Privacy policy and data protection

PRIVACY POLICY OF THE ALVINESA GROUP

In compliance with the General Data Protection Regulation (GDPR), we inform you:

1. Data Controller. Who will process your data?

The data will be processed for the purposes detailed in this policy under the responsibility of:

• ALVINESA NATURAL INGREDIENTS S.A.U., with registered office at Ctra. Valdepeñas Km. 4,850 13250 Daimiel – Ciudad Real, and CIF A30423073.
• ALVINESA LOGISTICA S.L., with registered office at Ctra. Valdepeñas Km. 4,850, 13250 Daimiel – Ciudad Real, and CIF B86378882.
• GENOSA ID S.L., with registered office at C. Iván Pavlov, 8, edif.1 bajo g, Campanillas, 29590 Málaga, and CIF B92284512.

 

2. Data Protection Officer

For inquiries regarding data protection regulations and to exercise the corresponding rights, you can contact dpo@alvinesa.com.

3. Purpose. How will your data be used?

3.1. If you access our facilities, to ensure security through video surveillance.

3.2. If you exercise a data protection right: To manage the obligations related to responding to data protection rights.

3.3. If you are notified of a security breach: To manage and evaluate security breaches.

3.4. If you submit your CV for recruitment purposes: To manage candidates in selection processes.

3.5. If you have a business or administrative relationship with us: If you are involved in a contract as a self-employed individual or a natural person, for the management of the contracted service. If you are a representative or contact person of a legal entity, the purpose is to maintain contact with the entity you represent or work for.

3.6. If you are a contact person of a legal entity or an individual entrepreneur, to manage commercial and marketing actions.

4. Retention Period. How long will we keep your data?

4.1. If you visit our facilities and are recorded: Data is deleted after one month unless related to an investigation.

4.2. If you exercise a data protection right: Retained for three years from the resolution.

4.3. If notified of a security breach: Retained for three years from the resolution.

4.4. If you submit your CV: Retained for the necessary duration to fulfill the purpose unless you request deletion.

4.5. If you have a business or administrative relationship: Data retention follows contractual obligations and legal responsibilities.

4.6. If you are a contact person or an entrepreneur receiving our commercial offers: Retained until you object.

5. Legal Basis. Why are we authorized to process your data?

5.1. Video surveillance: Legitimate interest under Article 9.2.f) GDPR.

5.2. Exercising a data protection right: Compliance with legal obligations (Article 6.1.c) GDPR).

5.3. Security breach notification: Compliance with legal obligations (Article 6.1.c) GDPR).

5.4. CV submission: Necessary for pre-contractual measures (Article 6.1.b) GDPR).

5.5. Business or administrative relationship: Necessary for contractual execution (Article 9.2.c) GDPR).

5.6. Commercial actions: Legitimate interest (Article 6.1.f) GDPR).

6. Obligation to Provide Data. Do you have to provide your data?

6.1. If you enter a contract with us: Providing your data is mandatory as it is necessary for contract execution. Refusal will prevent contract completion.

7. Who will your data be shared with?

7.1. If you access our facilities: Data may be shared with law enforcement in case of incidents.

7.2. If you exercise a data protection right: Data may be shared with the Spanish Data Protection Agency (AEPD).

7.3. If you are notified of a security breach: Data may be shared with AEPD and law enforcement.

7.4. If you submit your CV: Data may be shared within our group companies (Legitimate Interest – GDPR Recital 48).

7.5. If you have a business or administrative relationship: Data may be shared with financial institutions and tax authorities for compliance.

7.6. If you are a contact person of a company or an entrepreneur receiving commercial offers: Data will not be shared with third parties unless legally required.

7.7. If you show interest in our products: Data may be shared for marketing purposes, provided you have given consent.

8. Your Rights. What rights do you have?

8.1. Right of Access: Obtain confirmation of whether we process your data.

8.2. Right of Rectification: Request modification if data is inaccurate.

8.3. Right of Erasure: Request data deletion if unlawfully processed or no longer necessary.

8.4. Right to Restriction of Processing: Limit processing while the accuracy of data is verified.

8.5. Right to Data Retention: If processing is unlawful but you oppose deletion.

8.6. Right to Data Portability: Receive data in a structured, commonly used format when applicable.

You may exercise these rights by contacting our Data Protection Officer (DPO) via the provided email. Additionally, you have the right to:

• Withdraw your consent if processing is based on consent.
• File a complaint with the Spanish Data Protection Agency if you believe your rights are being violated.

 

For any inquiries, please contact us at dpo@alvinesa.com.