1. Data controller
- Controller: NAT BPO SL
- NIF: B26663120
- Trading name: Barcelona Laboral
- Address: Carrer de Balmes, 32, Pral 2º, 08007 Barcelona
- Privacy contact: info@barcelonalaboral.com
- Telephone: 621 391 431
2. Data processed
When you use the form, we may process your name, email address, telephone number, message, confirmation that you have read the privacy information and communications arising from the enquiry. If you contact us by phone or email, we process the data you provide through those channels.
Form fields marked as required — name, email address, telephone number, message and confirmation that the information has been read — are necessary to process the request through this channel. Without them, the form cannot be submitted and we cannot respond through it.
Hosting and security systems may generate technical logs such as IP address, date and time, requested resource, browser type or user agent, and information needed to detect faults, fraud or abuse.
If you accept analytics, Google Analytics may process online identifiers, approximate device information, browsing and usage events to generate aggregate statistics. The tag remains disabled without consent.
3. Purposes and legal bases
- Answering and managing enquiries: handling your request and related communications. The basis is taking pre-contractual steps requested by you when voluntarily submitting the enquiry.
- Assessing and preparing a possible engagement: reviewing initial information, checking whether we can act and preparing a proposal. The basis is taking pre-contractual steps at your request and, if the engagement is formalised, performing the contract.
- Meeting obligations: meeting applicable legal, professional, accounting or preventive obligations. The basis is compliance with the law.
- Security: maintaining site availability, preventing abuse and resolving incidents. The basis is the legitimate interest in protecting the systems and their users.
- Optional analytics: measuring general site use and identifying improvements. The basis is consent, which can be withdrawn through “Cookie preferences”.
We do not sell personal data, use enquiries to send advertising without a valid basis, make automated decisions or create profiles producing legal effects.
4. Retention
Data is retained only for as long as necessary for the purpose for which it was collected. Enquiries that do not lead to an engagement are kept while they are handled and for a reasonable period needed to document the response or potential liabilities; they are then deleted or restricted. If a professional relationship exists, data is kept throughout it and for the statutory periods governing limitation, defence of claims and compliance with obligations. Technical logs are kept for limited periods proportionate to their security purpose.
5. Recipients, processors and transfers
Data is not disclosed to third parties unless required by law or necessary to handle the request. Providers acting as processors may have access, including Netlify for hosting and delivering the site, Formspree to process the form when submitted and Google Analytics when measurement is accepted, as well as necessary email, support or security providers.
Netlify and Formspree may process data in the United States. Netlify states that it uses, as applicable, the EU-US Data Privacy Framework and the standard contractual clauses approved by the European Commission; it publishes its data processing agreement and its privacy policy. Formspree states that it hosts its services on AWS in the United States and relies on standard contractual clauses as a processor; you can consult its security and privacy information. You can request additional information or a copy of the available safeguards by writing to info@barcelonalaboral.com.
6. Rights
You may request access, rectification, erasure, objection, restriction of processing or portability where applicable, and withdraw consent where it is the basis for processing, without affecting its previous lawfulness. Write to info@barcelonalaboral.com stating the right you wish to exercise. We may request the minimum information needed to verify your identity and protect your data.
If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency.
7. Sensitive employment information
An employment matter may involve health, disability, trade union membership, complaints, disciplinary proceedings, claims, financial data or third-party information. Do not send documents or sensitive details through the general form. If they are needed to assess an engagement, an appropriate channel will be indicated after receipt and our ability to act have been confirmed.
8. Minors
The form is not aimed at minors or designed for them to provide data on their own. If an enquiry concerns a minor, it should be made by their representative or an authorised person, initially providing only essential information.
9. Security and updates
Technical and organisational measures proportionate to the risk are applied to preserve data confidentiality, integrity and availability. No system is completely infallible, so you should also avoid sending unnecessary information through unconfirmed channels. This policy may be updated if processing activities, providers or legal requirements change; the displayed date identifies the current version.