Data protection and privacy policy

The following Privacy Policy describes SGAB's processing of personal data on its users.

I. Who is responsible for the data you provide?

The party responsible for processing your personal data is SOCIEDAD GENERAL DE AGUAS DE BARCELONA, S.A. ("SGAB-CREA"), with registered address in BARCELONA, Passeig de la Zona Franca 48, 08038 Barcelona.

In the following section we explain what personal data is collected by SGAB-CREA and what it is used for.

II. How do we use your personal data?

We use the data for the following purposes:

  • Answering queries and requests you voluntarily send us (requests for additional information on events, queries or calls to attend an event, among others).
    Processing data for this purpose is based on your consent.
  • Conducting satisfaction surveys in relation to events and activities organised by SGAB-CREA, for which we may contact you by the means you have stipulated.
    Processing your data for this purpose is based on your consent.
  • Offering or sending you commercial information related to CREA's services and the events it organises, or those organised by third parties in relation to the service provided by SGAB-CREA, always on the condition that you give your consent. If you give us your authorisation, we will be able to send you this marketing information, including by digital means.
    Processing data for this purpose is based on your consent.
  • Conducting statistical studies and managing navigation and enquiry data (analytical information related to the website user) that help us improve the service or design new functionalities.
    Este tratamiento se basa en el interés legítimo que tiene SGAB-CREA para generar estudios estadísticos o agregados que permitan mejorar los servicios de la web y el diseño de nuevas funcionalidades.
  • Personal data processing for managing the event.  The processing of your data for this purpose is based on your consent granted at all times when you fill in the form confirming your attendance at the event.

For what purpose will your personal data be processed?

Main purpose: SGAB-CREA will process your personal data for the purpose of managing and, if necessary, answering all requests, queries, comments or suggestions you voluntarily make via the website using the means of contact you provide.

SLikewise, if you provide your consent, SGAB-CREA will process your personal data for the following additional purposes:

  • To send you commercial information (by email, on paper or by telephone) related to SGAB-CREA.
    Processing data for this purpose is based on your consent.

Keep in mind that to send commercial information by email we use third-party tracking technologies (specifically Mailify) that allow us to obtain information about the opening of emails and the clicking of the links contained therein by the recipients, in order to measure the effectiveness of the campaigns and to understand what you are interested in based on your interaction with our campaigns, so we can send you related content based on your profile. For this we use technologies called web beacons, invisible pixels and link changing technologies. You will have the right to object at any time to this data processing, including profiling, by the means indicated in this document.

For how long?

Your personal data will be processed by SGAB-CREA for the main purposes for as long as is required to manage your request, query, comment or suggestion; if the data is related to a contract that you have with the company, it will be processed for the duration of the contractual relationship.

For the additional purposes of commercial promotion, and provided that you have authorized it, SGAB-CREA will process your data until you ask us to stop doing so.

You may withdraw your consent at any time, by sending your request as indicated in the section "What are your rights?" in this document. When the indicated periods end, SGAB-CREA will block your personal data for the period in which responsibilities may arise. When such responsibilities expire, your personal information will be definitively erased.

What is the lawful basis for processing your data?

The legal basis for processing your data is the consent provided by sending your request, query, comment or suggestion, and by checking the corresponding boxes. Sending a communication via the website form does not necessarily imply that you accept that sales information be sent to you.

What security measures have been adopted to protect your personal data?

SGAB-CREA will process your personal information with the strictest confidentiality. Furthermore, it has implemented appropriate technical and organisational measures to guarantee the security of the information and prevent its destruction, loss, unlawful use and unlawful alteration. In determining these measures, criteria such as the scope, context and purposes of processing, state of the art and existing risks were considered.

¿Existen otras entidades que pueden tener acceso a sus datos personales para ayudar a SGAB- CREA con alguna de las tareas relativas a las finalidades de tratamiento?

To ensure an efficient service, some of our providers are located in countries outside the European Economic Area (EEA) or if located in the EEA, they may share the information with other entities located outside this region. SGAB-CREA guarantees that:

  • Transfers are made to countries declared by the European Commission as offering a similar level of protection to those in Europe.
  • In the absence of said adequacy decision (currently, transfers are only made to the US and India), the Standard Contractual Clauses approved by the Commission have been signed.
    You can check this information on the website of the AEPD: https://www.aepd.es

For more information on this matter, contact the SGAB-CREA Data Protection Officer.

Does SGAB-CREA transfer your personal data to third parties?

SGAB-CREA no cederá sus datos personales a terceros salvo que sea necesario para dar cumplimiento a las obligaciones legales que en cada caso corresponda.

What are your rights?

You have the following rights with regard to data protection:

Right ¿En qué consiste?
Right of access See what personal information we have on you.
Right of rectification Change the personal information we have on you when it is inaccurate or incomplete.
Right of opposition Ask us not to process your personal information for certain specific purposes.
Right of erasure Ask us to erase said personal information.
Right of restriction Ask us to restrict the processing of said personal information.
Right of transfer Ask us to send you the information we have on you in digital format.
Right to make a complaint to the competent authority Lodge a complaint to the competent authority to defend your rights via the www.agpd.es website.

You can exercise these rights by simply sending a communication to SGAB-CREA, either by email to dpo@suez.com or by post to Passeig de la Zona Franca 48, 08038 Barcelona, with the reference "Data protection". The request should contain a copy of your national identity card (DNI) or other equivalent identification document and the minimum content stipulated in applicable legislation. If the request does not meet the specified requirements, SGAB-CREA may ask you to correct it. Exercising these rights is free, although you may be charged a fee for requests that are baseless, excessive or repetitive.