Privacy Policy

With this Privacy Policy, APLI PAPER, S.A.U. (hereinafter “APLI”) wishes to inform you in a transparent manner, about how we process your data, the purposes for which we do it and the rights you have as a user regarding your personal data, as well as how long we will keep your data. This Privacy Policy regulates the use of the Website owned by APLI PAPER, S.A.U.

In compliance with the provisions of the General Data Protection Regulation (EU) 2016/679 (hereinafter, “GDPR”), you are informed that all the personal data supplied by the User through the Website www.apli.com (hereinafter, the “Website”) will be incorporated into and processed in files and data processing systems owned by the company APLI PAPER, S.A.U. for the sole purpose of attending to your requests sent through our Website, providing our services and keeping you informed, even through electronic means, of our products and services.

All the data requested with an asterisk (*) on the Website is necessary to provide the services placed at the User’s disposal. Not supplying this data required by APLI means that there is no guarantee that the information and services can be provided, are supplied correctly or that they are adapted to the User’s needs.

The term User/s is used here to refer to all people over the age of 18 who access the Website. We inform you that accessing our website makes you a User. As a User, you declare to have the necessary legal capacity to understand and wholly accept the Privacy Policy. This Privacy Policy should be read together with our Cookies Policy and Terms and Conditions if you purchase anything on our website.

Thank you for visiting our website. We hope you enjoy the services offered by APLI.

1. WHO IS RESPONSIBLE IN APLI FOR PROCESSING YOUR DATA?

This Privacy Policy regulates the use of the website www.apli.com (hereinafter “the Website”) owned by APLI PAPER, S.A.U. (hereinafter “APLI”). The data handler is APLI PAPER, S.A.U., inscribed in the Mercantile Register of Barcelona, Volume 28.386, Folio 1, sheet B-134.425, with NIF A60914108 and corporate address in Ctra. BV 4602, Km 2 – 08514 – Sant Joan de les Abadesses (Girona), tel. +34 937 479 100, apli@apli.com. Users accept the Terms and Conditions in this document, as applicable.

If you have any query, doubt or need clarification regarding this Privacy Policy or APLI’s data processing, you may contact us via the email address gdpr@apli.com.

2. WHAT IS PERSONAL DATA AND PROCESSING PERSONAL DATA?

It is data that identifies or enables a person to be identified. For example, data that enables a person to be directly identified such as name and surnames, while the D.N.I. (ID card No.) can identify a person indirectly. Personal data includes information such as mobile phone number, email address, date of birth and sex, among others. We can also include numerical identifiers such as the IP address of your computer and information obtained from cookies.

Processing personal data is all operations or collection of operations made regarding your personal data, such as for example, collecting, recording, storing, using and communicating your data.

3. WHAT TYPE OF INFORMATION DO WE COLLECT?

To respond to the forms on our website, such as contact forms, registration forms, work with us, organising press passes, requesting information to become a distributor, subscribing to a newsletter or ordering from our website. When you register, we request the following information from you:

Name
Surnames
Town
Postcode
Country
E-mail

This is necessary to offer you a proper service.

As a user, you guarantee that the personal data supplied to APLI is truthful, exact, complete and up to date. Being responsible for any damages, either direct or indirect, that could be caused as a result of a breach of this obligation. A User supplying APLI with data from third parties must have the consent of these third parties and inform them of the provisions of this clause, exonerating APLI from any responsibility in this regard. Nevertheless, APLI may carry out verifications to ascertain this, adopting the corresponding measures, in compliance with data protection regulations.

In addition, we store a “session ID” corresponding to an internal code that identifies you as a user.

Regarding consultations made through the form available on the “CONTACT” page, it is allowed to explain the reason for the consultation briefly. Bear in mind that personal consultations cannot be answered here, except those strictly established by legislation. Under no circumstance will data from special categories be communicated (such as health data). If this is done, the User exonerates APLI from any liability. If inadequate consultations or contents are submitted, APLI will proceed to eliminate them.

4. HOW DO WE CAPTURE YOUR PERSONAL DATA?

Currently, the website only allows users to obtain information about all the services offered by APLI without the need to register as a user. In this regard, the website is not transactional and no data is collected except when the user contacts APLI through the available channels. Therefore, we only collect and process the information you provide to us through the following means:

-By sending emails to our contact addresses: apli@apli.com or pedidos@apli.com.

-By calling our contact phone number: +34 93 747 91 00.

5. HOW DO WE PROCESS YOUR PERSONAL DATA AND WHAT FOR?

We want to be transparent with you and inform you about the operations we carry out with your data and the purposes for which we process such data.

