Privacy policy

cercles avec image de fond de personnes au travail

The following privacy policy applies to the use of our online service www.barcelonaexport.com (hereinafter referred to as the ‘Website’).

The protection of your privacy is very important to us. Your personal data is collected and processed in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

1. Privacy policy – Person responsible

The person responsible for the collection, processing and use of your personal data within the meaning of Article 4 no. 7 of the RGPD is Ms. ISABEL GARCIA FERNANDEZ (hereinafter BARCELONA EXPORT), with address at Calle Alcalde 24 Josep Abril, Local 2, 08302 MATARÓ CIF: 35119.889-Q. Contact e-mail address on the website: .

If you wish to object to us collecting, processing or using your data in accordance with this privacy policy as a whole or for individual measures, you can send your objection to the responsible person.

You can save and print this privacy policy at any time.

2. General purposes of the use of the data collected in our privacy policy

We use personal information for the purpose of interacting with the news published on the website, for use with MailChimp (email advertising programme), Accio, Microsoft Outlook and Google Analytics.

3. Privacy policy – What data do we use and why?

3.1 Hosting services

The hosting services we use are to provide the following services: infrastructure and platform services, computing capacity, storage and database services, security services and technical maintenance services, which we use to operate the website.

In doing so, we or our hosting provider process inventory data, contact data, content data, contractual data, usage data, target data and communication data of customers, interested parties and visitors of this website in accordance with our legitimate interests in the efficient and secure provision of our website Art. 6 para. 1 p. 1 f) GDPR, i.e. Article 28 GDPR.

3.2 Access data

In our privacy policyWe collect information about you when you use this website. We automatically collect information about your use and interaction with us and store information on your computer or mobile device. We collect, store and use data relating to each access to our website (so-called server log files). Access data includes

  • the name and URL of the retrieved file
  • date and time of retrieval
  • the amount of data transferred
  • the message indicating successful retrieval (HTTP response code)
  • browser type and version
  • operating system
  • referring URL (i.e. the previously visited page)
  • Websites accessed by the user’s system through our site
  • User’s Internet Service Provider
  • IP address and requesting provider

We use this log information without attributing it to you or any other profile for statistical evaluations, not only for purposes of operation, security and optimisation of our website, but also for the anonymous recording of the number of visitors to our website (traffic) and the extent and nature of the use of our website and our services, as well as for billing purposes, to measure the number of clicks received from cooperation partners. Based on this information, we can provide personalised and geo-localised content, analyse traffic, troubleshoot problems and improve our services.

This is also our legitimate interest in accordance with Article 6(1)(1)(f) of the GDPR.

We reserve the right to retrospectively examine connection data if, on the basis of concrete evidence, there is a legitimate suspicion of unlawful use. We retain IP addresses in log files for a limited period if this is necessary for security reasons or for the provision of services or billing of a service, for example. If you use one of our offers after the order process has been completed or payment has been received, we delete the IP address if it is no longer required for security reasons. We retain IP addresses even if we suspect that a criminal offence has been committed in connection with the use of our website. In addition, as part of your account, we record the date of your last visit (e.g. when registering, logging in, clicking on links, etc.).

3.3 Cookies

As part of our privacy policy, we use ‘cookies’ to optimise our website. A cookie is a small text file that is sent by the respective servers when you visit a website and stored on your hard drive. As such, this file contains what is known as a session identifier, thanks to which several requests from your browser can be attributed to the same session. This makes it possible to recognise your computer when you revisit our website. These cookies are deleted when you close your browser. For example, you can use the shopping basket function on several pages.

We also use a small number of persistent cookies (also small text files stored on your device) that remain on your device and allow us to recognise your browser the next time you visit us. These cookies are stored on your hard drive and are deleted after a set period of time. They have a lifespan of between 1 month and 10 years. This allows us to present our offer in a more user-friendly, efficient and secure way and to show you, for example, information tailored to your areas of interest on the site.

Our legitimate interest in using cookies in accordance with Article 6(1), sentence 1(f) of the GDPR is to make our website more user-friendly, more effective and more secure.Les cookies stockent les données et informations suivantes

  • language settings
  • search terms entered
  • information on the number of visits to our website and on the use of the various functions of our website.

