Confidentiality and security are core values at CELER PAWLOWSKY, S.L. (CPSL), and because of this we are committed to ensuring the privacy of our customers’ personal data at all times and to collecting only essential information.

Below you’ll find everything you need to know about our Privacy Policy regarding the personal data we collect, including:

• Who processes your data
• Why we request your data
• The legal grounds for processing your data
• How long we store your data
• Who your data is disclosed to
• What your rights are

Who is responsible for processing your data?

Company name: CELER PAWLOWSKY, S.L. (CPSL)

Tax I.D. No.: ESB60266798

ADDRESS: Ronda Sant Pere 52, Planta 5, P014 08010, Barcelona (Spain)

Contact email: rgpd@cpsl.com

In addition, we hereby inform you that data may be shared with other companies within the CPSL Group, each acting within the scope of their respective areas of competence, in order to serve you better and facilitate our companies’ ordinary activities.

The following companies are part of the CPSL Group:

CPSL Documentation & Tools, GmbH

BülowBogen Business Center. Heilbronner Strasse 150,  Office #60. 70191 Stuttgart, Germany

Tax I.D. No.: DE224408620

CPSL USA Corporation

One Beacon St, 15th floor, Suite #15B135, Boston, MA 02108, USA

Who are the data subjects?

The personal data that is processed belongs to the following data subjects:

• Individuals who have supplied us with their data via any of the forms on the website for the purpose of making enquiries or obtaining information on our services and activities
• Individuals who have subscribed to our blog
• Individuals who apply to work with us
• Students who apply for internships in CPSL
• Individuals who want to join CPSL’s team of external partners

For what purposes and on what legal grounds do we use personal data?

At CPSL, we process personal data in order to respond to requests for information or answer your enquiries.

This personal data will be processed for the legitimate purposes described below.

• Responding to information or contact requests

At CPSL, we will use the contact information provided to answer requests and enquiries regarding our products and services, which may be made using the form available on the website or by sending an email to one of the contact addresses listed.

Legal grounds:

CPSL’s legitimate interest in processing data, taking into consideration the reasonable expectations of the data subjects who expect to receive a response to their enquiries

Explicit consent, which is expressed by sending data via the form provided for this sole purpose

• Managing subscriptions to CPSL’s blog

CPSL will process the contact information provided for the purpose of managing blog subscriptions and sending messages that contain information on new blog content.

Legal grounds:

Explicit consent, which is expressed by sending data via the form provided for this sole purpose

• Selecting candidates who apply to work at CPSL

The personal data of individuals who apply to work at CPSL will be processed for the purposes of conducting the hiring process and validating applications for open positions.

Legal grounds:

CPSL’s legitimate interest in managing job applications for open hiring processes, taking into consideration the reasonable expectations of the data subjects who are participating in these processes

Processing which is necessary to execute a contract to which the data subject is party or to take steps at the data subject’s request prior to entering into the contract

Explicit consent, which is expressed by sending data via the form provided for this sole purpose.

• Selecting candidates for internships in CPSL

The personal data of individuals who apply for internships at CPSL will be processed for the purpose of validating their applications.

Legal grounds:

CPSL’s legitimate interest in managing applications for internships in CPSL, taking into consideration the reasonable expectations of the data subjects who are participating in these processes

Processing which is necessary to execute a contract to which the data subject is party or to take steps at the data subject’s request prior to entering into the contract

The personal data of individuals who wish to join CPSL’s team of external partners will be processed for the purpose of confirming that they possess the skills and abilities required to provide the service in question.

Legal grounds:

CPSL’s legitimate interest in evaluating applicants who wish to join CPSL’s team of external partners, taking into consideration the reasonable expectations of the data subjects who are participating in these processes

Processing which is necessary to execute a contract to which the data subject is party or to take steps at the data subject’s request prior to entering into the contract

Explicit consent, which is expressed by sending data via the form provided for this sole purpose.

In addition to the purposes set out above, CPSL may also process personal data for other reasons. In this case, the data subject will receive all information necessary regarding the processing of this data, and CPSL will request the subject’s consent, should it be required.

How long will CPSL store the data?

As a general rule, data will be stored for as long as is necessary to fulfil the purpose for which it was requested and to enable any liability arising from this purpose or from the data processing to be determined.

