Privacy Policy

Data Controller

The company responsible for the processing of your data under this Privacy Policy is:

LLEAL S.A.U
Tax ID No. (NIF): A08150344
Registered address: Carrer Mollet 53 08401 Granollers
Email address: lleal@lleal.com

Website: lleal.com
Telephone: +34938611601
Registered in the Barcelona Commercial Registry, Book 765, Volume 1313, Folio 1, Sheet 9409, section 2.

At LLEAL S.A.U, we recognise the importance of protecting your personal information and are committed to processing it responsibly and in accordance with data protection laws.

This Privacy Policy is intended to regulate all aspects relating to the processing of data of the different users who browse or provide their personal data through the various forms located on the website.

Personal Data

Personal data means information that identifies you or makes you identifiable. Through the website, in the boxes provided for this purpose, we collect the personal data that the user communicates to us: first name, surname, email address, telephone number, postal address, town/city, etc., as well as any data that the user voluntarily provides to us through any of the social networks on which the user is registered. In this case, privacy will depend on the settings established by the user, as well as on the terms and conditions of the relevant social network.

The user’s visit to the website does not imply that they must provide any information regarding their personal data. However, where such data are provided, they will be processed lawfully and in accordance at all times with the principles and rights set out in GDPR 2016/679 of 27 April 2016 and Spanish Organic Law 3/2018 of 5 December on Data Protection and the Guarantee of Digital Rights.

Purpose, duration and legal basis of processing:

The data provided by the user will be processed for the following purposes:

  • To deal with the request or enquiry made by the user through the contact form located on the website. We collect and process the user’s personal data in order to process and manage their request, enquiry or any other petition made through said form. These data will be retained for the time necessary to fulfil the request and for the period established by law, with a minimum duration of 3 years. The legal basis for processing the data shall be the consent given by the user when selecting the box accepting our Privacy Policy before sending the request. The user has the right to withdraw their consent at any time, without this affecting the lawfulness of processing based on consent prior to its withdrawal.
  • To improve your browsing experience on the website. These data will be retained until the user withdraws their consent to the processing thereof by deleting cookies, and for the period established by law, with a minimum duration of 3 years. The legal basis for improving your browsing experience on the website is the consent given by the user when accepting cookies. The user has the right to withdraw their consent at any time, without this affecting the lawfulness of processing based on consent prior to its withdrawal.
  • To manage our social networks and send you information about our activities and products.
    These data will be retained until the user withdraws their consent to the processing thereof, and for the period established by law, with a minimum duration of 3 years.
    The legal basis for managing our social networks and sending you information about our activities and news is the consent you give us for this purpose. The user has the right to withdraw their consent at any time, without this affecting the lawfulness of processing based on consent prior to its withdrawal.
  • To send communications and newsletters about LLEAL S.A.U. products.With the user’s consent, we collect and process their personal data in order to send them information about our products and services. These data will be retained until the user withdraws their consent to the processing thereof, and for the period established by law, with a minimum duration of 3 years. The legal basis for processing the data shall be the consent given by the user when selecting the box accepting our Privacy Policy before accepting the relevant box in the form enabled for this purpose on the website. The user has the right to withdraw their consent at any time, without this affecting the lawfulness of processing based on consent prior to its withdrawal.
  • To manage the CV submitted by the data subject through the form enabled for this purpose and include it in the company’s candidate database. These data will be processed for a maximum period of one year, after which the data will be blocked for the legally established period, guaranteeing full respect for confidentiality both during processing and during their subsequent destruction. The legal basis for managing and processing the data subject’s CV is their consent, which they express by carrying out the affirmative action of sending it and selecting the box accepting our Privacy Policy prior to submission. The user has the right to withdraw their consent at any time, without this affecting the lawfulness of processing based on consent prior to its withdrawal.
  • To manage the “Customer Service” chat service via WhatsApp offered on our website for any queries regarding our services/products. In order to constantly improve the quality of our customer service, we record the chat history for analysis and improvement purposes. These records are deleted once they have been assessed and once the period established by law has been fulfilled, with a minimum duration of 3 years. The legal basis is the consent you give us for use of the service. The user has the right to withdraw their consent at any time, without this affecting the lawfulness of processing based on consent prior to its withdrawal.
  • To manage communications submitted through the whistleblowing channel implemented by the Controller. We will process the personal data —where the communication is not anonymous— and information provided by the data subject for the purpose of managing and resolving the report made through the channel, which can be accessed via the website. The legal basis for such processing is the performance of a task carried out in the public interest, as well as compliance with a legal obligation. The data will be retained only for the time strictly necessary to decide whether or not to initiate an investigation into the reported facts. In any event, three months after the data have been entered, if the report has not progressed, the data may be retained solely for the purpose of leaving evidence of the system, in anonymised form. If the report has progressed, the data will be erased and blocked from the internal whistleblowing system, and retained for a period not exceeding ten years. The data may continue to be processed by the competent authority and body in the event of an investigation into the reported facts. Data will only be disclosed to third parties where necessary for the adoption of disciplinary measures or for the processing of any judicial proceedings that may be appropriate, without prejudice to notifying the competent authority of facts constituting a criminal or administrative offence.