If the cookie is activated, you will be assigned an identification number and your personal data will not be associated with this identification number. Your name, IP address or other similar data that allows the cookie to be associated with you will not be included in the cookie. Depending on the cookie technology used, we only receive pseudonymous information, such as which pages of our website have been visited, which products have been viewed, etc. We do not use this information to identify you personally.

You can configure your browser in such a way that you are informed in advance of the cookie settings and can decide in each case to exclude the acceptance of cookies for individual cases or in general, or to prevent them altogether. This may limit the functionality of the website.

3.4 Data required to fulfil our contractual obligations

In our privacy policy we process personal data that we need to fulfil our contractual obligations, such as name, address, e-mail address, ordered products, invoicing and payment data. The collection of this data is necessary for the conclusion of the contract.

The data is deleted after the statutory warranty and storage periods have expired. The data associated with a user account (see below) is retained for as long as the account is maintained.

The legal basis for processing this data is Article 6(1) sentence 1(b) of the GDPR, as this data is necessary for us to fulfil our contractual obligations to you. The legal basis for processing this data is Article 6(1) sentence 1(b) of the GDPR, as this data is necessary for us to fulfil our contractual obligations towards you.

3.5 Contact forms

You can use the contact forms on our website. For the contact forms, we collect basic data (e.g. name, address), communication data (e.g. e-mail address) and data about your area of application, if you use the sales representative contact form, or information about your educational background, if you wish to apply for a job or internship.

You can fill in the contact forms we have removed at any time. Simply send a text message to the contact details mentioned in point 1 (e.g. e-mail, fax, letter). We will then delete your stored personal data, insofar as we are not yet obliged to store them due to legal storage requirements.3.6 Bulletin d’information

To subscribe to the newsletter, you will need the data requested during the registration procedure. To subscribe to the newsletter, please log in. After logging in, you will receive a message at the specified e-mail address asking you to confirm your registration (‘double subscription’). This is necessary so that third parties cannot register using your e-mail address.

You can always revoke your consent to receive the newsletter and therefore unsubscribe from the newsletter.

We retain the registration data for as long as it is necessary to send the newsletter. The registration of the request and the sending address are retained for as long as there is an interest in proving the consent originally given; as a rule, this is the statute of limitations for civil actions, i.e. a maximum of three years.

The legal basis for sending the newsletter is your consent in accordance with § 6 (1) sentence 1 of the Data Protection Act. Art. 6 (1) sentence 1 a) in conjunction with Art. 7 GDPR. The legal basis for registering the request is our legitimate interest in proving that the transmission was made with your consent.

It is sufficient to send a text message to the contact details mentioned in point 1 (e.g. e-mail, fax, letter). Of course, you will also find an unsubscribe link in each newsletter.

3.7 Emails about business opportunities and grants

In addition to the newsletter, we will periodically send you emails about commercial opportunities and grants for which you may be eligible. In this way, we will provide you with information that may be of interest to you based on your recent communications or services with us. We strictly comply with legal requirements. You can object at any time. Simply send a text message to the contact details mentioned in point 1 (e.g. e-mail, fax, letter). Of course, you will also find an unsubscribe link in each e-mail.

The legal basis is the legal authorisation in accordance with Article 6(1)(1)(f) of the GDPR. 1 S. 1 f) of the GDPR.

3.8 Contact by e-mail

When you communicate with us (e.g. via a contact form or by e-mail), we process your data for the purpose of processing the request as well as in case follow-up questions arise.

If the data processing is carried out for the execution of pre-contractual measures, which are carried out at your request or, if you are already our customer, for the execution of the contract, the legal basis for this data processing is Art. 6 para. 1 p. 1 b) GDPR.

We only process further personal data if you give your consent (Art. 6 (1) sentence 1 a) GDPR) or if we have a legitimate interest in processing your data (Art. 6 (1) sentence 1 f) GDPR), a legitimate interest lies, for example, in responding to your e-mail.

