PRIVACY POLICY
DATA CONTROLLER
- CARLES PORTA GASET C/ TALLERS, 77 2º-2ª; 08001 Barcelona (hereinafter THE OWNER).
- Phone: +34930259011 and/or via email direccio@truecrimefactory.com.
SCOPE OF THE POLICY
By accessing and using this website, enjoying our services or employing any other means that involves the processing of personal data, you accept this Privacy Policy, together with the provisions established in the Legal Notice and the Cookies Policy.
We provide you with information so that, before completing your personal data, you can access the Privacy Policy and any other relevant information on Data Protection.
WHAT WE USE YOUR DATA FOR
THE OWNER processes your personal data (name, surname, email, telephone number and any information necessary for the management and maintenance of the services) for the following purposes:
- CONTRACTUAL: (i) to manage the contracting of the provision of services carried out through the website, as well as the corresponding billing and delivery; (ii) for the management of your registration as a user.
- CONSENT: (i) any marketing and commercial action carried out through any means, including telematics, (ii) to attend to and adequately manage queries, comments, incidents or suggestions from Users made through the means enabled on the Website, and (iii) to provide the necessary mobility adaptations so that the users of the services offered deserve and need it.
- LEGITIMATE INTEREST: (i) to send recommendations for products and services taking into account those you have contracted in the past, (ii) also for the prevention, investigation and detection of fraud and (iii) to respond to queries you send us, (iv) to ensure the proper use of our services, preventing illicit uses or uses contrary to our policy, values or current legal regulations, and (v) manage suggestions, complaints and queries about the products and/or services acquired through our website.
- LEGAL OBLIGATION: (i) To comply with legally established obligations, as well as to verify compliance with contractual obligations, including fraud prevention and money laundering prevention.
HOW LONG WE PROCESS YOUR DATA
The storage period of personal data will vary depending on the service you hire. In any case, your data will be kept for the duration of the commercial relationship. Once this has ended, we will keep your data blocked during the limitation periods of the obligations that may have arisen from the processing and/or the applicable legal periods, remaining at the disposal of the competent authorities for the attention of the possible responsibilities arising from the processing. By way of example and not limitation, the following deadlines will be taken as a reference:
- Contact details and for sending commercial communications (Newsletter): We will keep this data until there is a revocation of your consent to send electronic commercial communications and Newsletters.
- Job candidate data: 1 year from the time of receipt of their CV or the selection process.
- Documentation relating to personal obligations that do not have a fixed limitation period: 5 years (art.1964.2 of the Civil Code).
- Books, correspondence, documentation and supporting documents concerning the business: 6 years (art.30 of the Commercial Code).
- Documentation relating to tax obligations: 4 years (66 to 70 of Law 58/2003, of 17 December, General Taxation).
- Documentation relating to compliance with social obligations: 4 years.
- Employment documentation (actions arising from the employment contract): 1 year (article 59 of Royal Legislative Decree 2/2015, of 23 October, approving the revised text of the Workers’ Statute Law).
- Documentation relating to health data in the field of Occupational Risk Prevention: 4 years (Article 22 of Law 31/1995, of 8 November, on the Prevention of Occupational Risks).
- Documentation relating to compliance with data protection obligations: 3 years (art.78 LOPDGD).
- Video surveillance: 30 days.
- Documentation relating to legislation on the prevention of money laundering: 10 years.
- Health documentation for people with reduced mobility to adapt the conditions of enjoyment of our services: 5 years.
HOW YOU CAN EXERCISE YOUR RIGHTS
As the rights holder over your personal information, you have control over that data. In this way, we also ensure that the information we process is accurate and truthful.
The rights you can exercise are those recognised in current legislation, including:
- Right of Access: you will be able to check if we are processing personal data that concerns THE OWNER.
- Right to Rectification and Deletion: you may access your personal information and request the rectification or deletion of your data when they are inaccurate, or you consider that they are no longer necessary for the purposes for which they were collected.
