Privacy Policy

‘Espai Coriveu’ is deeply committed to complying with Spanish and European personal data protection regulations, and guarantees full compliance with the obligations established, as well as the implementation of the security measures provided for in the General Data Protection Regulation (RGPD) (EU) 2016/679, of 27 th April, and in the Organic Law 3/2018, of 5 th of December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require certain personal data to be provided through registration or contact forms, or by sending emails, and that these will be subject to processing by ‘Espai Coriveu, Data Controller, whose data are:

  • Company Name: Espai Coriveu, S.L.U..
  • CIF: B01886118
  • Registered Office: C/ Montmany, 17, local – 08012, Barcelona, Spain
  • Phone: 644 218 281
  • Email: info@espaicoriveu.com

Collection and Processing of Personal Data

A personal data is any information related to a person: name, email, address, telephone, NIF/NIE… Additionally, when a User visits our website, certain information is stored automatically for technical reasons, such as the IP address assigned by their Internet service provider.

“Espai Coriveu”, as Data Controller, has the duty to inform Users of its website about the collection of personal data that may be carried out, either by sending an email or by filling out the forms included on the website.

Only the precise data necessary to provide the contracted service will be obtained, or to adequately respond to the information request made by the User. The collected data are identifying and correspond to a reasonable minimum necessary to carry out the activity performed. In particular, no specially protected data is collected at any time. Under no circumstances will the data be used for purposes other than those for which they were collected.

Contact forms/email

Purpose: To respond to your information request made through our contact form(s).

Legitimation: The legal basis that legitimizes this processing is the User's consent, which can be revoked at any time.

Data transfer: Los datos personales serán tratados a través de servidores gestionados por Factoría Digital, que tendrá la consideración de Encargado del Tratamiento.

Formularios de alta en lista de correo (newsletter)

Purpose: Envío de comunicaciones, algunas de ellas comerciales, de interés para el Usuarios según la temática del blog. Tal y como establece la LSSICE, “Espai Coriveu” se compromete a no remitir comunicaciones comerciales sin identificarlas como tales. A estos efectos, no será considerada como comunicación comercial la información enviada a los clientes para el mantenimiento de la relación contractual existente, de haberla.

Legitimation: The legal basis that legitimizes this processing is the User's consent, which can be revoked at any time.

Data transfer: Los datos personales serán tratados a través de servidores gestionados por MailChimp, que tendrá la consideración de Encargado del Tratamiento.

Formularios de registro/alta de cliente/contratación

Finalidades:

  • Gestionar su alta de Usuario en nuestra página web.
  • Gestionar las compras realizadas.
  • Proporcionar información acerca de la tramitación y el estado de las compras.
  • Registro histórico de las compras realizadas en nuestra página web.
  • Gestión de comentarios y contenidos.
  • Envío de comunicaciones vía email y/o teléfono, con el fin de informar al Usuario de posibles incidencias, errores, problemas y/o estado de los pedidos.

Legitimation: La base jurídica que legitima este tratamiento es la ejecución de un contrato.

Data transfer: “Espai Coriveu” no cederá ni comunicará a ningún tercero tus datos, excepto en los casos legalmente previstos o cuando sea estrictamente necesario para la prestación de un servicio. Concretamente, los datos podrán ser cedidos a:

  • Proveedores de servicios tecnológicos.
  • Proveedores de servicios de pago.
  • Empresas de mensajería y paquetería.
  • Terceros o intermediarios, en calidad de prestadores de servicios, que operen en nuestro propio nombre (gestoría, asesoría…).

Las cesiones de datos se producirán respetando la más estricta confidencialidad, empleando las medidas necesarias, tales como la firma de contratos de confidencialidad, o la adhesión a sus políticas de privacidad establecidas en sus respectivas páginas web. El Usuario podrá negarse a la cesión de sus datos a los Encargados del Tratamiento, mediante petición escrita, por cualquiera de los medios anteriormente referenciados.

In addition, en aquellos casos en que sea necesario, los datos de Clientes podrán ser cedidos a determinados organismos, en cumplimiento de una obligación legal: Agencia Tributaria Española, entidades bancarias, Inspección de Trabajo, etc.

Formulario de comentarios

Purpose: realizar un comentario o reseña para su publicación en la página web.

Legitimation: The legal basis that legitimizes this processing is the User's consent, which can be revoked at any time.

