IDENTIFICATION DATA OF THE DATA CONTROLLER

Responsible for the treatment: CARSEGAL, S.L.

VAT ID: B-32383366

Postal Address: Polígono Industrial San Julián de la Vega, S/N – 27614 – Sarria (Lugo)

Tax Address: Avenida Marcelino Suárez, 21 3º C – 32300 – O Barco de Valdeorras (Ourense)

Telephone: 982 535 716

E-mail: info@carsegal.es

Activity: production and sale of meat products

USER INFORMATION AND CONSENT

In accordance with the provisions of the European Data Protection Regulation (EU) 2016/679 and with the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, with the acceptance of this privacy policy the user expresses his express, free, informed and unequivocal consent for the personal data that he could provide through the forms and means of contact that could be available or enabled on the website to be incorporated into the files of the company. The data controller informs the interested parties that, as prescribed by the applicable regulations in force, the corresponding technical and organizational security measures have been applied to the personal data processing activities carried out, which have been implemented after the relevant risk analysis has been performed.

INFORMATION ON DATA OF MINORS

The web site property of the company CARSEGAL, S.L. is directed to users older than 18 years old, so the company will not collect through the web information of minors under 18 years old. It will be prohibited therefore the registry in the web to the minors of 18 years.

WHAT PERSONAL DATA IS COLLECTED?

Through the website we collect the user’s identification data and the data strictly necessary to manage queries and requests made through the means of contact provided on the website. Under no circumstances will we collect sensitive personal data or specially protected data.

The personal data collected will be processed on the following bases of legitimacy:

• The execution of a contract or commercial agreement with the company CARSEGAL, S.L. to enable the contracting or purchase of the products and/or services requested.

• The user’s consent in relation to the contact and sending of commercial communications, via e-mail, cookies or messaging systems.

WHAT IS THE PURPOSE FOR WHICH WE PROCESS THE PERSONAL DATA COLLECTED?

The personal data collected by the data controller through the means of contact provided on the website will be processed for specific purposes in each case and in accordance with the following:

Data obtained through the contact channels provided: there is a contact telephone number and e-mail address for queries, requests, suggestions or for professional contact with the company. In this case the telephone or email will be used in order to respond to requests received and send the information requested by the user through the web, and only the data strictly necessary to meet the specific request of the user will be requested and collected.

Data obtained for the processing and management of the purchase of products: in this case we request personal identification data, contact and related to means of payment strictly necessary to manage and enable the purchase requested by the user.

Data provided for the reception of commercial communications: in this case the data provided by the user will be used to manage the sending of information related to commercial communications that the user has expressly requested or whose sending has been expressly accepted in advance, as well as in order to facilitate the revocation of the user’s consent, or his opposition to the processing of his data for the purposes indicated.

On the occasion of the provision of the services and contents offered by the company through the website, CARSEGAL, S.L. may at some point request personal data from the user through forms or other means of contact, in which case the provisions of this Privacy Policy shall apply.

HOW LONG WILL WE KEEP THE PERSONAL DATA COLLECTED?

The personal data provided to the company responsible for the processing will be processed in general while the relationship of service provision is maintained and the data is needed for the development of the company’s activities and the execution of the services of www.carsegal.es contracted by the user through the website, and as long as the user does not request the deletion of the data or revoke the consent given by the interested parties.

With respect to personal data provided by customers, once the contractual or commercial relationship has ended, the specific statute of limitations provided by the applicable legislation shall apply in each case, with a generic term of 5 years for personal actions without special term, 6 years for invoices and company accounting books and 10 years in relation to the provisions of the Law for the Prevention of Money Laundering and Terrorism Financing (art.25). During the above-mentioned limitation periods the data will be kept blocked and at the disposal of public authorities and administrations, and at the end of these periods the data will be deleted.

WHAT IS THE BASIS OF LEGITIMACY THAT ALLOWS US TO PROCESS THE DATA COLLECTED?

The legal basis of legitimacy that allows us to carry out the processing of personal data collected through the website is based, with regard to the sending of forms that may be enabled, on the express and informed consent of the data subject or his representative collected and granted in accordance with the conditions indicated in art. 7 of the European Data Protection Regulation, according to which data subjects shall have the right to withdraw such consent at any time. The responsible informs that the data requested through the forms that may be enabled on the website will be those strictly necessary to meet the query or request made by the person concerned.

In the case of personal data collected for the contracting and/or purchase of products and services marketed by the company, the basis of legitimacy will be based on the execution of a contract or commercial agreement between the parties and for the purpose of enabling the purchase and contracting of the products requested from the company, and/or the development and management of its own services.

In the case of sending commercial communications to the user, the basis of legitimacy for the processing of their data will be based on the express and informed consent of the interested party, collected and granted in accordance with the conditions indicated in art. 7 of the European Data Protection Regulation, according to which the interested parties will have the right to withdraw this consent at any time.

QUALITY OF THE DATA PROVIDED

The company CARSEGAL, S.L. warns users that, unless there is a sufficiently accredited legal representation, no user can use the identity of another person and communicate their personal data, so that users of the website must take into account that they can only communicate their own personal data and that they are adequate, relevant, accurate, updated and true.

Users shall be liable for direct and indirect damages caused to third parties or to the company by the use of another user’s personal data, or by the use of their own personal data if it is false, erroneous, inadequate, improper, inappropriate or outdated.

