Privacy Policy

In compliance with the provisions of Regulation (EU) 2016/679, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), and its adaptation to Spanish legislation through Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”), we hereby inform you how we process your personal data:

I. DATA CONTROLLER

Who is responsible for your data?

• Holder: Fira Circuit, S.L.U. (hereinafter, “Fira Circuit”)
• Registered office: Calle Mas de la Moreneta, S/N, 08160, Montmeló (Barcelona), Spain
• VAT-ID: B-16391484
• Telephone: 93 571 97 00
• Data Protection Officer (DPO): dpocircuit@circuitcat.com

II. LEGAL BASIS FOR PROCESSING

We will process your data based on one or more of the following legal grounds:

III. WHAT DATA CATEGORIES DO WE PROCESS?

In accordance with the aforementioned purposes, Fira Circuit processes the following data categories:

• Identifying data: name, surname, postal address, e-mail address, postal code, telephone number.
• Academic and professional data: education/qualifications, student record, professional experience, membership of professional bodies or associations, in the case of selection processes.
• Traffic and location data.
• Metadata of electronic communications and attachments.
• Commercial information data.
• Economic, financial or banking data.

The personal data requested are mandatory, so that refusal to provide them will make it impossible to carry out the services hired or the request made.

The user guarantees that the data provided are true, accurate, complete and up to date, and shall be liable for any direct or indirect damage or harm that may be caused as a result of non-compliance with this obligation. If the user provides data of third parties, he/she declares that he/she has their consent and undertakes to provide them with the information contained in this clause, exempting Fira Circuit from any liability in this regard. However, Fira Circuit may carry out checks to verify this fact, adopting the appropriate due diligence measures, in accordance with data protection regulations.

IV. PURPOSE OF DATA PROCESSING

For what purpose will we process your personal data?

Fira Circuit will process the user’s data, manually and/or automatically, for the following specific purposes:

• User registration. Your data will be processed for the purpose of managing your registration or user account or membership, authenticating the identity of individuals contacting us by phone, electronic means, or any other form of communication, and providing you access to information, resources and content exclusively reserved for users. Legal basis: consent
• Managing the hiring of services and purchases. To manage the hiring of services and ticket purchases made through the website and the platform, as well as the corresponding invoicing and delivery. Legal basis: execution of a contract
• Newsletters. To periodically send electronic communications about services, events and news related to our professional activity, unless otherwise indicated or unless the user opposes or withdraws their consent. Legal basis: consent 
• Sending communications about products or services similar to those previously purchased. To periodically send commercial and/or promotional information related to contracted products of services and of added value for end users. Legal basis: legitimate interest
• Conducting studies. To produce anonymous statistical reports on the access habits and activity carried out by users on the Platform. Legal basis: legitimate interest
• Profiling. To draw up a commercial profile of the user and carry out commercial actions adjusted to the same, using their data derived from the management of the products purchased (browsing data, access habits, traffic), unless otherwise indicated or unless the user opposes or withdraws their consent. Legal basis: consent
• Managing applications. For more information on how we process your personal data during a recruitment process, how we manage spontaneous applications, or to contact you in case of a new vacancy that matches your profile, please refer to the specific candidate privacy policy.
• Compliance with legal obligations and to prevent fraud. To comply with the legally established obligations, as well as to verify compliance with contractual obligations, including the prevention of fraud. Legal basis: legal obligation; legitimate interest (considering Recital 47 of the GDPR) in the case of fraud prevention.
• Contact. To respond to you in case you contact Fira Circuit through the available contact channels. Legal basis: legitimate interest
• Cookies. For more information on the data processing we may perform through the use of cookies on this website, please refer to the Cookie Policy, located on the footer of this website.
• Ethical Channel. To manage the complaint you submit via the Ethical Channel. Legal basis: legal obligation (Law 2/2023, of February 20, regulating the protection of persons reporting regulatory violations and fighting corruption).
• Responding to requests on the functioning of the Ethical Channel (Whistleblowing Channel). Managing inquiries about the functioning of the Ethical Channel. Legal basis: legitimate interest

V. HOW LONG DO WE KEEP YOUR DATA?

Unless a different period is expressly stated for a specific purpose, Fira Circuit will retain users’ personal data only for as long as necessary to fulfil the purposes for which it was collected and, in any case, until the expiration of the final statute of limitations for criminal and civil actions, as well as applicable administrative sanctions, without prejudice to its proper blocking.

