Privacy Policy

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and current data protection legislation, Law 3/2018 of 5 December on data protection and guarantee of digital rights, as well as in compliance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), GALIGRUP informs you that it owns the website, and pursuant to Article 10 of the aforementioned Law, provides the following information:

Company name: GALI’MATRIU, SL

Trade name: GALI GRUP

CIF: B61613535

Email: gali@galigrup.com

Data collection

When you make a request through our websites, applications or services; this may include your name (including business name), address, contact (such as your phone number and email address).

When you fill out online forms or participate in any interactive area featured on our website or within our application or service;

When you interact with us through social media;

When you provide us with your contact details when accessing any websites; and contact us through non-online channels, such as by phone, SMS, WhatsApp, email or regular mail.

If you provide us with personal data about another person, you are responsible for ensuring that you comply with all consent and information obligations under applicable data protection law regarding such disclosure. To the extent required by applicable data protection law, you must ensure that you have duly informed the other person and obtained their explicit consent to provide us with their data and the purposes for which it will be processed.

The sending of commercial communications, transfer of data to third parties and collection/use of images will be legitimized at all times by the express consent given by you.

In processing your personal data, we will apply the following principles that comply with the requirements of the new European data protection regulation:

• Principle of lawfulness, fairness and transparency: We will always require your consent to process your personal data for one or more specific purposes that we will inform you of beforehand with absolute transparency.

• Principle of data minimization: We will only request data that is strictly necessary in relation to the purposes for which we require it.

• Principle of limitation of the storage period: the data will be kept for no longer than necessary for the purposes of the processing, depending on the purpose, we will inform you of the corresponding storage period.

• Principle of integrity and confidentiality: Your data will be processed in a way that ensures its security and confidentiality. Please be aware that we take all necessary precautions to prevent unauthorized access to or misuse of our users’ data by third parties.

The following details the different purposes of data processing by Galí.

1.- Provision of Services related to the Industrial Sector

We will contact you to see if you would like to participate in our customer studies (for example, your opinion on our products and services);

To evaluate, carry out statistical analysis and benchmarking, provided that, in such circumstances, it is done in an aggregated manner that cannot be linked to you or any other individual natural person;

2.- Sending Information and/or Advertising of our products or services.

This purpose includes the use of your personal data to send you communications related to the provision, improvement and updating of our services, as well as advertising information about promotions applicable to the product/service, or sending information related to regulations and innovations in the sector, based on your use of our applications and services;

Galí may use your contact information to carry out commercial actions and send you information about products or services that may be of interest to you through communication channels (including, but not limited to, WhatsApp messages, emails, phone calls, etc.).

At any time, the customer will be allowed to object to receiving further commercial communications and may exercise this right through the email address indicated for this purpose.

3.- Transfer of your data to companies for the provision of the service.

Galí may transfer your data to companies linked to the provision of services and strictly necessary for the execution of the products or services contracted by you, such as transport companies, other IT services, hosting, etc.

4.- Report the non-payment details

In the event of failure to meet your financial obligations, resulting in a certain, overdue and enforceable debt, and after prior payment request, you are hereby informed that we will proceed to communicate your identification data and data relating to the debt to all entities responsible for advising, managing and processing non-payments, in accordance with current legislation.

5.- CV submission forms:

The purpose of this processing is to enable your participation in recruitment processes that Galí currently has open or may open in the future. We will retain your data for a maximum of two years unless you tell us otherwise, and in any case, for the time necessary to comply with legal obligations.

The personal data you provide will be kept for as long as necessary to provide the contracted services, to respond to your requests or inquiries, and in any case, for the duration of the contractual relationship between the parties or for the number of years required to comply with the obligations imposed by other applicable regulations. Therefore, in accordance with tax regulations, your data will be kept for 5 years.

Galí will apply the data deletion and erasure protocol in accordance with current data protection regulations. In any case, if there are any pending legal disputes at the end of the contractual relationship, the data may be retained until a final resolution is reached.