Users who provide the company with personal data of third parties must have the informed consent of the third party and in accordance with this Privacy Policy, and shall be liable to the company and to the third party, exonerating the company from any liability in this regard.

WHAT ARE THE RIGHTS THAT CAN BE EXERCISED BY THOSE WHO PROVIDE US WITH THEIR DATA?

In accordance with the provisions of the European Data Protection Regulation (EU) 2016/679 and the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, interested parties shall have the right to obtain confirmation as to whether or not CARSEGAL, S.L. is processing personal data concerning them, as well as to exercise the recognized rights over their data.

Interested parties shall be entitled specifically to:

• Request access to personal data concerning him/her.
• Request rectification or deletion of data
• Request cancellation of data
• Request the limitation of data processing
• Object to the processing of data
• Request data portability

In the event that the data subject has given consent for a specific purpose, he/she will have the right to withdraw the consent previously given at any time, without affecting the lawfulness of the processing based on the consent given prior to its withdrawal.

If the interested parties consider that we have not processed their personal data in accordance with the reference regulations indicated, and if they understand that we have not satisfied their request to exercise their rights, they may, if they so wish, file a complaint with the Spanish Data Protection Agency as the national supervisory authority at the organization’s address in Calle Jorge Juan, 6 – 28001 – Madrid or through the contact channels indicated on the institution’s website (www.aepd.es), including the electronic headquarters. https://sedeagpd.gob.es/sede-electronica-web/

For the exercise of all the rights indicated above, interested parties may contact the contact addresses above to request the application form provided by the company for this purpose in compliance with its legal obligations, form that the person concerned must accompany when submitted or sent a copy of your ID card or equivalent document proving your identity and that of your representative if any. The exercise of the rights will be free of charge, and the request may be delivered by hand to the company staff, or sent by mail or e-mail to the contact addresses indicated.

The Data Controller informs data subjects that it has established and implemented specific protocols and measures for compliance with the data protection regulations of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.

USER RIGHTS IN RELATION TO COMMERCIAL COMMUNICATIONS

The company CARSEGAL, S.L. informs that users who have expressly authorized the sending of commercial or promotional communications via e-mail, sms or any other equivalent or similar means of electronic communication, will have the right to oppose the processing of their personal data for commercial or promotional purposes, as well as the right to revoke the consent previously granted for this purpose, by simply notifying the company and sending an e-mail to the following address info@carsegal.es

TO WHICH RECIPIENTS COULD YOUR DATA BE COMMUNICATED?

The personal data provided by the users will only be treated in general by the company’s managers and by the authorized personnel hired at any given time, who will be required to formalize the corresponding confidentiality agreement and to comply with the duty of secrecy with respect to the personal data to which they may have access in the performance of their duties within the company.

In general, data will only be transferred to third parties in cases of legal obligation, as in the case of transfers made to the Public Authorities and Administrations, State Security Forces and Corps, and to Courts and Tribunals. Data may also be transferred when necessary to enable the development of services or products contracted to the company by users and/or services contracted to external suppliers, including banks and financial institutions, and data processors, and always in this case within the framework provided in the contract between the company and the contracted data processors. The company undertakes in any case to inform data subjects about the need for extraordinary transfers of data to third parties to manage the provision of services to the effect that data subjects may express their consent to the transfer of data as a prerequisite for this to be carried out.

In the case of international data transfers arising from the company’s use of tools, applications, programs or service providers, they will be carried out under the protection of the international conventions in force at any given time, standard contractual clauses and binding corporate rules that ensure that North American and non-EU software companies comply with European data protection policies on privacy, secrecy and data security.

DATA SECRECY AND SECURITY

CARSEGAL, S.L. is committed to the proper use and treatment of users’ personal data, respecting their confidentiality, and to use them in accordance with the purpose of such treatment, as well as to comply with its obligation to keep the data and to adapt all the measures in place to prevent alteration, loss, treatment or unauthorized access, and in accordance with the provisions of the data protection regulations in force.

This website includes an SSL certificate, a security protocol that makes your data travel in an integral and secure way, that is, the transmission of data between a server and a user of the web, and in feedback, is fully encrypted or encrypted.

The company cannot guarantee the absolute impregnability of the Internet network and therefore the violation of the data through fraudulent access to them by third parties.

Regarding the confidentiality of data processing, CARSEGAL, S.L. will ensure that any person who is authorized by the company to process customer and/or user data, including staff, collaborators and suppliers, is under a corresponding obligation of confidentiality, whether legal or contractual.

When a security incident occurs, once CARSEGAL, S.L. becomes aware of it, it will notify the user without undue delay and will provide the appropriate information related to the security incident and in any case provided that the user requests it in a reasonable manner.

ACCURACY AND VERACITY OF DATA

The user is solely responsible for the veracity and correctness of the personal data he/she submits and provides to www.carsegal.esexonerating CARSEGAL, S.L. of any responsibility in this respect. Users guarantee and are responsible, in any case, for the accuracy, veracity, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information through the contact channels provided on the website.

CHANGES IN THE PRIVACY POLICY

CARSEGAL, S.L. reserves the right to modify this privacy policy to adapt it to new legislation or jurisprudence, as well as to the practices of the sector. In these cases, the changes will be announced on the website with due notice before their implementation.