Once the statute of limitations for legal actions has expired, the data will be permanently destroyed.

VI. WHAT SECURITY MEASURES DO WE PUT IN PLACE TO SAFEGUARD YOUR DATA?

Fira Circuit is committed to the protection of personal data and to the privacy of users, and therefore, in order to protect the different types of data reflected in this Privacy Policy, it will implement the necessary technical security measures to prevent their loss, manipulation, dissemination or alteration.

• Encryption of communications between the user’s device and Fira Circuit’s servers.
• Encryption of the information on Fira Circuit’s own servers.
• Other measures that prevent access to the user’s data by third parties.

In those cases, in which Fira Circuit has service providers for the maintenance of the platform that are outside the European Union, these international transfers have been regularised in accordance with Fira Circuit’s commitment to the protection, integrity and security of users’ personal data.

VII. DATA COMMUNICATIONS

To which recipients will your data be communicated?

Fira Circuit informs the user that their data may be communicated to third parties to attend to their requests, manage the services they hire and inform them about services, events and news related to our professional activity. However, under no circumstances will your data be passed on to third parties.

In addition, we inform you that certain data, within the framework of the regulations in force or the contractual relationship you maintain with Fira Circuit, may be communicated to:

• Public administrations with competence in the sectors of activity of Fira Circuit, when so established by the regulations in force.
• The State Security Forces and Corps by virtue of the provisions of the Law.
• Banks and financial institutions for the collection of the services offered.

Other professionals in the field of management and/or legal advice, when such communication is required by law, or for the execution of the contracted services.

VIII. USERS’ RIGHTS

What rights does the data subject have?

At any time and free of charge, you can exercise the following rights:

• Right of access. You have the right to know the personal data we process about you and to obtain certain information about your data, as well as a copy of it.

• Right of rectification. You have the right to correct, complete, or update your personal data at any time. When necessary, the Data Controller may request that you provide documentation supporting the inaccuracy or incompleteness of the data.

• Right of erasure. You have the right to request the deletion of your personal data from our systems and files, among other things, when you believe the data is no longer necessary for the purposes for which it was collected or if it has been processed unlawfully.

• Right to restriction of processing. You may request Fira Circuit to limit the processing of your data in any of the following cases:

• • During the period Fira Circuit takes to verify the accuracy of the data, if you have disputed it.
  • If the personal data is no longer necessary for the purposes for which it was collected, but you need it for the formulation, exercise, or defence of legal claims.
  • If the processing of data is unlawful, but you object to the deletion of the data.
  • If, for reasons related to your particular situation, you have objected to the processing of your personal data by Fira Circuit based on a legitimate interest or a task carried out in the public interest, while we verify whether our reasons override yours.

• Right to object. You also have the right to object to the processing of your data when the processing is based on a task carried out in the public interest or on legitimate interest. Fira Circuit will cease processing the data unless it demonstrates compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.
• Right to data portability. You have the right to receive your personal data that you have provided to Fira Circuit in an electronic format or in another format that allows it to be transmitted to another entity, when the processing is based on your consent or contract execution, and the processing is carried out by automated means.
• Automated individual decisions. You also have the right not to be subject to automated individual decisions (including profiling) that have legal effects for you or significantly affect you in a similar way. This right cannot be invoked if the automated individual decision is necessary for contract execution or you have previously given your consent for it. However, if you wish, you have the right to request human intervention in the processing, express your point of view, and contest the decision.
• Remember that you can withdraw your consent at any time for any of the processing activities based on consent as the legal basis. Additionally, you should be aware that, in certain cases, withdrawing or opposing consent may result in not being able to access some of the benefits that Fira Circuit may offer you.

To exercise any applicable rights, or to make any inquiry or suggestion related to the processing of your personal data, you should send a communication to the Data Protection Officer (DPO) of Fira Circuit, through any of the following channels:

You will receive a response to your rights requests within a maximum period of one (1) month from the date of receipt of the request, extendable by another two (2) months, depending on the complexity and number of requests Fira Circuit receives.

You also have the option to contact the Catalan Data Protection Authority (www.apdcat.cat) if you believe that Fira Circuit has violated your rights under the applicable data protection laws, if you are not satisfied with our response, or if you deem it necessary.

At Fira Circuit we are committed to regulatory compliance and respect for the rights of users, as well as respect for their privacy, so if you have any questions regarding how we treat your personal data, please do not hesitate to contact us through the channels indicated.