Privacy policy
1. RESPONSIBLE
Who is the controller of the processing of your personal data?
Identity: Barna Steel S.A., a company that is part of the group of companies that operates under the name CELSA Group™ (hereinafter, “CELSA Group™ Company”).
NIF: A08685471
Address: Carrer de la Ferralla, 12; San Vicente Industrial Park 080755 Castellbisbal, Barcelona (Spain)
Contact of the Data Protection Officer (DPD): GDPR@gcelsa.com
2. PURPOSES
For what purpose do we process your personal data?
We inform you that at the CELSA Group™ Company we process the data you provide us to carry out correct management of the services or information you request from us. Specifically, we will process your personal data for the following purposes.
1. Management of information requests.
2. Management of the customer portal for tracking products and services orders;
as well as for any other related services (e. g. reminders, technical notices,
security alerts, support messages, among others).
3. Send newsletters and advertising promotions of the CELSA Group™
companies. You may consult and updated list of these companies on their
official pages or at Where is CELSA Group – International presence, for which your personal data will be transferred to them.
4. Resume management.
3. LEGITIMATION
What is the legal basis for the processing of your personal data?
The legal basis for the processing of your personal data varies depending on the purposes for which your data are processed, in particular:
1. The legal basis that justifies the processing of your personal data for the
management of requests for information is the consent that you provide us
when making the request (art. 6.1.a GDPR).
2. The legal basis that justifies the processing of your personal data for the
management of orders, as well as for other actions related to the management
of the customer portal, is the execution of the contractual relationship that we have with you (art. 6.1.b GDPR).
3. The legal basis that justifies the processing of your personal data for sending commercial communications is the consent that you have given us (art. 6.1.a GDPR).
4. The legal basis that justifies the processing of your curriculum personal data and manage the corresponding recruitment process is the need to apply pre-
contractual measures at the request of the data subject (6.1.b GDPR).
4. RETENTION PERIOD
For how long we will store your personal data?
We will keep your personal data for no longer than is necessary to fulfill the purposes stated above. In particular:
1. Purpose 1: until the request for information is resolved.
2. Purpose 2: for the duration of the commercial or contractual relationship, as well as for the necessary time to comply with applicable legal obligations or to defend against legal claims or responsibilities that may arise.
3. Purpose 3: until you object to receive commercial communications.
4. Purpose 4: for the duration of the recruitment process, except in the case that you consent to its conservation for future positions in the company.
In addition, your personal data will be stored using the necessary technical and
organizational measures to ensure the security and integrity of your data.
5. RECIPIENTS
To which recipients will your personal data be disclosed?
If you have consented to receive commercial communications (purpose (3) of the
second section) or, if applicable, for administrative purposes, your personal data will be communicated to the rest of the companies that are part of the group that operate under the name CELSA Group™, whose updated list appears on the official pages of these companies or atWhere is CELSA Group – International presence.
Likewise, your personal data may also be disclosed to third parties in those cases where there is a data processor or there is a legal obligation applicable to the CELSA Group™ Company. In this sense, your personal data may be transferred to public bodies and authorities when this is required by legal or regulatory provision.
We inform you that, in case of disclosing your personal data to recipients located in territories outside the European Economic Area, that do not have an adequacy decision, we will adopt the appropriate safeguards to ensure a level of protection equivalent to that provided by the GDPR, in particular, by subscribing the standard contractual clauses approved by the European Commission.
6. RIGHTS
What are your rights when you provide us with your personal data and how can you exercise them?
You have the right to obtain information about whether the CELSA Group™ Company is processing your personal data.
At any time, you have the right to access your personal data, to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, you may request the restriction of the processing of your data, in which case we will only keep them for the exercise or defense of claims.
In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. In this case, the CELSA Group™ Company will not processed your personal data, except for compelling legitimate reasons, or for the exercise or defense of possible claims.
You may also exercise the right to data portability or withdraw the consents provided at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
If you wish to exercise any of your rights, you should contact us through the links provided in the emails and communications from the CELSA Group ™, by email at GDPR@gcelsa.com, or by post at the following address CALLE FERRALLA, Nº 12, POLÍGONO INDUSTRIAL SAN VICENTE, CASTELLBISBAL (08755), SPAIN. In order for us to deal with your request efficiently, please specify the purpose of your request and identify yourself correctly.
Finally, we inform you that you can contact the competent data protection supervisory authority and other competent public authorities for any claim arising from the processing of your personal data.
Finally, we inform you that you can contact the Spanish Data Protection Agency (“AEPD”) and other competent public bodies for any claim arising from the processing of your personal data.