4. Privacy policy – Google Analytics

We use Google Analytics, a web analysis service provided by Google Inc (‘Google’). Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is generally transmitted to and stored by Google on servers in the United States.

This is also our legitimate interest in accordance with Article 6 paragraph 1 p. 1 f) of the GDPR.

Google has joined the EU-US Privacy Shield agreement and has been certified. As a result, Google is committed to complying with the rules and regulations of European data protection legislation. For more information, see the following link:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

We have activated IP anonymisation on this website (anonymizeIp). As a result, your IP address will first be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. Google will use this information on our behalf for the purpose of tracking your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

The IP address provided by Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the transfer to Google of the data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=es.

5. Retention period in our privacy policy

Unless otherwise specified, we only retain personal data for as long as necessary to achieve the purposes for which it was collected.

In certain cases, the law requires personal data to be retained, for example in tax or commercial matters. In such cases, we only retain the data for these legal purposes, but we do not process or delete it after the legal retention period has expired.

6. Your rights as a data controller in our privacy policy

Under applicable law, you have a number of rights in relation to your personal information. If you wish to exercise these rights, please send your request by email or post, clearly identifying yourself, to the address set out in point 1.

A summary of your rights is set out below.

6.1 Right to confirmation and information about our privacy policy

You have the right to obtain clear information about the processing of your personal data.

More specifically, you have the right, at any time, to obtain clear information about the processing of your personal data:

You have the right, at any time, to obtain confirmation from us about the processing of your personal data. In this case, you have the right to request from us, free of charge, information about your stored personal data and a copy of this information. In addition, you have the right to obtain the following information

  1. the purposes of the processing ;
  2. the categories of personal data processed
  3. the recipients or categories of recipients to whom the personal data have been or continue to be disclosed, in particular recipients located in third countries or international organisations;
  4. where possible, the period for which the personal data are to be kept or, if this is not possible, the criteria for determining such period;
  5. the right to the rectification or erasure of personal data relating to him or her, or to the restriction of processing by the controller, or the right to object to such processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. if his or her personal data are not collected, all available information on the origin of the data;
  8. the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the implications and expected effects of such processing for you.

If personal data are transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards under Article 46 of the GDPR in relation to the transfer.

6.2 Right of correction in our privacy policy

You have the right to demand that we correct and, if necessary, supplement your personal data.

More specifically, you have the right to demand immediate rectification of your personal data:

You have the right to demand the immediate rectification of incorrect personal data concerning you. Taking into account the purposes of the processing, you have the right to demand that incomplete personal data be supplemented, including by means of an additional statement.

6.3 Derecho deletion (‘right to be forgotten’) in our privacy policy

In certain cases, we are obliged to delete your personal data.

More specifically, this is the right to erasure:

Pursuant to Article 17(1) of the GDPR, you have the right to request us to delete your personal data without delay and we are obliged to delete your personal data immediately if one of the following reasons applies:

  1. The personal data is no longer necessary for the purposes for which it was collected or processed.
  2. You revoke your consent to the processing in accordance with Article 6 (1) (1) (a) of the GDPR. 1 (1) (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and there is no other lawful basis for the processing.
  3. Pursuant to Article 21 (1) (1) of the GDPR, you object to the processing and there are no prior justifiable grounds for the processing, or you object to the processing pursuant to Article 21 (2) of the GDPR.
  4. The personal data have been unlawfully processed.
  5. The deletion of the personal data is necessary in order to comply with a legal obligation under national or Union law to which we are subject.
  6. The Personal Data has been provided as part of the information society services offered in accordance with Art. 8 para. 1 of the GDPR.

If we have made the Personal Information public, we are obliged to delete it in accordance with Art. 17 (1) GDPR, we will take appropriate measures, including technical measures, for data controllers who are responsible for the Personal Data, taking into account available technology and the costs of implementing data processing, informing you that you have requested the deletion of all links to such Personal Information or copies or replicas of such Personal Information.

6.4 Right to restrict processing in our privacy policy

In certain cases, you may ask us to restrict our processing of your personal information.

