This Privacy Policy has been developed taking into account the provisions of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the movement of such data, hereinafter the GDPR, as well as the Organic Law 3/2018 of 5 December on Data Protection and Digital Rights (hereinafter LOPDGDD) and other applicable regulations.
The purpose of this Privacy Policy is to inform natural persons who provide their personal data, and/or data of the person they represent, in respect of whom information is being collected, of the specific aspects relating to the processing of their data, the purposes of the processing, the contact details for exercising their rights, the storage periods of the information and the security measures, among other things.
In terms of data protection, DELAVIUDA ALIMENTACIÓN SAU shall be considered the Data Controller in relation to the processing of personal data carried out by this entity (hereinafter DELAVIUDA or the Data Controller).
The contact details of the Data Controller are set out below:
Identity of the person responsible: DELAVIUDA ALIMENTACIÓN SAU
VAT NO: A45428117
Physical address: C/ SANTA MARÍA, 4, 45100, SONSECA, TOLEDO
Email: [email protected]
Telephone: 913838052
This entity has a data protection officer, who may be contacted at the email address [email protected], or by writing to the address of this entity for the attention of the "Data Protection Officer".
All information collected by DELAVIUDA will be processed fairly, lawfully and transparently.
Likewise, the data requested in each of the processing operations carried out will consist only of those that are strictly necessary to achieve the intended, notified purpose in each case.
As such, your collected data will be adequate, relevant and not excessive in relation to the purposes for which they are processed in each case. Furthermore, your personal data will be collected for specified, explicit and legitimate purposes and will not be further processed in a way that is incompatible with those purposes. Furthermore, they will be updated whenever necessary.
In general terms, the following types of data are collected within the framework of the different processing activities carried out in the organisation:
As a general rule, personal data is always collected directly from the data subject. However, in certain exceptions, data may be collected through third parties, entities or services other than the user.
As such, the data subject shall be informed of this by means of the information clauses contained in the different information collection channels and within a reasonable period of time or in the first communication made to the data subject.
In general terms, personal data is processed for the following purposes:
By means of this processing, no profiles of the users who browse the website are drawn up nor, therefore, are automated decisions taken based on this data.
As a general rule, the data subject's consent is the legal basis for the processing of data in accordance with the purposes described above. This consent is expressed by a declaration or a clear affirmative action, such as ticking a box provided for this purpose, voluntary subscription or by submitting data via the forms. This consent may be revoked at any time by contacting the company through its means of contact and, in general, we will request your consent for uses with purposes other than those for which you originally gave it.
Specifically, and for the processing indicated below, the following legitimate bases are used:
In general, personal data is processed for the time needed to fulfil the purpose for which it was collected, for as long as the service is provided or the contractual relationship is maintained, there is a mutual interest and/or for the time stipulated in the corresponding applicable regulations.
Once the established time criteria have been met, the data will be cancelled. Said cancellation will result in the blocking of the data, which will only be kept at the disposal of the Public Administrations, Judges and Courts, in order to deal with potential liabilities arising from the processing, during the period of limitation of these, after which time the information will be destroyed.
As a general rule, we do not transfer or communicate your data to third parties, except as required by law.
However, if necessary, the data subject is notified of such transfers or communications of data through the information clauses contained in the different ways of collecting personal data.
We hereby inform you that, in general, no international transfers are made outside the European Economic Area (EEA). In the event of a transfer of data outside the EEA, THE ORGANISATION will have the appropriate guarantees to carry out such transfer, in accordance with the requirements established by the General Data Protection Regulation.
According to European legislation, your rights are as follows:
The applicant may exercise his or her rights by the following means:
You can materially exercise your rights in the following way: by filling in the form ‘Exercise of Arsol Data Protection Rights’. If you feel that your rights concerning the protection of your personal data have been infringed, in particular if you have not obtained satisfaction in the exercise of your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority via its website: www.aepd.es
In both cases, documentation proving the identity of the applicant may be required if necessary.
In any case, you can request the protection of the Spanish Data Protection Agency through its website.
In this regard, your request will be dealt with as soon as possible and taking into account the deadlines set out in the data protection regulations.
The data requested in the fields marked with an asterisk, or identified as mandatory, or those provided in the media where the information is provided, are those strictly necessary in relation to the purpose for which they are collected, or for the provision of an optimal service to the data subject or through a legal obligation imposed on the Data Controller or a necessary requirement to enter into a contract, the inclusion of data in the remaining fields being voluntary.
In the event that all the data is not provided, it is not guaranteed that the information and services provided will be completely adjusted to your needs, so that in the event that the required data is not provided or is provided incorrectly or incompletely, we will not be able to deal with your request, making it impossible to provide you with the requested information or to carry out the contracting of services and/or purchase of goods.
Likewise, the user guarantees that the information conveyed in any of the forms is truthful, accurate and corresponds to the data of which he/she is the owner.
The services of our platforms are not intended for minors, so only persons over 18 years of age are allowed to register, otherwise we warn that any liabilities that may arise as a result of the use of our Platforms shall be borne by the parents or guardians of the minor. To avoid the use of our services by minors, we attempt to verify the age of our users when they register by requesting their date of birth.
We inform you that, in general, DELAVIUDA does not create a commercial profile based on the information provided by the interested party and their interactions with the content offered in order to send them personalised information about our products or services, including by electronic means.
The security measures adopted by DELAVIUDA are those required in accordance with the provisions of Article 32 of the GDPR.
In this regard, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity to the rights and freedoms of natural persons, appropriate technical and organisational measures are in place to ensure the level of security appropriate to the risk involved.
In any case, DELAVIUDA has sufficient mechanisms in place to:
From time to time, this Privacy Policy may be revised in order to update changes in current legislation, update the procedures for collecting and using personal information, or due to the appearance of new services or the exclusion of others. These changes will be effective from the date of publication on the website, so it is important that you regularly review this Privacy Policy in order to remain informed about the changes.