ARNAL informs users that it respects the current legislation on the protection of personal data, the privacy of users and the secrecy and security of data, adopting the necessary technical and organisational measures to avoid loss, misuse, alteration, unauthorised access and theft of the personal data provided, taking into account the state of the technology, the nature of the data and the risks to which they are exposed. 

ARNAL has adapted how it handles personal data and its Privacy Policy to the changes established by Regulation 2016/679 of the European Parliament and of the Council, of April 27, 2016.

In addition, ARNAL will process the data in accordance with the quality principles required by Organic Law 3/2018, of December 5 on the Protection of Personal Data and Digital Rights Guarantee (LOPDGDD), confidentially and with security measures demanded.

Who is the Data Controller of your data?

The Data Controller of your data is ARNAL (

Address: C/ Valencia 245 1-3, POSTCODE 08007, Barcelona



Why do we process your personal data?

At Arnal we process the information provided by interested persons in order to be able to provide the contracted services, as well as provide information on issues related to the business activity and to the company’s services, identified on

In order to be able to offer products and services according to your interests, we will prepare a commercial profile based on information provided. Automated decisions will not be made based on that profile.

In the event that you send us your CV or conduct a job interview in our offices, your data will be used to cover possible job vacancies in our Company. In the event that you’re hired, your personal data will be used to manage the employment relationship with Arnal.

How long do we keep your data?

The personal data provided will be kept as long as the business relationship is maintained.

Once the provision of the service is completed, and in any case if the deletion of the data is requested, at ARNAL we will keep your personal data blocked during the statutory limitation periods. Once these deadlines have passed we will destroy your data.

In relation to employment data, this will be processed during that relationship and once completed, for the time necessary to respond to possible non-compliance in this area. In the event that you have sent us your CV or if you did an interview for a job vacancy, your personal data will be filed for a period of one year, after which, if not selected, the data is deleted from our systems.

What are the legal grounds for processing your personal data?

Your data is processed for the provision of the service requested and its processing will be legitimised by the fulfilment of a legal obligation of the data controller, which is none other than the provision of the service.

In the case of the use of your identification data for promotional purposes, these will be treated by virtue of the consent freely granted by you. 

The personal data of employees will be processed for the fulfilment of the contractual relationship between the Parties.

To which addressees will your data be communicated?

The data will only be transferred to group companies included in

We will not transfer your personal data to third parties, except in those cases in which the provision of the service or compliance with the employment relationship requires that they are passed on to government agencies, members of the same, professionals within the scope of a public function and for legal reasons. For any communication of data apart from these cases, we will ask for your specific consent.

Typology of processed data

  • Identification data (name, surname(s)). 
  • Contact information (email, phone, mailing address).
  • Job position.
  • Employment history.
  • Academic background.

What are your rights when you provide us with your information?

AccessYou can consult your personal data included in ARNAL files.

ARNAL Customer Service 
C/ Valencia nº 245, 1º 3ªCP. 08007 BARCELONA

RectificationYou can change your personal information in the event of inaccuracies.
DeletionYou can request the deletion of your personal information.
OppositionYou can request that your personal information is not processed.
Limitation of treatmentYou can request the limitation of the processing of your information in the following cases: 
– If the objection regarding the accuracy of your information is checked.
– When the treatment is illegal, but opposes to the deletion of your information. 
– When ARNAL does not need to process your data, but you need them in relating to claims or to defend claims. 
– When you have opposed to the processing of your data for the fulfilment of a mission in the public interest or for the satisfaction of a legitimate interest, while verifying if the legitimate reasons for the treatment prevail over yours. 
PortabilityYou can receive, in electronic format, the personal information that you have given us and what has been obtained from your contractual relationship with ARNAL, as well as transmit the information to another service provider.
File a complaint or a brief.You can file a complaint or a brief for the protection of your rights before the Spanish Data Protection Agency or the regional data protection agency, if any. 
To be informedTo be informed of any security incident that may affect your rights.
If you believe that we have not treated your personal data in accordance with the regulations, you can file a claim with the Spanish Data Protection Agency (
To exercise your rights, please enclose with your application a copy of your ID or equivalent document.