fbpx

Datenschutz- und Cookie-Bestimmungen

Our Privacy Policy at a Glance

Who we are? We are MONTESANO EXTREMADURA, S.A., and we process your data as the Data Controller. This means that we are responsible for how we use and protect your personal data.

What do we use your data for? We use the data you have provided to us online or through any other means to address your queries and suggestions, provide you with requested services, or deliver requested products, register you as a user, and send you subscribed personalized communications.

Why do we have them? We are authorized to process your data for various reasons. By filling out a form or sending an email in which you make a query or suggestion, we have a legitimate interest in addressing it. When you register on our website or make a purchase, we must execute the contract you accept with us, just as we have the legal obligation to issue an invoice that includes your data when the service or purchase is carried out. We are also authorized by your consent when you give us authorization to send you our newsletter and personalized offers.

With whom do we share your data? We will only share the data with those collaborating companies to address the received requests and provide our services or facilitate the products to you, banking entities, and entities required by law. In no case do we sell your data to third parties.

What rights do you have? You have the right to access, rectify, or delete your personal data. You also have the right to object to the use of data that you have previously authorized us to use, to port them, and not to be subject to automated individualized decisions.

In the processing of your personal data, we apply the following principles to ensure the greatest protection for you:

  • Principle of legality, loyalty, and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes that we will inform you about transparently beforehand.
  • Principle of data minimization: We will only request strictly necessary data in relation to the purposes for which we require them. The minimum necessary.
  • Principle of limitation of storage period: the data will be kept for no longer than necessary for the purposes of the processing, depending on the purpose, we will inform you of the corresponding storage period; in the case of subscriptions, we will periodically review our lists and remove those inactive records for a considerable time.
  • Principle of integrity and confidentiality: Your data will be processed in such a way as to ensure adequate security of personal data and ensure confidentiality. You should know that we take all necessary precautions to prevent unauthorized access or misuse of our users‘ data by third parties.

In this privacy policy, you will find more detailed information about the use we make of the personal data of our clients, suppliers, and users, and in general, all people who have contact with us, regardless of the means they have used to communicate (online form, by phone or email, in person).

We like to be transparent about what we do with your personal data, for you to understand the implications of the uses we carry out, or the rights you have in relation to your data. For that reason, we keep our Privacy Policy, Legal Notice, and Cookie Policy up to date, information that you can consult on this same website.

In case you have any doubts or want more information about the privacy policy, you can continue reading the document.

MONTESANO EXTREMADURA, S.A., is committed to complying with the current legislation on the processing of personal data at all times. Through this privacy policy, MONTESANO EXTREMADURA, S.A., in accordance with the requirements established in the GDPR and the LOPDGDD, informs users and individuals whose data is processed of:

1. Who is responsible for processing your data?

The data controller for your information is MONTESANO EXTREMADURA, S.A.:

Identity

MONTESANO EXTREMADURA, S.A. – A06279533

Address

Carretera Nacional 435, Km 234., 06380 – Badajoz

Phone

924 75 02 21

Website

https://www.ibericosmontesano.es/

Email

ibericos@montesano.es

Data Protection Officer

AIXA CORPORE S.L.

MONTESANO EXTREMADURA, S.A. informs the user that the data provided through the navigation on our website, different data collection forms, or email submissions will be processed by MONTESANO EXTREMADURA, S.A. The processing is recorded in the Register of Processing Activities managed by MONTESANO EXTREMADURA, S.A. as established in the GDPR.

2. What are your personal data used for?

At https://www.ibericosmontesano.es/, we process data from both users of our website and third parties who have relationships with us. To help you understand the processing of your data, we have differentiated the purpose for which we use the data, the types of data, and the legal basis based on the category of individuals whose data we process. Below, we classify individuals whose data we process based on the type of relationship they have with MONTESANO EXTREMADURA, S.A.

Web Users

What data do we collect from our website users?

  1. Data from users who fill out any of the available forms: The personal data requested by MONTESANO EXTREMADURA, S.A. includes:

    1. Identifying information: name and surname, phone, postal and email address

    2. Data related to the request

  2. Data from users who subscribe to the newsletter/want to receive commercial communications and information:

    • Identifying information: Name and surname, email address.

  3. Data from users who register on our platform:

    • Identifying information: Name and surname, postal and email address, phone, billing address.