This means, inter alia, that CPSL will store data subjects’ personal data for as long as their relationship with us lasts, and, if applicable, for as long as is necessary to establish, exercise, or defend legal claims, or to fulfil legal obligations under the applicable law.

With respect to the data of candidates who apply to work with us, whether this entails participating in hiring processes, doing internships, or providing services as a partner, this data will be stored for a maximum of 1 year if the application is not successful during this time or if the data subject has not consented to storage of the data for a longer period.

After this period has lapsed, CPSL will to cease all processing of personal data and to destroy, block, or anonymize this data to the maximum extent possible in view of the purpose for which it is stored.

Whom will the data be disclosed to?

Personal data will only be transferred to third parties if it is necessary in order to respond to a request, if there is a legal obligation to do so, or if the data subject has consented.

Notwithstanding the foregoing, data may be shared among the various companies that comprise the CPSL Group. The disclosure of data between the companies in the group is based on a legitimate interest in transferring personal data within the business group for internal administrative purposes. Nevertheless, under no circumstances will the data of EU citizens be disclosed to companies outside the EU.

We may also disclose data to domestic or international companies that provide us with services associated with the company’s ordinary and administrative activities, in their capacity as data processors and in connection with the provision of services. These companies may include, inter alia, providers of services such as email, web hosting, server hosting, SaaS management applications, cloud file storage, and other services.

The provision of these services may involve the processing of personal data by companies located in countries outside the European Economic Area (international data transfers). However, this will only be done if the country in question ensures an adequate level of protection or, for organizations in the USA, with companies that are accredited under the EU-US Privacy Shield. Commission Implementing Decision (EU) 2016/1250 dated July 12, 2016.

What rights do data subjects have when they provide us with their data?

At any time, data subjects may exercise their rights of access, rectification, deletion, or portability of the personal data processed by CPSL, or the right to objection or restriction of the processing of this data.

These rights may be exercised free of charge by data subjects or by their legal representatives, where applicable, by sending a signed written request and a copy of the subject’s national identity card or an equivalent document that provides valid proof of ID, to:

• Requests made by email: rgpd@cpsl.com
• Requests made by mail: Gran Vía, 8-10, 3º 4ª, 08902 Hospitalet de Llobregat, Barcelona (Spain)

Legal representatives must provide a written document to prove their authority to represent the data subject, as well as a copy of their national identity card or an equivalent document that can attest to their status.

In addition to the rights set out above, the data subject also has the right to withdraw consent at any time using the procedure described above without affecting the lawfulness of data processing carried out before consent is withdrawn. CPSL may continue to process the data subject’s personal data to the extent permissible under the applicable law, or for as long as there are any other legal grounds for doing so.

Specifically with respect to subscriptions to our blog, data subjects have the right to withdraw consent at any time by notifying CPSL that they no longer wish to receive the associated communications. To this end, the data subject may either withdraw consent in the manner described above, or use the link provided in each commercial communication to unsubscribe from the electronic mailing list.

CPSL reminds data subjects that they have the right to lodge complaints with the relevant authority, i.e., the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

Updating your data

In order for us to keep your data up-to-date, it is important that you notify us whenever any of the data have changed. Otherwise, we cannot be held responsible for the accuracy of the data or for any potential repercussions of processing them.

Security of data processing and safekeeping

CPSL hereby declares that it has taken appropriate technical and organizational measures to ensure and to be able to demonstrate that processing is carried out in accordance with the applicable law while ensuring that data subjects’ rights are protected.

To this end, it has implemented a Personal Data Protection Management System to identify and apply the technical and organizational measures at its disposal to prevent the loss, misuse, alteration, unauthorized access to, or theft of data provided by users, despite warnings that internet security measures are not infallible.

Use of cookies

Like most websites on the internet, this website uses cookies to improve the user experience. In our Cookies Policy you’ll find information about what cookies are, what type of cookies this website uses, how to disable cookies in your browser, and how to specifically disable the installation of third-party cookies.

Please read our Cookies Policy carefully before continuing to use our website.

Changes to the Privacy Policy

CPSL may make changes to its Privacy Policy at any time, in accordance with the applicable law. In any event, you will be duly notified of any changes that are made to the Privacy Policy in order to inform you of changes to the processing of your personal data and, if required under the applicable law, to enable data subjects to confirm their consent.