Privacy policy

In accordance with the provisions of the regulations in force on personal data protection, we hereby provide you with the following information:

1- INFORMATION FOR THE INTERESTED PARTY AND/OR USER

PRECOCINADOS NATURALES RIOJANOS, S.A. provides you with this privacy policy in order to inform you, in detail, about how the personal data that you as a data subject and/or user provide or have provided, by any means (website, e-mail, telephone, in person, online or paper forms, etc.), are being or will be treated.

PRECOCINADOS NATURALES RIOJANOS, S.A. has implemented all the technical and organisational measures necessary to guarantee the confidentiality, integrity, availability and resilience of the personal data in its custody.

Responsibility of the data subject and/or user

By providing your data, you, as the interested party and/or user (hereinafter the Interested Party), guarantee that you are over 18 years of age and that the data provided to PRECOCINADOS NATURALES RIOJANOS, S.A. are true, accurate, complete and up to date. To this effect, the Interested Party confirms that he/she is responsible for the veracity of the data provided and that he/she will keep said information duly updated, so that it corresponds to his/her current situation, taking responsibility for any false or inaccurate data that he/she may provide, as well as for any direct or indirect damages that may arise from such data.

2- DATA CONTROLLER

Name: PRECOCINADOS NATURALES RIOJANOS, S.A.

VAT ID NUMBER: A26334698

Registered offices: Polígono Industrial El Pilar, C/Aldeanueva de Ebro, 5 – 26540 Alfaro (La Rioja) Postal address: Apartado de correos nº. 16 – 26540 Alfaro (La Rioja)

Telephone: 941 181 225

E-mail: administracion2@comoencasa.es

3- PURPOSES, STORAGE PERIODS AND LEGITIMACY OF DATA PROCESSING

PRECOCINADOS NATURALES RIOJANOS, S.A., as the Data Controller of the personal data of the Data Subject, as well as of any data that may be supplied in the future, hereby informs you that these data will be processed in accordance with the provisions of the regulations in force on personal data protection, and therefore provides you with the following information on each of the processing procedures carried out by PRECOCINADOS NATURALES RIOJANOS, S.A.:

CONTACTO / CONSULTAS

Purpose of processing: to respond to and follow up on queries, requests for information, suggestions and complaints, as well as to stay in contact with users who have shown an interest in the company, its products or services.

Data retention criteria: data will be retained for the time required to process and respond to the query.

Legitimation for data processing: GDPR: 6.1.f) the legal basis for data processing is based on the Legitimate Interest of the Data Controller to attend to and respond to received communications or requests.

PROFORMA INVOICES / QUOTATIONS

Purpose of processing: the creation and delivery of proforma invoices and/or quotations requested by Interested Parties, as well as to be able to monitor them by telephone, electronically or in person.

Data retention criteria: data shall be retained for as long as there is a mutual interest in doing so, or the data subject requests its deletion.

CUSTOMERS

Purpose of processing: management and contracting of the products and services offered by our company, customer management, maintenance of contractual and/or commercial relations with customers, as well as administrative procedures (invoicing, collections, etc.), accounting and tax management of the company and compliance with the corresponding legal obligations.

In addition, in order to be able to contact individuals who provide services in legal entities (companies, organisations, etc.), as well as individual entrepreneurs and self-employed professionals, in order to establish or maintain business to business (B2B) relations with them.

Data retention criteria: the data will be retained for as long as the contractual and/or commercial relationship between both parties is maintained and their deletion is not requested. If deletion is requested, the data will be retained for the period of time stipulated by the regulations in force (fiscal, commercial, etc.) with regard to the prescription of responsibilities.

Legitimation for data processing: GDPR: 6.1.b) the legal basis for the processing of data is the execution and maintenance of contractual and/or commercial relations between both parties, as well as compliance with the legal obligations (fiscal, commercial, etc.) that this entails.

The processing of contact data of a professional nature for business relations is legitimised by the Legitimate Interest of the Data Controller to be able to contact, establish and/or maintain business relations with the legal entity in which the Interested Party provides its services, as well as with individual entrepreneurs and self-employed professionals (GDPR: 6.1.f and LOPDGDD: 19).

COMMERCIAL COMMUNICATIONS

Purpose of processing: to send information by any means, postal or electronic, about events, activities, offers, products, services and other information of the Data Controller that may be of interest to the Data Subject.

Data retention criteria: the data will be retained in the system indefinitely, as long as the data subject does not request its deletion.