Data transfer: Los datos personales serán tratados a través de los servidores de esta web, gestionados por Factoría Digital, que tendrá la consideración de Encargado del Tratamiento.

Minors

Solo podrán aportar datos personales en este sitio web las personas mayores de 14 years old. Según obliga la LOPD y GDD, en caso de menores de 14 years old, será condición obligatoria el consentimiento de sus padres o tutores para que podamos tratar sus datos personales.

On the other hand, solo podrán contratar nuestros servicios las personas mayores de 18 years old. En caso de menores de 18 years old, será condición obligatoria el consentimiento de sus padres o tutores legales para que podamos prestar los servicios ofertados, salvo que el menor esté emancipado.

Registro de Usuarios

When the User registers through the corresponding form, the information we collect includes:

  • Name and surname
  • Email and/or phone
  • IP
  • Username/password

In addition, the User must accept the Terms of Contract, outlined in another section of the website.

The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter their email to continue the process and be able to modify it, by clicking the link that will be sent to the entered email address. The User is responsible for keeping the confidentiality of their password, as well as for all uses made of it.. Deberá comunicar a “Espai Coriveu” cualquier uso no autorizado que se haga de su cuenta o contraseña a la mayor brevedad posible.

El Usuario, una vez registrado, tiene acceso a un panel privado, en el que podrá ver determinados contenidos, registro de compras realizadas, etc. También puede gestionar opciones de su cuenta, como la contraseña o datos de Usuario.

El Usuario podrá recibir las siguientes notificaciones:

  • Al darse de alta en la plataforma (email de validación de cuenta).
  • Al realizar compras, tales como el justificante de las mismas, incidencias, etc.
  • El Usuario recibe la newsletter de la tienda si se ha dado de alta en el mismo, de la que puede darse de baja en su panel de Usuario y en los enlaces correspondientes incluidos al pie de la newsletter.
  • For comments made, and responses to them.
  • For password recovery (specified in the previous field).

When unsubscribing or deleting the account.

Security Measures

Users of the 'Espai Coriveu' website are informed that security measures, technical and organizational at our disposal have been adopted to prevent loss, misuse, alteration, unauthorized access and theft of data, and that thus ensure confidentiality, integrity and quality of the information contained in them, in accordance with the provisions of the current regulations on data protection. The personal data collected in the forms are processed, solely, by the staff of 'Espai Coriveu' or the designated Data Processors.
The 'Espai Coriveu' Website also has SSL encryption, which allows the User to securely send their personal data through the contact or registration forms on the website.

Veracity of the data

The User states that all data provided by them is true and correct and commits to keeping it updated. The User will be responsible for the truthfulness of their data and will be solely responsible for any conflicts or litigation that may arise from its falsity. It is important that, in order for us to keep personal data updated, the User must inform 'Espai Coriveu' whenever there has been any modification to them.

Exercise of User Rights

The LOPD and GDD and the RGPD grant interested parties the ability to exercise a series of rights related to the processing of their personal data. For this, the User must contact, via email at info@espaicoriveu.com, or through a written communication to the address listed in our Legal Notice, identifying themselves adequately. Such communication must reflect the following information: name and surname of the User, the purpose of the request, the address and supporting data.

The exercise of rights must be carried out by the User themselves. However, podrán ser ejecutados por una persona autorizada como representante legal del Usuario, aportándose la documentación que acredite dicha representación.

El Usuario podrá solicitar el ejercicio de los derechos siguientes:

  • Derecho a solicitar el access a los datos personales, que es el derecho a obtener información sobre si sus propios datos de carácter personal están siendo objeto de tratamiento, la finalidad del tratamiento que, in each case, se esté realizando, así como la información disponible sobre el origen de dichos datos y las comunicaciones realizadas o previstas de los mismos.
  • Derecho a solicitar su rectify, en caso de que los datos personales sean incorrectos o inexactos, or Suppression de los datos que resulten ser inadecuados o excesivos.
  • Derecho a solicitar la limitación de su tratamiento, en cuyo caso únicamente serán conservados por “Espai Coriveu” los datos estrictamente necesarios para el ejercicio o la defensa de reclamaciones.
  • Derecho a oponerse al tratamiento: se refiere al derecho del interesado a que no se lleve a cabo el tratamiento de sus datos personales o se cese en el mismo en los supuestos en que no sea necesario su consentimiento para el tratamiento, que se trate de ficheros de prospección comerciales o que tengan la finalidad de adoptar decisiones referidas al interesado y basadas únicamente en el tratamiento automatizado de sus datos, salvo que por motivos legítimos o el ejercicio o la defensa de posibles reclamaciones se tengan que seguir tratando.
  • Derecho a la portabilidad de los datos: In case you want your data to be processed by another company, 'Espai Coriveu' will provide you with the portability of your data in an exportable format.

