based on the consent of the user who submits their data, which may be withdrawn at any time, although this may affect the possible fluid communication and obstruction of processes you want to perform.

Finally, the data may be used to comply with the legal obligations applicable to Krustagroup, S.A.U.

Data Retention Period – How long will we keep your data?

Krustagroup, S.A.U. will keep the personal data of the users only for the time necessary for the realization of the purposes for which they were collected, as long as it does not revoke the consents granted. Subsequently, if necessary, you will keep the information blocked for the legally established periods.

Addressees To which addressees will your data be communicated?

Your data may be accessed by those providers who provide services to Krustagroup, S.A.U., such as hosting services, marketing tools and content systems or other professionals, when such communication is required by law, or for the execution of contracted services.

Krustagroup, S.A.U., has signed the corresponding treatment order contracts with each of the providers that provide services to

Krustagroup, S.A.U., with the aim of guaranteeing that these suppliers will process your data in accordance with the provisions of current legislation.

They may also be transferred to the State Security Forces and Corps in cases where there is a legal obligation.

Banks and financial institutions, for the collection of services.

Public administrations with competence in the sectors of activity, when so established by the regulations in force.

Information Security – What security measures do we implement to take care of your data?

In order to protect the different types of data reflected in this privacy policy, we will carry out the necessary technical security measures to prevent their loss, manipulation, diffusion or alteration.

Encryption of communications between the user’s device and the servers of Krustagroup, S.A.U.

Encryption of the information in the servers of Krustagroup, S.A.U.

Other measures to prevent access to user data by third parties.

In those cases in which Krustagroup, S.A.U. has service providers for the maintenance of the platform outside the European Union, these international transfers have been regularized in accordance with Krustagroup, S.A.U.’s commitment to the protection, integrity and security of users’ personal data.

Rights – What are your rights when you provide us with your data and how can you exercise them?

You have the right to obtain confirmation as to whether or not we at Krustagroup, S.A.U. are processing personal data concerning you.

You also have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you may request the limitation of the processing of your data, in which case we will only keep them for the exercise or defence of claims.

In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. Krustagroup, S.A.U. will cease to process the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.

Likewise, you can exercise the right to the portability of the data, as well as withdraw the consents provided at any time, without this affecting the legality of the processing based on the consent prior to withdrawal.

If you wish to make use of any of your rights, please contact atencionalcliente@krustagroup.com.

Finally, we inform you that you can contact the Spanish Data Protection Agency and other competent public bodies for any claim arising from the processing of your personal data.

Modification of the privacy policy

Krustagroup, S.A.U. may modify this Privacy Policy at any time, successive versions being published on the Website. In any case, Krustagroup, S.A.U. will communicate with previous notice the modifications of the present policy that affect the users in order that they can accept the same ones.

This Privacy Policy is current as of 27/12/2018 Krustagroup, S.A.U. (Spain). All rights reserved.

If you wish you can also consult our Cookies Policy