Currently, the website does not include sections or forms enabled for data collection. Likewise, the website does not require users to register in order to access the information available about APLI’s products and services. Therefore, the data processing carried out by APLI through the website is very limited.

Below, we outline all the processing activities or operations we perform with your personal data:

Management of requests submitted through the contact form or by sending an email.
This processing is carried out for the purpose of responding to requests sent by users and/or customers to APLI.
Management of browsing through the Website.
This processing is carried out through the use of cookies in order to properly manage users’ browsing experience on the Website. For more information, please visit our Cookies Policy.

6. WHAT LEGITIMACY DO WE HAVE FOR PROCESSING YOUR DATA?

Data protection regulations require us to legitimise the processing of personal data. Therefore, the processing of your personal data has three legal foundations, depending on the activity or treatment carried out on your data. The legal basis for processing your personal data can be:

Legitimate interest and your consent: To respond to the requests you make directly to APLI through the different data capturing channels.
Legitimate interest and compliance with legal obligations: We have a legitimate interest in collecting your personal data for statistical purposes, as it provides us with the necessary information to improve your browsing experience on the website more effectively. This requires us to carry out an analysis that balances our interest in processing your personal data with your rights and freedoms. The outcome of this analysis will determine whether we may or may not use your personal information for the processing activities described in this Privacy Policy.

7. HOW LONG WILL WE KEEP YOUR DATA?

Your data will be retained for the time strictly necessary to fulfill the purpose for which it was collected.
• Resolution of inquiries: The data you provide through the available contact channels will be processed until the inquiry has been resolved and, once resolved, retained for a period of one year.

8. DO WE COLLECT DATA FROM CHILDREN?

Minors cannot use the services available on the Website without the prior authorisation of their parents, tutors or legal representatives, who will be entirely responsible for all the acts carried out by the minors under their responsibility on the Website, including filling in forms with personal data of the children and ticking, if applicable, the boxes on the forms.

9. WHAT RIGHTS DO YOU HAVE WHEN YOU SUBMIT YOUR DATA?

Below you can find the rights you have as a user of the website:

Rights	What does this mean?
Right to access	Your right to know if APLI is processing your personal data or not, and if so, the right to know what data is being processed.
Right to correct	Consists in the possibility of modifying inexact or incomplete data. When requesting correction, please indicate which data should be modified.
Right to oppose	You may oppose the processing of your data at any time. You have the right to oppose, at any time and for personal reasons, the processing of different elements of your personal data. APLI will stop processing the personal data, except if we can accredit legitimate imperative reasons for processing that prevail over your interests, rights and freedoms, or to formulate, exercise or defend from claims.
Right to suppress	This right allows you to suppress your personal data. The data will be preserved but blocked so it cannot be processed, notwithstanding its possible communication to public administrations, courts and judges, to attend to possible responsibilities arising from the processing during the prescription period.
Right to data portability	You have the right to copy and transfer data from our database to another. It is only possible to exercise this right when the processing is based on the execution of a contract or on your consent, and the processing is carried out by automatic means.
Right to limit processing	This right allows you to request suspension of processing of your data when: You contest the exactitude of the data, while APLI checks if it is exact. You have exercised your right to oppose the processing of your data, while it is verified if APLI’s legitimate reasons prevail over yours and the interested party. Likewise, this right enables you to request APLI to preserve your personal data when: The data processing is licit and as an interested party you oppose the suppression of the data and request a usage limitation instead. APLI no longer needs your personal data for processing, but does need it for formulating, exercising or defending from claims.
Right to withdraw consent	You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How can you exercise these rights?	You can exercise your rights by writing to the following email address: gdpr@apli.com or by conventional mail, in a signed letter accompanied by a photocopy of your ID card or passport, sent to: Avda. Arraona 120-124, Centro Industrial Santiga, 08210 Barberà del Vallès, Barcelona– Ref. Protección de datos. In addition, we inform you that if you consider APLI has not satisfied your requests regarding the exercise of your rights, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD). Tel. 901 100 099 and 91 266 35 17 C/Jorge Juan, 6 – 28001 Madrid

10. WHO WILL YOUR PERSONAL DATA BE SENT TO?

APLI does not reveal the personal data you submit through the channels described in section four, except if this is necessary for offering the service requested, such as communication to payment platforms, banks and companies that process the transactions.

Moreover, it is possible that we communicate your personal data, after receiving a legal request from law courts or public administrations.