- Right to Object: you may object to the processing of your data, unless, for compelling legitimate reasons or in the exercise or defence of possible claims, we keep them duly blocked for the corresponding periods as long as the legal obligations remain.
- Right to Limitation of Processing: you may request the limitation of the processing of your personal information while the challenge to the accuracy or lawfulness of your data is verified and during the exercise or defence of possible claims or litigation.
- Right to Portability: you may request the portability of the data you have provided to us from another data controller in certain circumstances.
You can exercise your rights at no cost.
Such rights can be exercised in several ways:
- Sending a written communication to the postal address of the Data Controller.
- By sending an email to direccio@truecrimefactory.com
HOW CAN I FILE A COMPLAINT WITH THE SUPERVISORY AUTHORITY?
If you consider that there is a problem with the way in which THE OWNER is handling your data, you can direct your complaints either to the address C/Tallers, 77, 2º-2ª; 08001 Barcelona, as stated in the header, or to the corresponding data protection supervisory authority, the Spanish Data Protection Agency being the one indicated in the case of Spain through its website: www.aepd.es.
WILL MY DATA BE COMMUNICATED TO OTHER RECIPIENTS?
We guarantee that your data will only be transferred to:
- Competent Public Bodies, Tax Agency, State Security Forces and Corps, Judges and Courts, when THE OWNER has the legal obligation to provide them.
- Financial institutions in the case of financing of the services provided.
- Third parties necessary in the provision of the contracted service: service providers, call centres, subcontracted professionals, etc.
Under no circumstances will your personal data be shared with third parties without complying with the legally established requirements.
You have the collaboration of suppliers who may have access to your data and who will process the aforementioned data in the name and on behalf of THE OWNER, the selection of suppliers will follow an exhaustive compliance verification process, in order to guarantee adequate control in terms of data protection. In addition, a contract will be signed, in accordance with article 28 of the General Data Protection Regulation, in which these providers undertake to apply appropriate technical and organizational measures, to process personal data in accordance only with the documented instructions of the joint controllers.
If one of the data processors is located outside the European Economic Area, the joint controllers will sign the Standard Contractual Clauses with them, which will provide adequate guarantees and always protect the access that these third parties may have to your data.
SAFETY
We maintain the highest levels of security required by law to protect your personal data against accidental loss and unauthorised access, processing or disclosure, considering the state of technology, the nature of the data stored and the risks to which they are exposed. When we receive your data, we use rigorous procedures and security features to prevent any unauthorized access. The actions described in this section and aimed at ensuring an adequate level of security for the identified risk shall include, if necessary, the following measures:
- Pseudonymization and encryption of personal data.
- Measures capable of guaranteeing the permanent confidentiality, integrity, availability and resilience of processing systems and services.
- Measures capable of restoring the availability and access to personal data quickly in the event of a physical or technical incident.
- Existence of a process of regular verification, evaluation and assessment of the effectiveness of technical and organisational measures to guarantee the security of the processing.
- Periodic assessment of the risk of accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorised communication of or access to such data.
- Measures to ensure that any person acting under the authority of TRUE CRIME and having access to personal data can only process such data on instructions from TRUE CRIME.
CONFIDENTIALITY
The personal data that may be collected will be treated with absolute confidentiality, undertaking to maintain secrecy with respect to them and guaranteeing the duty to keep them by adapting all the necessary measures to prevent their alteration, loss and unauthorised processing or access, in accordance with the provisions of the applicable legislation.
ACCEPTANCE AND CONSENT
The user declares to have been informed of the conditions on the protection of personal data, accepting and consenting to the processing of the same by the OWNER in the manner and for the purposes indicated in this Privacy Policy.
CHANGES TO THE PRIVACY POLICY
The OWNER reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as to other practices in the sector. In such cases, the OWNER will announce the changes introduced on this page with reasonable notice of their implementation.
This version of the Privacy Policy corresponds to an update published and that came into force in March 2025. You can contact the OWNER through the established contact channels for related queries.
©2025 CARLES PORTA GASET – All rights reserved.