Legitimation for data processing: GDPR: 6.1.f) the sending of commercial information to customers is based on the Legitimate Interest of the Data Controller to send commercial communications about products or services similar to those contracted by Customers and thus achieve customer loyalty.

GDPR: 6.1.a) The basis for sending commercial communications to non-customer parties is the consent provided by the data subject at the time of collecting the data.

Nevertheless, regardless of the two instances, the Data Subject has the right to object to the processing and may do so by any of the means stipulated in this privacy policy.

The withdrawal of said consent shall in no case affect the maintenance of commercial relations. However, the previously carried out processing of data for this purpose shall not be rendered unlawful by the fact that the consent has been withdrawn.

SUPPLIERS

Purpose of processing: management of suppliers, to maintain contractual and/or commercial relations with suppliers, as well as the administrative management (invoicing, collections, etc.), accounting and tax management of the company and to comply with the corresponding legal obligations.

SUBMISSION OF CURRICULUM VITAE

Purpose of processing: filing and registration of documentation and CVs provided voluntarily by interested parties for future selection processes of candidates for a job in the company.

Data retention criteria: data will be retained for a maximum period of one year or until the data subject exercises his/her right to erasure.

In this regard, after the aforementioned period, and if the interested party wishes to continue participating in the selection processes of the Data Controller, we kindly ask him/her to resubmit his/her curriculum vitae.

Legitimation for data processing: GDPR: 6.1.a) the legal basis for data processing is the consent provided by the Data Subject at the time of providing their data to participate in selection processes.

REGISTER FOR ACCESS TO FACILITIES

Purpose of processing: control and management of individuals entering our facilities, in order to comply with occupational risk prevention, food safety and hygiene regulations.

Data retention criteria: data will be retained for the time required to comply with the purpose for which they were collected and to determine any possible liabilities that may arise from this purpose and from the processing of the data. The provisions of occupational risk prevention and food safety regulations (BRC, IFS, etc.) shall apply.

Legitimation for data processing: GDPR: 6.1.f) the legal basis for the processing of the data is the Legitimate Interest of the Data Controller in ensuring compliance with occupational risk prevention and food safety and hygiene regulations, as well as compliance with the applicable legal obligations.

4- DATA DISCLOSURE

In general, personal data will not be disclosed to third parties, except in cases in which there is a legal obligation or in which it is necessary for the provision of services or for the maintenance and development of relations, such as, by way of example, but not limited to:

Public Administrations, Judges and Courts, for the fulfilment of legal obligations and for the attention of possible liabilities arising from the regulatory processing.

Financial/banking institutions, for collection and payment transactions.

Although this is not a transfer of data, in order to carry out any of the aforementioned processing or to provide you with a service, third party companies, acting as Data Processors (our suppliers), may access your information in order to carry out the aforementioned processing or service. These data processors access your data following our instructions and without being able to use said data for any other purpose, while maintaining the strictest confidentiality.

International data transfers

PRECOCINADOS NATURALES RIOJANOS, S.A. does not intend to undertake international transfers of your data to countries outside the European Economic Area (EEA). In the event that this is necessary, transfers shall only be made to recipients that are located in a country, territory or one or more specific sectors of said country or international organisation that has been declared to have an adequate level of protection by the European Commission; or that are under the Privacy Shield agreement; or that are covered by any of the appropriate guarantees provided for in article 46.2 of Regulation (EU) 2016/679.

5- DATA SUBJECTS’ RIGHTS

Any individual has the right to obtain confirmation as to whether or not the Controller is processing personal data concerning him or her, as well as to withdraw, at any time, any consent he or she may have given for any specific purpose, without affecting the lawfulness of the processing based on consent prior to the withdrawal.

Data protection regulations allow you to exercise your rights of access, rectification, erasure and portability of data and to object to and restrict the processing of your data, as well as not to be subject to decisions based solely on automated processing of your data, if applicable.

These rights are characterised by the following aspects:

The exercise of these rights is free of charge, except in the case of obviously unfounded or excessive requests (e.g. repetitive nature), in which case the Data Controller may charge a fee which is proportionate to the administrative costs incurred, or refuse to… (EL TEXTO SE CORTA)

You can exercise your rights directly or through your legal representative.

Debemos responder a su solicitud en el plazo de un mes, aunque, si se tiene en cuenta la complejidad y número de solicitudes, se puede prorrogar el plazo en otros dos meses más.

We are required to respond to your request within one month, although, taking into account the complexity and number of requests, the deadline may be extended by a further two months.

