"Bruna" is deeply committed to complying with the Spanish and European regulations on the protection of personal data, and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures set forth in the General Data Protection Regulation (RGPD) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Digital Rights Protection (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through contact forms, or by sending emails, and that these will be processed by "Bruna", Responsible for the treatment, whose data are:

Corporate Name: Bruna Audiovisual Producer SCCL

• Tax ID: F66937426 
• Registered Office: C/ Anselm Clavé 17, Nave 15. Poligono Industrial Matacás, 08980 Sant Feliu de Llobregat, Barcelona
• Telephone: 644 238 316
• Email: ei@holabruna.cat 

Collection and Treatment of Personal Data

A personal data is any information relating to a person: number, email, address, telephone, NIF/NIE... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.

"Bruna", as Responsible for the Treatment, has the duty to inform the Users of its website about the collection of personal data that may take place, either by sending an email or by filling in the forms included on the website.

Only the necessary data will be obtained to be able to perform the contracted service, or to be able to adequately respond to the request for information made by the User. The data collected are identifying and correspond to a reasonable minimum to be able to complete the activity carried out. In particular, no specially protected data is collected at any time. In no case will the data be used differently than the purpose for which they have been collected.

Contact forms/email 

Purpose: Respond to your request for information made through our contact form(s).

Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which can be revoked at any time.

Transfer of data: Personal data will be processed through servers managed by Adobe, which will be considered the Data Controller.

Minors

Only persons over the age of 14 may provide personal data on this website. As required by the LOPD and GDD, in the case of children under 14 years of age, the consent of their parents or guardians is a mandatory condition for us to process their personal data.

On the other hand, only persons over the age of 18 may use our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.

Security Measures

Users of the "Bruna" website are informed that the security, technical and organizational measures available to us have been adopted to prevent the loss, misuse, alteration, unauthorized access and theft of data, and that they thus guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions in force in the field of data protection. The personal data collected in the forms are the subject of treatment, solely, by the staff of "Bruna" or by the Designated Data Processors.

The "Bruna" website also has SSL encryption, which allows the user to securely send their personal data through the contact or registration forms on the website.

Data accuracy

The User declares that all the data provided by him are true and correct and undertakes to keep them updated. The User will be responsible for the veracity of his data and will be solely responsible for any conflicts or litigation that may result from the falsity of the same. It is important that, so that we can keep the personal data updated, the User informs "Bruna" whenever there has been any modification in them.

Data transfer

"Bruna" will not transfer or communicate your data to any third party, except in the cases provided for by law or when it is strictly necessary for the provision of a service. Specifically, the data may be transferred to:

• Providers of technological or IT services
• Payment service providers
• Courier and parcel companies
• Third parties or intermediaries, as service providers, who operate in our own name (management, consultancy...).
• Data transfers will take place respecting the strictest confidentiality, using the necessary measures, such as signing confidentiality contracts, or adherence to the privacy policies established on their respective web pages. The User may refuse the transfer of their data to the Treatment Managers, by means of a written request, by any of the previously referenced means.

In addition, in those cases in which it is necessary, Customer data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, Labor Inspection, etc.

Exercise of User Rights

The LOPD and the RGPD grant interested parties the possibility of exercising a series of rights related to the treatment of their personal data. To do this, the User must go, providing documentation that proves his identity (DNI or passport), via electronic mail to ei@holabruna.cat, or via written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: number and surname of the User, the object of the request, the address and the crediting data. 

The exercise of rights must be carried out by the User himself. However, they may be executed by a person authorized as legal representative of the User, providing the documentation that proves said representation.

The User may request the exercise of the following rights:

Right to request access to personal data, which is the right to obtain information about whether your own personal data is being processed, the purpose of the processing that, in this case, is being carried out, as well as the information available about the origin of said data and the communications made or planned for them.

Right to request its rectification, in case the personal data are incorrect or inaccurate, or deletion of the data that turn out to be inadequate or excessive.

Right to request the limitation of your treatment, in which case only the data strictly necessary for the exercise or the defense of claims will be kept by "Bruna".

Right to object to the treatment: refers to the right of the interested party not to carry out the treatment of their personal data or to stop the same in the cases where their consent is not necessary for the treatment, which are commercial prospecting files or which have the purpose of adopting decisions referred to the interested party and based solely on the automated treatment of their data, unless for legitimate reasons or the exercise or the defense of possible claims they have to continue processing.

Right to data portability: if you want your data to be processed by another company, "Bruna" will facilitate the portability of your data in an exportable format.

In the event that consent has been granted for a specific purpose, the User has the right to withdraw consent at any time, without this affecting the legality of the treatment based on consent prior to its withdrawal.

We promise to execute all these rights within the maximum legal term (1 month).

If a User considers that there is a problem with the way in which "Bruna" is handling their data, they can direct their complaints to the Security Manager or the corresponding data protection authority, the Spanish Data Protection Agency being the one indicated in the case of Spain.

Data retention

The personal data of the Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to attend to the request for information, or until the consent granted is revoked.

The personal data of the Clients will be treated until the end of the contractual relationship. The period of conservation of personal data will be the minimum necessary, pudiendo mantenerse hasta:

4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registrations, terminations, quotes, payment of salaries...); arts 66 et seq. General Tax Law (accounting books...)

5 years: Art. 1964 Civil Code (personal actions without special time limit)

6 years: Art. 30 Commercial Code (accounting books, invoices...)

10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.

Without delay: disaggregated and anonymized data.

In the case of candidate data processing (CV), "Bruna" will be able to store their resume for a maximum of two years to include it in future calls, unless the candidate states otherwise.

Social networks

"Bruna" has a profile on some of the main social networks on the Internet (Facebook, Twitter, Instagram, Vimeo, Tumblr), recognizing in all cases Responsible for the treatment of the data of its followers, fans, subscribers, commentators and other profiles of Users (hereinafter, followers) published by "Bruna".

The purpose of data processing by "Bruna", when the law does not prohibit it, will be to inform its followers about its activities and offers, by any means that the social network allows, as well as to provide personalized customer service. The legal basis that legitimizes this treatment will be the consent of the interested party, which can be revoked at any time.

In no case will "Bruna" extract data from social networks, unless the User's consent has been obtained promptly and expressly for this (for example, to run a contest).

Personnel Selection

The applicant who sends electronic communications to "Bruna", with the purpose of accessing the personnel selection processes of the person in charge, authorizes us to analyze the documents sent (for example, the CV), all the content that is directly accessible through Internet search engines (for example, Google), the profiles that he maintains in professional social networks (for example, LinkedIn), the data obtained in the access tests and the information that he reveals in the job interview, with the objective of assessing his candidacy and power, in his case, offer him a job. In the event that the candidate is not selected, "Bruna" will be able to store his CV for a maximum of two years, to include it in future calls, unless the candidate states otherwise. The legal basis that legitimizes this treatment will be the consent of the interested party, which can be revoked at any time.

Confidentiality

The information provided by the User will, in any case, be considered confidential, without being used for purposes other than those described here. "Bruna" undertakes not to divulge or reveal information about the User's claims, the reasons for the advice requested or the duration of their relationship with him.

Validity

This privacy and data protection policy has been drawn up by ExpertosLOPD®, a data protection company, on April 26, 2021, and may vary depending on the changes in regulations and jurisprudence that are being produced, being the responsibility of the data owner to read the updated document, in order to know their rights and obligations in this regard at all times.