Transfer or disclosure of personal data

Your data will not be disclosed or transferred to third parties, unless there is a legal obligation to do so, or to those group companies for administrative and internal management purposes that will act as Data Processors.

International transfers

At LLEAL S.A.U. we process your data within the European Economic Area and, as a general rule, we engage service providers also located within the European Economic Area or in countries that have been declared to have an adequate level of protection.

Should we need to use service providers that carry out processing outside the European Economic Area or in countries that have not been declared to have an adequate level of protection, we would ensure the security and lawfulness of the processing of your data by means of adequacy decisions, standard contractual clauses, binding corporate rules, derogations or any other instrument approved by the supervisory authority that provides appropriate safeguards for the international transfer of data.

Likewise, LLEAL S.A.U. makes the WhatsApp application available so that interested parties may contact the CONTROLLER by this means. In this regard, we inform you that, although the servers of the WhatsApp application for EU users are located in Ireland, communications may occur with servers in the USA, which would involve an international transfer of data carried out with full safeguards in accordance with the Adequacy Decision relating to the EU-US Data Privacy Framework of 10 July 2023.

Updating data

In order for us to keep personal data up to date, it is important that the user informs us whenever there has been any change to such data; otherwise, we shall not be liable for their accuracy.

The user guarantees that the personal data provided are true and accurate, and guarantees that all the information provided reflects the actual situation, is up to date and is accurate, undertaking to communicate any modification.

Third-party data

If the user provides data relating to third parties for any purpose to LLEAL S.A.U., they guarantee that they have obtained such data lawfully, that they have previously informed the affected parties, obtaining their consent to disclose the data, and that the information provided is accurate and truthful.

Mandatory nature of the requested information

Todos nuestros formularios cuentan con un asterisco (*) en los datos obligatorios. Si el usuario no facilita esos campos, o no marca la casilla de aceptación de la política de privacidad, no se permitirá el envío de la información.

Rights of data subjects:

You have the right to access your data and obtain confirmation as to whether they are being processed, as well as a copy of the personal data being processed. You have the right to update them and request the rectification of inaccurate data, or request their erasure where the data are no longer necessary for the purposes for which they were collected. You may request the restriction of the processing of your data and object to their processing by withdrawing your consent, as well as exercise the right to data portability. Likewise, you have the right not to be subject to decisions based solely on automated processing of your personal data. You may exercise your rights by contacting us at lleal@lleal.com.

If you consider that your rights have not been duly addressed, you have the right to lodge a complaint with the Supervisory Authority at www.aepd.es.

Processing of minors’ data

Any person who provides data through the forms on this website and accepts their processing declares that they are over 14 years of age, and access to and use of the portal by minors under that age is prohibited. If at any time the Controller detects that a minor under the age of 14 has provided personal data, we will proceed to delete such data. Likewise, parents or guardians may in any case contact LLEAL S.A.U. to block the access account of minors under their care who have registered by falsifying their identity.

Processing of cookies

A cookie is a small file that is downloaded and stored on the user’s computer when the user accesses a website. Cookies allow the website, among other things, to store and retrieve information about the browsing habits of the user or their device and, depending on the information they contain and the way in which the user uses their device, they may be used to recognise the user.

The user has the option to prevent the generation of cookies by selecting the corresponding option in their browser software. You can obtain further information by reading our Cookie Policy.