PRIVACY POLICY

Last updated: April 2026

PRIVACY POLICY

1. Data controller

Controller: Elmafood Ibérica SL
Tax ID (CIF): B56806565
Address: Calle Idorsolo 5, Pabellón 9, 48160 Derio, Bizkaia, Spain
Data protection contact email: info@alasature.com

2. Data we collect and purposes of processing

Elmafood Ibérica SL processes the personal data that users voluntarily provide through the Website for the following purposes:

a) Contact forms and enquiries

Data processed: name, email address, telephone number (if provided), and message content.
Purpose: to respond to and manage user enquiries or requests for information.

b) Commercial communications

Data processed: name and email address.
Purpose: to send information about products, news, and promotions from Alasature, only when the user has given their express consent.

c) Web analytics and statistics

Data processed: IP address (anonymised), browsing data, device type, and browser.
Purpose: to analyse the use of the Website in order to improve its performance and content.

3. Data retention periods

Personal data will be retained for the time necessary to fulfil the purpose for which it was collected:

Contact and enquiry data: until the enquiry is resolved and, where applicable, until any potential liabilities have prescribed (3 years).
Commercial communications data: until the user withdraws their consent.
Browsing data and cookies: as set out in the Cookie Policy.

4. Data recipients

Personal data may be disclosed to the following categories of recipients, solely to the extent necessary for the purposes indicated:

Public authorities and official bodies: where there is a legal obligation (Spanish Tax Agency, Social Security, etc.).
Hosting and web services provider: for the hosting and technical maintenance of the Website. Servers are located within the European Economic Area (EEA).
Web analytics platforms (if applicable): Google LLC (Google Analytics), whose servers may be located in the United States. The international transfer is covered by the Standard Contractual Clauses approved by the European Commission and the EU-U.S. Data Privacy Framework. Users can prevent data collection by Google Analytics by following the instructions in the Cookie Policy.

Elmafood Ibérica SL does not sell, rent, or transfer personal data to third parties for commercial purposes. Personal data provided through this Website is not shared with sales platforms (Amazon, Faire, or others).

5. International data transfers

Where a service provider is located outside the EEA, international data transfers will only be carried out where adequate safeguards exist, such as an adequacy decision by the European Commission or the execution of Standard Contractual Clauses. Users may request detailed information about the applicable safeguards by writing to info@alasature.com.

6. User rights

Users may exercise the following rights in relation to their personal data, under the terms provided for in the GDPR and the Spanish LOPDGDD:

Right of access: to obtain confirmation of whether their data is being processed and to access it.
Right to rectification: to request the correction of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”): to request the deletion of their data when, among other reasons, it is no longer necessary for the purpose for which it was collected.
Right to object: to object to the processing of their data in certain circumstances.
Right to restriction of processing: to request that processing operations be restricted in certain cases.
Right to data portability: to receive the data provided in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
Right to withdraw consent: at any time, without affecting the lawfulness of processing based on consent given prior to its withdrawal.

To exercise any of these rights, the user may write to info@alasature.com, enclosing a copy of their national ID document or equivalent identification. Elmafood Ibérica SL will respond within a maximum period of one month from receipt of the request.

If the user considers that their rights have not been adequately addressed, they may file a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6, 28001 Madrid (www.aepd.es).

7. Data of minors

The Website is not intended for persons under 14 years of age. In accordance with Article 7 of the LOPDGDD, the processing of personal data of a minor under 14 years of age shall only be lawful if consent is given or authorised by the holder of parental responsibility or guardianship.

8. Security measures

Elmafood Ibérica SL has adopted appropriate technical and organisational measures to ensure the security of personal data and to prevent its alteration, loss, unauthorised processing, or access, taking into account the state of technology, the nature of the data stored, and the risks to which it is exposed.

9. Automated decisions and profiling

Elmafood Ibérica SL does not use automated decision-making systems or create profiles that produce legal effects on the user or similarly significantly affect them.

10. Changes to this privacy policy

Elmafood Ibérica SL reserves the right to amend this Privacy Policy to adapt it to legislative, judicial, or business practice developments. Any changes will be published on the Website.

Get in Touch

We’re here to help you

Have a question about our products or want to work with us? Our team is ready to support you with the right information and guidance. Reach out and we’ll get back to you as soon as possible.