Privacy Policy

1. Data controller

The data controller responsible for processing personal data is CARNS I EMBOTITS TORRA SL, with tax identification number B63349229 and registered office at C/ Camí Ral, 15. You can contact us by email at [administracio@carnstorra.cat](mailto:administracio@carnstorra.cat).

2. Data we collect

We collect the name and email address when a user completes the contact form. We may also collect the email address and, where applicable, the name when the user gives their explicit consent to receive commercial communications.

3. Purpose of processing

Data provided through the contact form is used exclusively to respond to enquiries and manage communication with users. Separately, and only where the user has given their explicit and separate consent, their email address will be used to send commercial and promotional communications from CARNS I EMBOTITS TORRA SL, including newsletters, promotions and updates, through the Listmonk platform.

4. Legal basis

The processing of data submitted through the contact form is based on the user's consent, given voluntarily when submitting the form (Art. 6.1.a GDPR). The sending of commercial communications by email is also based on the user's explicit, informed and separate consent (Art. 6.1.a GDPR and Art. 21 LSSI-CE), provided through a specific opt-in checkbox that is not selected by default. This consent may be withdrawn at any time, without retroactive effect, by contacting [administracio@carnstorra.cat](mailto:administracio@carnstorra.cat) or by using the unsubscribe link included in each communication.

5. Data retention

Data collected through the contact form will be retained for as long as necessary to manage the enquiry and, once it has been resolved, for a further 6 months to address any potential liabilities. Data used to send commercial communications will be retained until the user withdraws their consent or until the relationship with CARNS I EMBOTITS TORRA SL ends, at which point the data will be deleted or anonymised.

6. Recipients and data processors

Personal data will not be disclosed to third parties, except where legally required. To provide certain services, the data controller works with providers acting as data processors who may access personal data solely to provide the contracted services, subject to the appropriate security measures and agreements required by data protection regulations. These providers may include hosting services, infrastructure providers, email delivery services and providers responsible for the technical management of contact forms.

6.1. Technical management of contact forms

For the technical management of contact forms, the data controller uses the services of BYTCAT DIGITAL SOLUTIONS SL, which acts as a data processor in accordance with Article 28 of Regulation (EU) 2016/679 (GDPR). Data is processed exclusively for the purpose of managing enquiry submissions and ensuring the correct technical operation of the service. BYTCAT does not use this data for its own purposes or disclose it to third parties, except where legally required.

You can obtain more information about BYTCAT DIGITAL SOLUTIONS SL, including its privacy policies, technological services and company identification details, through the following official links:

7. Consequences of not providing data

Providing the requested information in the form is necessary to process your enquiry. If the requested information is not provided, it will not be possible to manage the enquiry.

8. Users' rights

Users may exercise their rights of access, rectification, erasure, restriction of processing, data portability and objection to processing at any time by contacting [administracio@carnstorra.cat](mailto:administracio@carnstorra.cat). CARNS I EMBOTITS TORRA SL will respond to the request within a maximum period of one month. If a user considers that the processing of their personal data does not comply with applicable regulations, they also have the right to lodge a complaint with the Spanish Data Protection Agency ([www.aepd.es](http://www.aepd.es)).

9. Security

Appropriate technical and organisational measures are applied to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access.

10. Cookies and analytics

This website currently does not use tracking cookies or analytics tools. If these are introduced in the future, this policy will be updated and users will be informed through the corresponding cookie notice.