  4. Data from users who browse our website: Data provided by cookies and Google Analytics.

For what purposes will we process your personal data?

When the user accepts our privacy policy, they authorize the use of the provided personal data for the following processing purposes:

  • Send them information and provide the service they request through the various forms available on our website.
  • Organize, communicate, and hold events or similar activities.
  • Prepare statistical studies to assess the success of campaigns/ways in which the user learned about a service provided by MONTESANO EXTREMADURA, S.A. These data are collected for statistical purposes only and are for internal use by MONTESANO EXTREMADURA, S.A.
  • Send the newsletter when subscribed, with events, activities, and promotions of MONTESANO EXTREMADURA, S.A. and the relevant sector that may be of interest.
  • Send commercial communications about offers, activities, and promotions of MONTESANO EXTREMADURA, S.A. and the relevant sector that may be of interest, by conventional or electronic means when the user has marked the box indicating their desire to receive information.

How do we obtain your data?

We obtain your data through:

  • The form completed by the web user for the purpose specified in it. The form is subject to acceptance of this privacy policy through the indicated checkbox.
  • Navigation data obtained from the different cookies that the user accepts when first accessing https://www.ibericosmontesano.es/.

What is the legitimacy for the processing of your data?

The express consent of the user (Article 6.1.a. GDPR

) manifested by completing the various forms, checking the box for newsletter submission, and receiving commercial communications/information about offers, activities, and promotions of MONTESANO EXTREMADURA, S.A. and the relevant sector that may be of interest legitimizes the processing by MONTESANO EXTREMADURA, S.A. The user can revoke the consent given at any time; however, revocation does not affect data processing carried out before its revocation.

Legitimate interest for profiling navigation and detecting preferences through the installation of cookies.

Execution of a contract or the adoption of pre-contractual measures when the client makes a request through the different forms provided by the user on our website or requests information about the services provided by MONTESANO EXTREMADURA, S.A.

2.2 Suppliers

What data do we collect from our suppliers?

  1. Supplier’s identifying data: The personal data requested by MONTESANO EXTREMADURA, S.A. includes:

  • Identifying data: name and surname, phone, postal and email address
  • Employment and professional data
  • Activities and businesses

How do we obtain your data?

We obtain your data through:

  • The signing of the contract that binds us, acceptance of the presented budget, receipt of supplier invoices, and the signing of the Data Processing Agreement if applicable for the service provided.

What are your personal data used for?

  • Manage information related to the data of our supplier companies of goods and services, as well as their representatives.
  • Maintenance of the contractual relationship with our suppliers.
  • Management of payments and collections related to the contracts that bind us.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract to send you information and manage the service provided, being impossible without it.

In the legitimate interest for the management of data related to the representatives of MONTESANO EXTREMADURA, S.A.’s suppliers.

2.3 Clients

What data do we collect from our clients?

  • Data from clients who fill out any of the forms available at https://www.ibericosmontesano.es/ and in the physical establishment of MONTESANO EXTREMADURA, S.A.
  • Data from clients who fill out any of the forms available at https://www.ibericosmontesano.es/ and in the physical establishment of MONTESANO EXTREMADURA, S.A.
    • Identifying data: name and surname, phone, postal and email address
    • Data related to the request
  • Data from clients who register on our platform:
    • Identifying data: name and surname, postal and email address, phone, billing address.
  • Data from clients who make a reservation or order in our establishment in person:
    • Identifying data: name and surname, postal and email address, phone, billing address
  • Data from our clients obtained through our contracts and budgets
  • Data from clients who make an online or in-person purchase:
    • Identifying data: Treatment, name, surname, postal and email address, phone, billing address.
    • Transaction data: Products purchased/services provided and payment method, invoice or purchase receipt.

How do we obtain your data?

If you are an online client, we obtain your data through:

  • The form completed by the user for information and/or budget request, order, or to finalize the online purchase in our e-commerce. The form is subject to acceptance of this privacy policy through the indicated checkbox.
  • Navigation data is obtained from the different cookies that the client accepts when first accessing https://www.ibericosmontesano.es/

If you are a in-person client, we obtain your data through:

  • The customer registration form.
  • Acceptance of the presented budget.
  • The signed contract.

What are your personal data used for?

