PRIVACY POLICY

LauLau Comunica is dedicated to providing branding and design services, including social media management, brand consulting, creative agency, brand strategies, and more.

Our data protection policy is constructed and communicated in accordance with applicable regulations, particularly in relation to EU Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, GDPR) and Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights.

The Company has also adopted the necessary technical and organizational measures to guarantee the confidentiality, security, and proper processing of personal data, preventing its alteration, loss, unauthorized processing, or access in accordance with applicable regulations. It has taken effective measures and, in all cases, maintained a level of security appropriate to the level of data processed. This work is carried out continuously, taking into account legislative and societal developments.

This policy may change over time due to possible legislative changes or other business management reasons. Any changes will be immediately reflected on the website, and appropriate communications will be made, if applicable.

The firm handles data of individuals in the performance of a professional role or function, as well as personal data in the private sphere. Both categories have been addressed in establishing this privacy policy. The entity may act as either the CONTROLLER or the PROCESSOR. This privacy policy addresses and covers both types of actions.

Who is the CONTROLLER of your data?

This page (https://laulaucomunica.com/) is property of LAURA RIVEIRO EXPÓSITO (hereinafter LAULAU COMUNICA) with NIF: 35638757G, with address at AV/ Creu de Terme 26, 2-1, 08391, Barcelona, Spain. E-mail info@laulaucomunica.com

DATA PROTECTION OFFICER: LAURA RIVEIRO EXPOSED.

PURPOSE OF DATA PROCESSING AND STORAGE

We process the information provided to us by our customers and other interested parties for the following purposes:

• a) PURPOSES OF A CONTRACTUAL NATURE, in relation to partners, suppliers, collaborators and employees, to manage the provision of rights and obligations arising from the contractual relationship.
• b) PURPOSES BASED ON THE CONSENT OF THE DATA SUBJECT: For purposes of providing information related to the entity's activities and actions. The Company will be responsible for providing the information and collecting the consents necessary for the commercial use of the data.
• c) REGULATORY PURPOSES: To comply with its legal and/or regulatory obligations.
• d) PURPOSES BASED ON LEGITIMATE INTEREST, pursuant to the provisions of Article 19 of the LOPDGDD (Organic Law 3/2018 of December 5) and Article 6.1.f) of Regulation EU 2016/679.

The data is processed as DATA CONTROLLER when it is collected and processed by us.

Data is processed as DATA PROCESSOR, when the firm processes the data to provide a service to a third party that is the data controller.

SPECIFIC PURPOSES

Contact Form.
Purpose: To provide you with a means to contact us and respond to your requests for information, as well as to send you communications about our products, services, and activities, including by electronic means (email, SMS, WhatsApp), if you select the opt-in box.
Legal basis: The user's consent when requesting information from us through our contact form and checking the box to accept the sending of information. Storage: Once your request has been resolved through our form or answered by email, if you have not generated new processing, and if you have agreed to receive commercial mailings, until you unsubscribe.

Sending emails.
Purpose: To respond to your requests for information, address your requests, and answer your questions or concerns. If we receive your resume, your personal and curriculum vitae information may be added to our databases for participation in our current and future selection processes.
Legitimacy: The user's consent when requesting information from us via email or sending us their data and CV to participate in our selection processes.
Retention: Once your request has been answered by email, if no further processing has been requested. If we receive your CV, your data may be retained for a maximum of one year for future selection processes.

Newsletter subscription
Purpose: To send you commercial information about our activities and services, including by electronic means.
Legitimation: The user's consent when subscribing to receive information through our form.
Conservation: Until you request to unsubscribe from our commercial mailings.

Comment form (blog).
Purpose: To publish your comment in the blog section of the website.
Legitimation: The user's consent when submitting their personal data and comments on the corresponding publication.
Conservation: As long as the blog post is published on the website.

DATA RETENTION

The personal data provided will be retained, in a general manner, and with the exception of the provisions in the previous paragraph

• a) For as long as required to fulfill the purpose for which they are collected, or as required by the contractual relationship, including the time necessary, in accordance with applicable regulations, to fulfill the relevant obligations and actions that may arise from it.
• b) as long as its deletion is not requested by the interested party.

being blocked when the first of the two events mentioned above occurs.

From that moment on, it will be at the exclusive disposal of judges and courts, the Public Prosecutor's Office, or the competent public authorities, particularly data protection authorities, for the purpose of addressing any potential liabilities arising from the processing, during the statute of limitations. Once this period has elapsed, the data will be deleted.

Profiling is not performed.

LAWFUL PROCESSING

As DATA CONTROLLER, the legal basis for processing your data is:

• a) In the contractual relationship and execution of the contract signed with us.
• b) If you have expressly given your consent, the legal basis is said consent.
• c) Legal legitimacy based on regulatory purposes.
• d) In the legitimate interest, under article 19 of the LOGPGDD.

As DATA CONTROLLER, it is up to the entity that has contracted us as the service provider, in its capacity as DATA CONTROLLER, to establish the legitimacy and processing model.

DATA RECIPIENTS

The data is communicated to our subcontractors, law firms, and other data processing partners. In these cases, the corresponding data processing contract is signed with the recipient, as required by the General Data Protection Regulation.

INTERNATIONAL DATA TRANSFERS

In connection with any transfer of your personal data to countries outside the EEA, the firm will implement appropriate specific measures to ensure an adequate level of protection for your personal data.

USER RIGHTS

• a) Anyone has the right to obtain confirmation as to whether or not we are processing personal data concerning them.
• b) Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• c) In certain circumstances provided for in Article 18 of the GDPR, data subjects may request that the processing of their data be restricted, in which case we will retain them only for the purpose of filing or defending legal claims.
• d) Interested parties may object to the processing of their data for marketing purposes, including profiling. The Foundation will stop processing the data except for compelling legitimate reasons or to exercise or defend against potential legal claims.
• e) Under the right to portability, data subjects have the right to obtain the personal data concerning them in a structured, commonly used and machine-readable format and to transmit them to another controller.

EXERCISE OF GDPR RIGHTS BY THE USER

By writing to the addresses indicated above.

USER RESPONSIBILITY

The User guarantees that the personal data provided through the form is true and is obligated to communicate any changes. Likewise, the User guarantees that the information provided corresponds to their actual situation, is up-to-date, and is accurate. Furthermore, the User undertakes to keep their data updated at all times. They are solely responsible for any inaccuracy or falsity of the data provided and for any damages this may cause to LAULAU COMUNOCA, as the owner of the portal.

COMPLAINT TO THE SPANISH DATA PROTECTION AGENCY

If you understand that the Foundation has not correctly resolved your request, you can request the protection of the Spanish Data Protection Agency, whose data can be consulted at www.agpd.es.

DATA CATEGORIES

That categories of data do we process?

• a) Identification data.
• b) Data about your professional function or activity.
• c) Economic data.

Generally, special categories of data under Articles 9 and 10 of the GDPR are not addressed. If this is the case, the entity will comply with the requirements of Articles 9 and 10, and explicit consent will be collected.

The data received or collected is necessary to fulfill the stated purposes and is treated confidentially in accordance with the privacy and security policies established by the firm.

The data received or collected are those necessary to fulfill the indicated purposes.

ORIGIN

As DATA CONTROLLER, the personal data we process comes from the information you provide when you request services or resources, access our website, or establish any type of relationship with us, directly or indirectly.

As DATA PROCESSORS, the data comes from the DATA CONTROLLER, or we collect it for it during the provision of the service contracted with the CONTROLLER.