Gali may transfer your data to companies for administrative or legal compliance purposes (auditors, insurers, banks, public administrations, etc.)

Galí may transfer your data to all companies necessary for the execution of the contracted service or for the collection of non-payments, including our service providers and agents (including their subcontractors) or third parties that process data on our behalf (Internet service and platform providers, payment processing providers and entities contracted for sending communications, among others) so that they can help us offer you the applications, products, services and information that you have requested or that we believe may be of interest to you;

In compliance with the provisions of Article 22 of the General Data Protection Regulation of the European Union, GDPR 2016/679, you may exercise any of the following rights:

Right of access: To know what type of data we are processing and the characteristics of the processing we are carrying out.

Right of rectification: To be able to request the modification of your data if it is inaccurate or untrue.

Right to data portability: You have the right to obtain a copy of your information in an automated, easily exportable, commonly used, and electronically readable format, or to have it sent directly to another company, if technically feasible. If you request a format other than Galí’s own, you may be charged for its preparation.

Right to restriction: To be able to limit the processing of my data according to the specific purpose.

Right to erasure: Request the erasure of your data when the processing is no longer necessary.

Right to object: Request the cessation of the processing of your data for a specific purpose, such as for direct marketing purposes or when it is carried out in the interest of our legitimate interests.

Similarly, you may revoke the consent given if the processing of your data depends on your consent, always subject to existing legal or contractual restrictions, and file a complaint with the Spanish Data Protection Agency (https://www.aepd.es)

You may exercise any of the aforementioned rights by sending an email to gali@galigrup.com , clearly stating the right you wish to exercise in the subject line and attaching a document that proves your identity. Alternatively, you may also direct any inquiries you deem necessary to the Data Protection Officer at gali@galigrup.com.

Podrá ejercitar cualquiera de los derechos mencionados anteriormente mediante correo electrónico a la dirección gali@galigrup.com, indicando textualmente en el asunto el derecho a ejercer y adjuntando un documento que acredite su identidad. No obstante, podrá también realizar las consultas que considere necesarias a Delegado de Protección de Datos al email: gali@galigrup.com

As a user, you are solely responsible for the truthfulness and accuracy of the data you submit and attach to us, exonerating Galí from any liability in this regard.

Users guarantee and are responsible, in all cases, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep it duly updated. Users agree to provide complete and accurate information on the contact or subscription form. If they provide data belonging to third parties, they must have their prior consent.

Galí is committed to the use and processing of data, including personal data of users, respecting its confidentiality and using it in accordance with its purpose, as well as fulfilling its obligation to keep it and adapt all measures to prevent alteration, loss, unauthorized processing or access, in accordance with the provisions of current data protection regulations.

This website includes an SSL certificate. This is a security protocol that ensures your data travels securely and intact; in other words, the transmission of data between a server and a web user, and vice versa, is fully encrypted.

Galí cannot guarantee the absolute invulnerability of the Internet network and therefore the violation of data through fraudulent access to it by third parties, and cannot assume any responsibility for such attacks.

With regard to the confidentiality of the processing, Galí will ensure that any person authorized by Galí to process the customer user’s data will be under an obligation of confidentiality.

In the event of a security incident, Galí will notify the Client and user without undue delay and will provide timely information related to the Security Incident as it becomes known or as reasonably requested by the Client.

The user declares to have been informed of the conditions regarding the protection of personal data, accepting and consenting to the processing of said data by Galí in the manner and for the purposes indicated in this Privacy Policy.

The consent given, both for the processing and transfer of data of the interested parties, is revocable at any time by notifying Galí in accordance with the terms established in this Policy for the exercise of rights. This revocation will in no case have retroactive effect.

Galí reserves the right to modify this policy to adapt it to new legislation or case law, as well as industry practices. In such cases, Galí will announce the changes on this page with reasonable notice before they take effect.