I. PRIVACY AND DATA PROTECTION POLICY
In compliance with current legislation, OnTrace (hereinafter also the Website) undertakes to adopt the necessary technical and organizational measures according to the appropriate level of security required for the data collected.
Laws incorporated into this privacy policy
This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the internet, specifically:
Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR).
Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
Royal Decree 1720/2007, of 21 December, implementing Organic Law 15/1999.
Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the data controller
The controller of the personal data collected through OnTrace is:
ONTRACE SL, Tax ID B65688376, registered in the Commercial Registry of Barcelona, Volume 45070, Folio 111, Sheet B48037.
Representative: Josep Mesado.
Contact details:
Address: RONDA PAÏSOS CATALANS 43, 08304 – MATARÓ (Barcelona)
Telephone: 934 455 976
Email: info@on-trace.com
Registration of personal data
In compliance with the GDPR and the LOPD-GDD, the personal data collected through the Website’s forms will be incorporated into a file managed by OnTrace with the purpose of facilitating, streamlining, and fulfilling commitments between the Website and the User, as well as responding to requests or inquiries.
Unless the exception in Article 30.5 GDPR applies, a record of processing activities is kept, detailing the processing operations and purposes.
Principles applicable to data processing
Processing of the User’s personal data will adhere to the principles established in Article 5 GDPR and Article 4 LOPD-GDD:
Lawfulness, fairness and transparency
Purpose limitation
Data minimization
Accuracy
Storage limitation
Integrity and confidentiality
Accountability
Categories of personal data
Only identification data are processed. No special categories of personal data (Article 9 GDPR) are processed.
Legal basis for processing
The legal basis for processing personal data is the User’s consent, which will be obtained in an explicit and verifiable manner.
The User may withdraw consent at any time, with the same ease with which it was granted.
When data is requested in forms, the User will be informed if a field is mandatory.
Purposes of processing
Personal data are collected and processed for:
Facilitating, streamlining, and fulfilling commitments between the Website and the User
Responding to requests or inquiries
Commercial, personalization, operational, and statistical purposes
Marketing studies, data analysis, and improving the Website’s content, quality, and navigation
The User will be informed of specific purposes when the data is collected.
Data retention period
Personal data will be stored only for the minimum time necessary for their processing purposes and, in any case, for 24 months, or until the User requests deletion.
Recipients of personal data
If data is shared, the recipients are:
Analytics Google Spain SL, Plaza Pablo Ruiz Picasso 1, Torre Picasso, 28020 Madrid
If data must be transferred to a third country or international organization, the User will be informed.
Personal data of minors
Following Articles 8 GDPR and 7 of Organic Law 3/2018, only individuals over 14 years of age may lawfully consent to data processing.
For those under 14, the consent of parents or guardians is required.
Confidentiality and security
OnTrace undertakes to adopt necessary security measures to prevent destruction, loss, alteration, or unauthorized access to personal data.
If a data security breach occurs and it poses a high risk to individuals’ rights and freedoms, OnTrace will notify the User without undue delay.
Data will be treated as confidential, and confidentiality will be guaranteed by all employees and collaborators.
User rights
Users may exercise the following rights under the GDPR and the LOPD-GDD:
Right of access
Right of rectification
Right of erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object
Right not to be subject to automated decision-making, including profiling
To exercise these rights, the User must send a written request with reference “GDPR-www.on-trace.com“ including:
Name, surname(s), and copy of ID
Specific request and reasons
Notification address
Date and signature
Supporting documents, if any
Addresses for submitting requests:
Postal address: RONDA PAÏSOS CATALANS 43, 08304 – MATARÓ (Barcelona)
Email: info@on-trace.com
Links to third-party websites
The Website may contain links to third-party sites, each with its own privacy policy and responsible for its own data practices.
Complaints before the supervisory authority
If the User believes there is a violation of data protection law, they may file a complaint with their relevant supervisory authority.
In Spain: Spanish Data Protection Agency (AEPD) — https://www.aepd.es/
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
The User must have read and accepted this Privacy Policy in order to use the Website.
Use of the Website implies acceptance of the Policy.
OnTrace reserves the right to modify this Policy according to legislative, jurisprudential, or regulatory changes.
Updates will not be explicitly notified; Users are advised to review this page periodically.
Updated according to GDPR and Organic Law 3/2018.