Use and processing of personal data

In accordance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you about the processing of your personal data when you use this website.

1 Data controller

The controller of your data is Fábrica de patatas LA SANTAMARIA SL, with Tax ID No. B/82164039 and registered address at Pº de Santamaria de la Cabeza, 47 – 28045 Madrid.
You can contact the controller via email at info@productoslasantamaria.com and/or by telephone at +34 916 924 892.

3 Data processed and source

The data processed come directly from the information you provide through the forms on this website or through the contact methods indicated (for example, email or telephone).
The types of data that may be processed generally include: identification data (first name, surname), contact data (email, telephone) and, where applicable, transaction data related to the products or services contracted.

4 Necessity of the processing

The provision of data marked as mandatory in the forms is necessary in order to process your request or manage the contractual or pre‑contractual relationship with you; if you do not provide such data, it will not be possible to process your request.

Purposes of the processing and legal bases
Your data may be processed for the following purposes:

a) Management of queries and requests
Purpose: To handle queries, requests for information or contact that you send us through the website forms or by other means.
Legal basis: Taking pre‑contractual measures at the request of the data subject or the controller’s legitimate interest in handling your requests.

b) Management of the contractual relationship
Purpose: To manage, administer and perform the contracting of products and/or services that you request, as well as related invoicing and accounting, tax and administrative management.
Legal basis: Performance of a contract to which the data subject is party.

c) Sending of commercial communications
Purpose: To send by post, electronic or equivalent means commercial and advertising communications relating to products and/or services of LA SANTAMARÍA similar to those contracted or which may be of interest to you.
Legal basis:
– The controller’s legitimate interest in the case of existing customers, provided there is a prior relationship and the communications concern similar products or services (Article 21 of the Spanish Law on Information Society Services);
– The data subject’s consent where there is no prior contractual relationship or for sending personalised communications.

d) Service improvement and statistics
Purpose: To carry out statistical studies, satisfaction surveys and internal analyses in order to improve our products, services and user experience.
Legal basis: The controller’s legitimate interest in improving the quality of the service and customer care, adopting appropriate minimisation and pseudonymisation measures where applicable.

Where the legal basis is your consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

5 Data recipients

As a general rule, your data will not be disclosed to third parties, except where there is a legal obligation or where it is necessary for the provision of the service.
Certain processors may have access to your data, such as providers of information technology services, maintenance, web hosting, tools for sending electronic communications and other similar services, with whom the corresponding data processing agreements have been signed to ensure compliance with data protection regulations.
In the event of international data transfers outside the European Economic Area, you will be expressly informed, indicating the destination countries and the appropriate safeguards applied (for example, an adequacy decision of the European Commission or standard contractual clauses).

6 Data retention period

Personal data will be retained for as long as necessary to fulfil the purpose for which they were collected and to determine any possible liabilities arising from that purpose and from the processing of the data.
In general:
– Data relating to queries or requests: will be kept for the time necessary to deal with them and, at most, for 2 years after the last relevant communication.
– Data relating to contractual relationships: will be kept for the duration of the contractual relationship and thereafter for the periods required under tax, commercial and data protection regulations.
– Data for commercial purposes: will be kept as long as you do not withdraw your consent or opt out of receiving such communications.

7 Rights of data subjects

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as the right not to be subject to individual automated decisions, including profiling, where applicable.
To exercise these rights, you may send a written request, clearly indicating which right you are exercising and attaching a copy of a document proving your identity, to:
Postal address: Pº de Santamaria de la Cabeza, 47 – 28045 Madrid.
Email: info@productoslasantamaria.com

You also have the right to withdraw the consent given at any time and to object to the sending of commercial communications by using the link provided for this purpose in each communication or by sending an email to info@productoslasantamaria.com with the subject line “Unsubscribe commercial communications”.
If you consider that your data protection rights have been infringed, you may lodge a complaint with the competent supervisory authority; in Spain, this is the Spanish Data Protection Agency (AEPD), via www.aepd.es.

8 Amendments to the privacy policy

We reserve the right to amend this privacy policy in order to adapt it to legislative or case‑law developments, criteria of the supervisory authority or other changes in our data processing activities.
Amendments will be announced on this same page within a reasonable period before their application where required by law, and use of the website after such changes will imply acceptance of the new Privacy Policy.

9 Applicable law and jurisdiction

This privacy policy is governed by the data protection regulations of the European Union and the Spanish legislation in force at any given time.
In general, and without prejudice to the rights to which you are entitled as a data subject, any dispute that may arise from the use of this website shall be submitted to the competent Courts and Tribunals of Madrid (Spain), unless the regulations on consumers and users establish a different mandatory venue.