The website www.vallter2000.cat is the Internet domain owned by Ferrocariils de la Generalitat de Catalunya (FGC).
2. Who is the controller of your data?
3. For what purpose do we process your data?
At Vallter, S.A. we process the data you have provided us for the purpose of:
4. For how long do we store your data?
Your data will be stored for as long as necessary to respond to queries, complaints or suggestions and will be stored for the minim time established by law; in the case of queries and suggestions, data will be destroyed after six (6) months.
For subscribers to the newsletter or loyalty club, three (3) months after unsubscribing your e-mail data will be partially erased (dissociation), for statistic control.
Security camera data will be kept for a maximum term of thirty (30) days, except for data handed over to State law enforcement forces.
CVs will be kept for a maximum term of twenty-four (24) months.
For queries and/or the contracting of our services, data will be stored for five (5) years after the invoice is issued. Data linked to documentation provided by the customer/user will be kept for one (1) year after expiration of the ski pass.
In the case of incidents arising at the facilities, data may be stored for up to five (5) years after the occurrence of the incident. However, such data will be kept for the time necessary to fulfil the purpose for which the data were compiled and to determine any liabilities that may arise.
In the case of lost property, data will be kept for one (1) year.
5. What is the legal basis for the processing of your data?
The legal basis for the processing of your data obtained through the different forms is your consent, given when you voluntarily enter your data on our form and accept by marking the corresponding box.
In the case of security camera recordings, the legal basis is the controller’s legitimate interest.
For the management of incidents occurring at the facilities, the legal basis may be to protect the vital interests of the data subject or of another natural person.
6. To which recipients are my data communicated?
The data on forms for queries are not sent to anyone. They are processed internally at Vallter, S.A.
For newsletter subscribers, data will not be assigned, as they will be processed by a third company which handles the sending of the newsletter and which in its capacity as processor of the data controlled by Vallter, S.A., in accordance with the provisions of article 28 of the GDPR, has formalized a contract authorizing the access by that entity to the personal data and setting forth the obligations to be fulfilled with regard to the processing
For season ski passes obtained on the online shop, Vallter, S.A. will communicate your data to FERROCARRILS DE LA GENERALITAT DE CATALUNYA (FGC) for the purpose of managing the season ski passes associated to its facilities:
In the case of incidents at our facilities, your data may be communicated to the Medical Service of the resort or to the Insurance Company.
7. Data transfers to third countries
In general, Vallter, S.A. does not transfer data outside the European Union or European Economic Area, but on occasions it is required to use providers of services located outside the aforesaid area, therefore carrying out international data transfers.
This is the case of:
Mailchimp certifies agreements under the United States and Switzerland Privacy Shield framework.
8. What are your rights when you provide us with your data?
8.1. Any person is entitled to know whether Vallter, S.A. processes their data
Data subjects are entitled to access their personal data and to request rectification of inaccurate data or, as the case may be, request suspension when, among other reasons, the data are no longer necessary for the purpose for which they were provided.
8.2. Exercising objection is equivalent to suspension
The rights of data portability and automated decision-making do not apply to the type of data provided and their processing.
8.3. The above rights may be exercised through two channels:
By post, enclosing a copy of your National Identity Document or passport, to Ferrocarrils de la Generalitat de Catalunya at Carrer dels Vergós, 44, 08017 Barcelona.
By e-mail, to firstname.lastname@example.org, attaching the same documentation as for postal communications.
We inform you of your right to lodge a complaint with the Catalan Data Protection Authority (Autoritat Catalana de Protecció de Dades).
9. Veracity of the data
Users are responsible for the veracity of their data, and undertake not to enter false data and to proceed to modify data if necessary.