Additionally, if we have a contractual relationship with you, we may communicate your data to other entities in the APLI Group for offering services.

These are the companies in the APLI Group:

11. SECURITY MEASURES

APLI adopts the levels of security required by the GDPR, which are adequate for the nature of the data being handled at any given moment. Nevertheless, technical security on the Internet is not absolute, and there could be wilful misconduct by third parties. However, APLI will place all the means at its disposal to avoid these actions.

12. DO WE CARRY OUT INTERNATIONAL TRANSFER OF DATA?

Personal data of the User that we hold will be processed exclusively in the European Union or the European Economic Area, respectively. Nevertheless, if processing were to be carried out by a supplier located in a country that does not have the corresponding data protection laws, this processing will be protected by international contracts compliant with European requirements.

The data protection officer can provide information on the adequate or appropriate guarantees, as well as the option of obtaining a copy of them if requested.

13. SCOPE OF APPLICATION

To comply with data protection legislation, the file structure, equipment and IT systems will be applied to all files, either temporary or permanent, owned by APLI and containing personal data, as well as any equipment or information system processing this data.

14. SOCIAL MEDIA

We have configured social media icons on our website. With a simple mouse click, you can access the following social media platforms: Facebook and YouTube. No personal data is transmitted to these providers when visiting our website. You will be able to recognise the provider of the platform by the logo. We offer you the opportunity to go directly to APLI’s publications on each of the social media platforms by clicking on the icon. We have no influence on the data collected or the data processing procedures carried out on these social media, neither are we aware of the total scope of the data collection, the purposes of the processing and how long the data is stored or how to delete it.

If the followers of our profiles contact APLI through these social networks or publish images or information on our profile containing personal data, it will be the sole responsibility of the User and/or follower, exonerating APLI of all responsibility regarding the content that the User and/or follower were to upload to our public profiles. Because APLI’s profile on the social media is public, APLI is not responsible for any direct or indirect action carried out by third parties derived from the Users’ publication of their personal data on our profiles. Therefore, we strongly recommend that you do not share personal or sensitive information and that you read the Privacy Policies and Terms and Conditions of these platforms, and configure your profile with the desired degree of privacy. Anyone who no longer wishes to follow APLI on the social media platforms where it is present, may stop following our profile as established in the Terms and Conditions of the corresponding social media platform.

Below are the addresses of the social media platforms, where you can find information about data protection:

Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php.
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 USA, www.policies.google.com/privacy, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Instagram, Facebook Ireland Ltd.. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Irlanda https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, EE. UU. Information: https://help.pinterest.com/en/data-protection-officer-contact-form

15. CONFIDENTIALITY AND PROFESSIONAL SECRECY

The data collected in all private communications between APLI and Users will be handled with absolute confidentiality, APLI is committed to the obligation for secrecy of personal data, its duty to preserve this and adopt all the measures necessary to avoid unauthorised modification, destruction or access, in compliance with data protection regulations.

Moreover, information of any type that the parties exchange with one another will also be considered confidential, as well as any information that the parties agree should be confidential, or which is simply about the content of said information. Viewing data on the Internet will not imply direct access to it, except in cases of express consent of the owner for each occasion.

16. LINKS TO OTHER WEBSITES

Our website also uses characteristics of other service providers. To use them, you will be redirected to the real website of the provider of the service, for its use, and you will be informed before the redirection. You can see the respective declarations of privacy on their websites. As the offers of these service providers are made in their own name, and for their own purposes, APLI has no influence on these offers and will not assume any liability for them.

Therefore, this website also contains links to other websites not managed by APLI, regarding which, APLI has no control, nor responsibility for the information accessed on them. We suggest that you contact these websites directly for information about their Privacy Policy, where information will be provided about data protection, security, obtaining data and provisions regarding transmission. APLI will not be liable for any action adopted or the contents of these websites.

Except with prior authorisation in writing by APLI, it is not allowed to insert a link, hyperlink, framing or similar device on the Website.

17. CHANGES IN THE PRIVACY POLICY

This privacy policy could undergo modifications due to possible changes in the criteria of the authorities regarding data protection. Therefore, APLI reserves the right to modify this Privacy Policy to adapt to these changes as well as any other change in jurisprudence and legislation.

18. COOKIES

APLI will only use data storage and retrieval apps (“Cookies”) if the User has given prior consent to do so, according to the indications of the popup on the user’s browser when accessing the Website for the first time and under the terms and conditions indicated in the Cookies Policy, which all users should know.

19. CONTACT

If you have any doubts or concerns about how we process your personal data, please write to gdpr@apli.com.