In particular, you have the right to request that we restrict our processing of your personal information:

You have the right to ask us to restrict processing if one of the following conditions is met:

  1. The accuracy of your personal information is disputed for a period that allows us to verify the accuracy of your personal information.
  2. The processing is unlawful and you have objected to the erasure of the personal data and have requested instead that we restrict the use of the personal data;
  3. We no longer need your personal data for processing, but you need it to assert, exercise or defend your rights; or
  4. You object to the processing in accordance with Article 21(1) of the GDPR. 1 of the GDPR, provided that it is not certain that the legitimate reasons of our company prevail over yours.

6.5 Right to data portability in our Privacy Policy

You have the right to receive, transmit or send any personal information about you in a machine-readable format.

More specifically, you have the right to receive personal information about you in a machine-readable format:

You have the right to receive the personal information you provide to us in a structured, common, machine-readable format, and you have the right to transmit that information to another person without hindrance, provided that

  1. the processing is based on consent in accordance with Article 6(1) sentence 1(a) GDPR or Article 9(2)(a) GDPR or on the basis of a contract in accordance with Article 6(1) sentence 1(b) GDPR, and :
  2. the processing is carried out by automated procedures.

Where you exercise your right to data portability in accordance with paragraph 1, you have the right to have us transfer your personal data directly to another responsible person, where technically feasible.

6.6. Right to object to our privacy policy

You have the right to object to lawful processing of your personal data by us if such processing is based on your particular situation and if our interests in the processing do not prevail.

More specifically, you have the right to object to the processing of your personal data at any time:

You have the right to object at any time to the processing of your personal data pursuant to Article 6 (1) sentence 1 (e) or (f) GDPR on grounds arising from your particular situation; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims.

If we process personal data for the purpose of mailings, you have the right to object at any time to the processing of your personal data for advertising purposes; this also applies to profiles insofar as they are associated with such mailings.

You have the right, on grounds relating to your particular situation, to object to the processing of your personal data for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.

6.7 Automated decisions, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly affects you.

No automated decision will be taken on the basis of the personal data collected.

6.8 Right to revoke consent to data protection

You have the right to revoke your consent to the processing of personal data at any time.

6.9 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you consider that the processing of your personal data is unlawful.

7. Data security in our privacy policy

We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities.

Your personal data is transmitted to us in encrypted form. This applies to contact forms. We use SSL (Secure Socket Layer) encryption, but we would like to point out that data transmission over the Internet (e.g. in e-mail communication) can have security gaps. It is not possible to protect data completely against access by third parties.

In order to protect your data, we take technical and organisational security measures in accordance with § 32 DSGVO, which we continuously adapt to the latest technologies.

We also do not guarantee that our services will be available at specific times; interruptions, failures or breakdowns cannot be ruled out. The servers we use are regularly and carefully backed up.

8. Targeted advertising on social media platforms and our email communications in our privacy policy.

In accordance with our privacy policy and applicable law and, where required, with your consent, we may use the information you provide to us on our Platforms for direct electronic marketing purposes (for example, to receive newsletters, event invitations or other communications that we think may be of interest to you or to provide you with targeted advertising on social media or third party websites).

For electronic marketing communications: you may withdraw your consent at any time by clicking on the unsubscribe link we provide in each communication we send you or by contacting us using the contact details provided in section 1.

9. Forwarding of data to third parties

In principle, we only use your personal data within our company.

If we use third parties for the performance of contracts, they will only receive personal data to the extent that the transfer is necessary for the service in question.

If we subcontract parts of the data processing (‘order processing’), we contractually oblige the subcontractors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of data subjects.

We do not currently transfer data to agencies or persons outside the EU, except in the case mentioned in paragraph 4.

10. Links to other websites and social networks

Our website may, from time to time, contain links to and from the websites of our partner networks, government sites or other links. If you follow a link to one of these websites, please note that these websites have their own privacy practices and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

11. Changes to the privacy policy

Any future changes to our privacy policy will be posted on this page. If necessary, we will inform you or ask for your consent. We encourage you to check this page regularly for updates or changes to our privacy notice.

12. Data Protection Commissioner

If you have any questions or concerns about privacy, please contact our Privacy Policy Officer: Isabel García, e-mail: