Privacy policy

    1. RESPONSIBLE

    Who is the Data Controller of your data?

    1. Identity: Barna Steel S.A., which is part of the corporate group operating under the registered trademark CELSA, (hereinafter, the “CELSA COMPANY”).
    2. VAT NO: A08685471
    3. Address: Carrer de la Ferralla, 12; Polígono Industrial San Vicente 080755 Castellbisbal, Barcelona (Spain).
    4. Contact details of the Data Protection Delegate (DPD): you can contact us, to resolve any question you may have, by e-mail:
      GDPR@gcelsa.com

     

    2. PURPOSES

    For what purposes do we process your personal data?

    By accessing and using this website, participating in any activity organised by us, or using any other means that involves the processing of personal data, you accept this Privacy Policy, as well as the provisions included in the Legal Notice and the Cookies Policy.

    At CELSA, we provide you with the necessary information so that, before providing your personal data, you can consult this Privacy Policy and any other relevant information on Data Protection.

    We inform you that at Celsa Company we process the data you provide us with in order to correctly manage the services or information you request from us. Specifically, we will process your personal data for the following purposes.

    1. Management of requests for information. Manage the personal data of users who contact CELSA through the contact form.
    2. Management of the supplier and customer portals. For tracking product and service orders and their corresponding invoicing; as well as any other related service, such as reminders, technical notices, security alerts, support messages, among others.
    3. Sending newsletters and promotions. The data will be processed for sending, including by electronic means, commercial communications about products and services offered by the Data Controller, including newsletters, promotions and advertising of the companies in the Celsa group, whose updated list appears on the official websites of these companies or in Where is Celsa – International Presence, for which your data will be transferred to them.
    4. CV management. The personal data of users who wish to participate in our recruitment processes are collected through the “Join our team” section.
    1. LEGITIMACY

    What is the legitimacy for the processing of your data?

    The legal basis for processing your personal data varies depending on the purposes for which your data are processed, in particular:

    1. The legal basis that legitimises the processing of your data in relation to the management of requests for information is the consent that you have given us when making the request (art. 6.1.a RGPD).
    2. Management of the customer portal. The legal basis that legitimises the processing of your data in relation to the management of orders, as well as other actions relating to the management of the customer portal, is the execution of the contractual relationship that we maintain with you (art. 6.1.b RGPD).
    3. The legal basis that legitimises the processing of your data for the sending of commercial communications is the consent you have given us (art. 6.1.a RGPD).
    4. CV management. The legal basis that legitimises the processing of your CV data in order to manage the relevant selection process is the need to apply pre-contractual measures at the request of the data subject or to conclude a contract (6.1.b GDPR). You can obtain more information regarding this and other processing carried out during the selection process at Privacy Policy for CELSA Candidates .

     

    3. LEGITIMACY

    What is the legitimacy for the processing of your data?

    The legal basis for processing your personal data varies depending on the purposes for which your data are processed, in particular:

    1. The legal basis that legitimises the processing of your data in relation to the management of requests for information is the consent that you have given us when making the request (art. 6.1.a RGPD).
    2. Management of the customer portal. The legal basis that legitimises the processing of your data in relation to the management of orders, as well as other actions relating to the management of the customer portal, is the execution of the contractual relationship that we maintain with you (art. 6.1.b RGPD).
    3. The legal basis that legitimises the processing of your data for the sending of commercial communications is the consent you have given us (art. 6.1.a RGPD).
    4. CV management. The legal basis that legitimises the processing of your CV data in order to manage the relevant selection process is the need to apply pre-contractual measures at the request of the data subject or to conclude a contract (6.1.b GDPR). You can obtain more information regarding this and other processing carried out during the selection process at Privacy Policy for CELSA Candidates .

     

    4. DATA RETENTION PERIOD

    How long will we keep your data?

    Your personal data will be retained for the period of time necessary to fulfil the purposes stated above. In particular:

    • Purpose 1: your data will be kept until the request for information is resolved.
    • Purpose 2: your data will be kept for the duration of the commercial or contractual relationship, as well as for as long as necessary to comply with applicable legal obligations or for the defence of legal claims or liabilities that may arise.
    • Purpose 3: your data will be kept until you opt out of receiving commercial communications.
    • Purpose 4: your data will be kept for the duration of the selection process, except in the event that you consent to their retention for future positions in the company, which in no case will exceed one year from receipt.

    Furthermore, your personal data will be stored using the necessary technical and organisational measures to guarantee the security and integrity of the data.

     

    5. TARGET

    To which recipients will your data be communicated?

    In the event that you have given your consent for the purpose (3) indicated in the second paragraph or, where applicable, for administrative purposes, your data will be communicated to the other companies that are part of the group of companies operating under the name Celsa, an updated list of which can be found on the official websites of these companies or in Where is Celsa – International Presence.

    Likewise, your data may also be transferred to third parties in those cases where there is a data processor or there is a legal obligation applicable to the Celsa Company.

    In addition, your personal data may be disclosed to public bodies and authorities, provided that they are required to do so in accordance with legal and regulatory provisions.

    We inform you that, in the event of communication of your personal data to recipients located in territories outside the European Economic Area, which do not have an adequacy decision, we will take appropriate safeguards to ensure a level of protection equivalent to that provided for in the GDPR, in particular by subscribing to the standard contractual clauses approved by the European Commission.

     

    6. RIGHTS

    What are your rights when you provide us with your data and how can you exercise them?

    As the right holder of your personal information, you have control over that data. In this way, we also ensure that the information is accurate and truthful.

    The rights that can be exercised are

    • Right of Access: you have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request the deletion of such data when, among other reasons, the data are no longer necessary for the purposes for which they were collected. You have the right to obtain information about whether Celsa Company is processing personal data concerning you.
    • Right to restrict processing: In certain circumstances, you may request that we restrict the processing of your data, in which case we will only keep it for the purpose of pursuing or defending claims.
    • Right to object: On grounds relating to your particular situation, you may also oppose the processing of your data. In this case, Celsa Company will stop processing your data, except for compelling legitimate reasons, or for the exercise of legal actions or the defence of possible claims.
    • Right to portability: You may request portability of the data you have provided to us to another data controller in certain circumstances.
    • Right of Rectification and Deletion: You may access your personal information and request rectification and deletion of your data when it is inaccurate or no longer necessary for the purposes for which it was collected.

    If you wish to exercise any of your rights, you can contact us through the links provided, which you will find in Celsa’s e-mails and communications, by e-mail atGDPR@gcelsa.com , or by post, to the attention of the Cybersecurity and Privacy Committee, at the following address: CALLE FERRALLA, Nº 12, POLÍGONO INDUSTRIAL SAN VICENTE, CASTELLBISBAL (08755), SPAIN. In order to enable us to deal with your request efficiently, please specify the purpose of your request and identify yourself correctly.

    Finally, we inform you that you may contact the Spanish Data Protection Agency (Agencia Española de Protección de Datos | AEPD ) and other competent public bodies for any claim arising from the processing of your personal data.

     

    Copyright © 2018 CELSA – All rights reserved