Privacy Policy and Data Protection

Respecting the provisions of the applicable legislation, ELMAFOOD IBERICA S.L. (hereinafter also referred to as the Website) undertakes to adopt the necessary technical and organizational measures, in accordance with the appropriate level of security, to protect the data collected.

Laws Incorporated into This Privacy Policy

This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it complies with the following:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
• Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007 of December 21, approving the Regulations for the development of the former Organic Law 15/1999 on Personal Data Protection (RDLOPD).
• Law 34/2002 of July 11 on Services of the Information Society and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The Data Controller of the personal data collected on ELMAFOOD IBERICA S.L. is:
Elmafood Ibérica SL, Tax ID: B56806565 (hereinafter, the Controller).

• Address: Calle Idorsolo, 5 – pabellón 9, Derio, 48160, Bizkaia
• Phone: 613 853 241
• Fax: –
• Email: paulinasg@alasature.com

Record of Personal Data

In compliance with GDPR and LOPD-GDD, personal data collected by ELMAFOOD IBERICA S.L. through the forms on the Website will be incorporated into a database for the purpose of facilitating, streamlining, and fulfilling commitments between ELMAFOOD IBERICA S.L. and the User, maintaining the relationship established, or responding to requests or inquiries.

Unless Article 30.5 GDPR applies, a record of processing activities is maintained, specifying purposes, processing activities, and other circumstances required by law.

Principles of Data Processing

Processing of User data shall be subject to the principles outlined in Article 5 of the GDPR and Article 4 et seq. of Organic Law 3/2018:

• Lawfulness, fairness, and transparency.
• Purpose limitation.
• Data minimization.
• Accuracy.
• Storage limitation.
• Integrity and confidentiality.
• Accountability.

Categories of Personal Data

The categories of data processed are solely identifying data. Special categories of personal data (Article 9 GDPR) are not processed unless explicit consent is given.

Special categories include data revealing ethnic origin, political opinions, religious beliefs, trade union membership, biometric or genetic data, health data, or sexual orientation.

Legal Basis for Processing

The legal basis is consent. ELMAFOOD IBERICA S.L. undertakes to obtain explicit, verifiable consent from the User for processing.

The User may withdraw consent at any time. Withdrawal shall be as easy as granting consent, and as a general rule, will not affect Website use.

Purpose of Processing

Personal data are collected and managed to facilitate and fulfill commitments between the Website and the User, to respond to requests or inquiries, and for commercial, operational, statistical, and marketing purposes, including adapting content and improving Website quality and navigation.

At the time of collection, Users will be informed of the specific purposes for which their data will be used.

Data Retention

Data will be retained only for the minimum necessary period: 24 months, or until the User requests deletion.

Recipients of Personal Data

Personal data will not be shared with third parties unless specified at the time of collection.

If international data transfers are intended, Users will be informed of the destination country or organization, and the existence (or absence) of an adequacy decision by the European Commission.

Data of Minors

Only Users over 14 years of age may consent to personal data processing by ELMAFOOD IBERICA S.L. For those under 14, parental or guardian consent is required.

Data Security and Confidentiality

ELMAFOOD IBERICA S.L. implements technical and organizational measures to ensure security and prevent unauthorized access, destruction, or alteration of personal data.

The Website uses SSL (Secure Socket Layer) encryption to ensure secure transmission of data between server and User.

Nevertheless, absolute security cannot be guaranteed. If a personal data breach occurs, Users will be notified without undue delay if their rights and freedoms are at high risk (Article 4 GDPR).

Personal data will be treated as confidential, and staff or third parties with access will be required to uphold confidentiality.

User Rights

In accordance with GDPR and Spanish law, Users may exercise the following rights:

• Right of access – to confirm whether data are being processed and obtain related information.
• Right of rectification – to correct inaccurate or incomplete data.
• Right of erasure (“right to be forgotten”).
• Right to restrict processing.
• Right to data portability (when processing is automated).
• Right to object – to stop data processing.
• Right not to be subject to automated decision-making, including profiling.

To exercise these rights, Users must send a written communication to the Controller with reference “GDPR-alasature.com”, including:

• Full name, copy of ID (or representation proof, if applicable).
• Specific request.
• Notification address.
• Date, signature, and supporting documentation.

Postal address: Calle Idorsolo, 5 – pabellón 9, Derio, 48160, Bizkaia
Email: paulinasg@alasature.com

Third-Party Links

The Website may contain links to third-party sites with their own privacy policies, for which ELMAFOOD IBERICA S.L. is not responsible.

Complaints to the Supervisory Authority

Users may lodge complaints with the relevant authority. In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD): https://www.aepd.es.

II. ACCEPTANCE AND CHANGES TO THIS POLICY

The User must have read and agreed to this Privacy Policy and consent to data processing as described. Use of the Website implies acceptance.

ELMAFOOD IBERICA S.L. reserves the right to amend this Policy due to legislative or regulatory changes. Updates will not always be explicitly notified; Users are encouraged to review this page regularly.

This Privacy Policy was last updated to comply with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018.