In the event that consent has been granted for a specific purpose, the User has the right to withdraw consent at any time, without affecting the lawfulness of processing based on the consent given prior to its withdrawal.

We commit to execute all these rights within the maximum legal timeframe (1 month).

If a User believes there is an issue with how 'Espai Coriveu' is handling their data, they can direct their complaints to the Security Officer or the relevant data protection authority., The Spanish Agency for Data Protection is the designated authority in the case of Spain.

Data retention

The personal data of Users who use the contact form or who send us an email requesting information will be processed for the strictly necessary time to attend to the information request, or until the consent granted is revoked.

The personal data of the Client will be processed until the contractual relationship ends. The period for retaining personal data will be the minimum necessary, being able to be kept until:

  • 4 years old: Law on Offenses and Penalties in Social Order (obligations regarding membership, registrations, terminations, contributions, payment of salaries…); Arts. 66 and others. General Tax Law (accounting books...)
  • 5 years old: Article. 1964 Civil Code (personal actions without special deadline)
  • 6 years old: Article. 30 Commercial Code (accounting books, invoices...)
  • 10 years old: Article. 25 Law on the Prevention of Money Laundering and Terrorism Financing.
  • No deadline: disaggregated and anonymized data.

On its part, the data of Users who register for the bulletin or newsletter will be kept indefinitely, until the granted consent is revoked.

In the case of processing data of candidates (C.V.), 'Espai Coriveu' may store your CV for a maximum of two years to include it in future calls, unless the candidate objects.

Social Networks

“Espai Coriveu” cuenta con perfil en algunas de las principales redes sociales de Internet (Facebook, X, YouTube, Instagram). La finalidad del tratamiento de datos por parte de “Espai Coriveu” será la de informar a sus seguidores sobre sus actividades, utilizando las herramientas que la red social en cuestión permita, y brindar un servicio personalizado de atención al usuario. El Usuario debe tener en cuenta que el uso de estas redes sociales está sujeto a sus respectivas condiciones de uso y políticas de privacidad de las plataformas. “Espai Coriveu” recomienda a los Usuarios la consulta previa de estas condiciones y políticas de privacidad antes de utilizar los enlaces o aplicaciones proporcionados.

Under no circumstances will 'Espai Coriveu' extract data from social networks, unless explicit and specific consent has been obtained from the User for this purpose. In addition, 'Espai Coriveu' is not responsible for the privacy practices of these social networks or their applications, especially regarding confidentiality, the processing of personal data and content.

International Data Transfers

'Espai Coriveu' uses electronic communication delivery services from a company MailChimp, which is located in the United States. Standard contractual clauses approved by the European Commission have been signed with this entity, in order to ensure an adequate level of protection in the processing of your personal data, in accordance with the criteria established by GDPR.

Personnel Selection

The applicant who sends electronic communications to 'Espai Coriveu', with the aim of accessing the personnel selection processes of the responsible party, authorizes us to analyze the documents submitted (for example, the CV), all content that is directly accessible through Internet search engines (for example, Google), the profiles maintained on professional social networks (for example, LinkedIn), the data obtained from the entrance tests and the information revealed in the job interview, with the objective of evaluating their application and being able, in each case, to offer them a job. In case the candidate is not selected, 'Espai Coriveu' may keep their CV stored. for a maximum of two years, para incorporarlo a futuras convocatorias, unless the candidate states otherwise. The legal basis that legitimizes this treatment will be the consent of the interested party, which can be revoked at any time.

Confidentiality

The information provided by the User will have, in all cases, the status of confidential, and may not be used for purposes other than those described here. “Espai Coriveu” agrees not to disclose or reveal information about the User's claims, the reasons for the requested advice, or the duration of their relationship with them.

Validity

This privacy and data protection policy has been written on 04 June 2025. It may vary depending on changes in regulations and jurisprudence that occur., siendo responsabilidad del titular de los datos la lectura del documento actualizado, en orden a conocer sus derechos y obligaciones al respecto en cada momento.