We are required to inform you about the means of exercising these rights, which must be accessible and we may not deny you the exercise of the right on the sole ground that you choose other means. If the request is submitted electronically, the information will be provided electronically, whenever possible, unless you ask us to do otherwise.

If the Data Controller does not comply with the request, it shall inform you, at the latest within one month, of the reasons for its failure to comply and of the possibility to complain to a Supervisory Authority.

How can you exercise these rights?

Data Subjects may exercise their rights by sending a written communication to the postal or e-mail address of the Data Controller, indicating in the subject line “EXERCISE OF LOPD RIGHTS”, including: the specific request, address for the purpose of notifications, date and signature. Data subjects may also exercise their rights through legal representation, in which case, in addition to the data subject’s National Identity Document (DNI), a DNI and a document accrediting the representation of the third party must be provided.

The Data Subject must prove his/her identity by enclosing a photocopy or, when applicable, a scanned copy of his/her ID card or an equivalent document in order to verify that we are only replying to the interested party or his/her legal representative, in which case he/she must provide a document accrediting the representation.

If you so request, we will provide you with the forms to exercise these rights, stating which right you wish to exercise to us.

In addition, and especially if the Data Subject considers that he/she is not entirely satisfied with the exercise of his/her rights, we inform the Data Subject that he/she may file a complaint with the National Supervisory Authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.

6- SOCIAL NETWORKS

PRECOCINADOS NATURALES RIOJANOS, S.A. uses social networks. This is another way of reaching users. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies, which explain how they use and share your information, so we recommend that you consult them before using social networks to confirm that you agree with the way in which your information is collected, processed and shared.

The processing of the data of individuals who become followers and/or make any link or connection through the social networks of the official pages of the Data Controller shall be governed by this privacy policy and by the privacy policies of the social networks themselves.

The Data Controller will process your data for the purposes of correctly managing your presence on the relevant social network, sending personal and individual messages through the social network channels, informing you of activities, products and/or services of the Data Controller, or of third parties that may be related to the activity of the Data Controller, as well as any other processing that the regulations of the social networks allow.

7- COOKIES

In general, if you browse the Internet you can accept or reject cookies using the settings on your browser.

This website may use cookies and other similar technologies such as local shared objects, flash cookies or pixels, which are small files that some platforms, such as web pages, can install on the user’s device (computer, tablet, smartphone, etc.).

The functions they perform are varied: storing browsing preferences, collecting statistical information, enabling certain technical functionalities, storing information about the user’s browsing habits or the user’s equipment, etc.

Cookies are useful for several reasons. From a technical point of view, they allow web pages to function more smoothly and adapted to the user’s preferences, such as storing their language or the currency of their country, etc. In addition, they help the website Controllers to improve their services and to make the advertising displayed on them more efficient, thanks to the statistical or behavioural information they collect through them.

For the installation and use of certain cookies it is necessary to obtain the informed consent of the users. The cookies that require the user’s consent are, among others, analytical, advertising and affiliation cookies, with the exception of those of a technical nature and those necessary for the operation of the website or the provision of services expressly requested by the user.

The user has the possibility of configuring their browser in order to be alerted of the reception of cookies and to prevent their installation on their device. Please consult your browser’s instructions for further information. For more information about cookies, please consult our Cookies Policy.

8- REQUIRED OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE INTERESTED PARTY

By ticking the corresponding boxes and entering data in the fields marked as required in the various forms, the Data Subject explicitly and unequivocally accepts that his/her data is necessary to process his/her request by the Data Controller, with the inclusion of information in the remaining fields being voluntary.

In the event that not all the required data is provided, the corresponding processing of said data may not be carried out and therefore the requests, contracts or applications made by the interested party may not be attended to.

The Interested Party guarantees that the personal data provided are truthful and assumes responsibility for communicating any modification of said data.

9- SECURITY MEASURES

PRECOCINADOS NATURALES RIOJANOS, S.A. undertakes to protect your personal information: Using reasonably reliable and effective physical, organisational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and guaranteeing your privacy.

In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of your personal data.

All contracts we sign with suppliers include clauses requiring them to maintain the secrecy of personal data to which they have access by virtue of the assignment they have been given, and to implement the necessary technical and organisational security measures to ensure the continued confidentiality, integrity, availability and resilience of the systems and services used to process personal data.

All these security measures are regularly revised to ensure their adequacy and effectiveness.

However, complete security cannot be guaranteed and no security system is invulnerable to compromise and, in the event that any information under our control and under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, if applicable, notify any affected Data Subjects so that they may take appropriate measures.