  • Generate and manage the documentation associated with your requests and purchases.
  • Provide information about offers, products, and services related to your purchase.
  • Process your online reservation or purchase through our platform.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract to send you information and manage the service provided or the product supplied, being impossible without it.

In the user’s consent for the newsletter and commercial communications about offers, activities, and promotions of MONTESANO EXTREMADURA, S.A. and the relevant sector that may be of interest. The user can revoke the consent given at any time.

In the legitimate interest for sending information about exclusive promotions, latest news, and personalized information adapted to the profile of the interested party, and for sending satisfaction surveys about the products or services purchased.

2.4 Job Applicants and Candidates

What data do we collect from applicants?

  • Data from candidates requested in the ‚work with us‘ form by MONTESANO EXTREMADURA, S.A.:
    • Identifying data: name and surname, phone, postal and email address
    • Academic and work data
    • Data that the candidate includes as attached documents

How do we obtain your data?

We obtain your data through:

The submission of a resume at our facilities or the completion of the ‚Work with Us‘ form on our website.

What is the legitimacy for the processing of your data?

In the user’s consent by incorporating their data and resume on the website of MONTESANO EXTREMADURA, S.A. to participate in ongoing selection processes and future processes that may be carried out until they oppose the processing of their data.

2.5 Social Media Contacts

What data do we collect?

  1. Identifying data on the Social Network: MONTESANO EXTREMADURA, S.A. will not request data beyond what you have included in your user profile.

What are your personal data used for?

  • Answer and manage your queries, requests, or petitions.
  • Interact with you as long as you are part of our follower community.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract that links you to the corresponding social network and in accordance with their privacy policies:

https://www.ibericosmontesano.es/ will always try to establish adequate mechanisms to obtain the User’s consent for the installation of cookies that require it. When a user accesses our website, a pop-up appears informing about the existence of cookies and that if they continue browsing our page, they give their consent for the installation of cookies. Acceptance of the installation of cookies entails acceptance of the storage of the IP address in the https://www.ibericosmontesano.es/ logs, together with the date of acceptance, for a period of one year, for the purpose of demonstrating the consent given. You can obtain more information in our „Cookie Policy„.

3. HOW LONG DO WE KEEP YOUR DATA?

3.1 Web Users

Data processed based on the user’s web consent will be retained as long as it remains relevant for the purpose for which it was collected, and consent is not revoked.

For data processed based on legitimate interests, the retention period will be linked to the motivation for collecting the data, ensuring adequate guarantees and respect for the rights and freedoms of the individuals.

For data processed based on the execution of a contract or the adoption of pre-contractual measures, the retention period will be for the duration of the contractual relationship and the subsequent period required by legal obligations.

The IP address obtained through cookies will be retained for a period of one year to demonstrate user consent.

Regarding the retention period for cookies, you can find more information on our website in the „Cookies Policy“ section.

3.2 Suppliers

For data processed based on legitimate interests, the retention period will be linked to the motivation for collecting the data, ensuring adequate guarantees and respect for the rights and freedoms of the individuals.

For data processed based on a contract, as well as if part of the processing is legitimized by a legal obligation, the data will be kept for the duration of the contractual relationship. The retention period for the data after its conclusion, or if the processing is linked to a legal obligation, will be as legally provided, and the data cannot be revoked by the data subject except as legally specified for blocking.

3.3 Customers

For data processed based on customer consent, it will be retained as long as it remains relevant for the purpose for which it was collected, and the consent is not revoked.

For data processed based on legitimate interests, the retention period will be linked to the motivation for collecting the data, ensuring adequate guarantees and respect for the rights and freedoms of the individuals.

For data processed based on a contract, as well as if part of the treatment is legitimized by a legal obligation, the data will be kept for the duration of the contractual relationship. The retention period for the data after its conclusion, or if the processing is linked to a legal obligation, will be as legally provided, and the data cannot be revoked by the data subject except as legally specified for blocking.

3.4 Job Applicants and Candidates

Data processed based on the consent of the job applicant and candidate will be kept as long as the selection process to which they applied remains open. In the case that the application is not for a specific selection process and is for future applications, the retention period will be a maximum of one year, after which the CV will be deleted and destroyed, unless the interested party expresses the desire for preservation and updates it.

3.5 Social Media Contacts

The data processed for social media contacts will be kept as long as the user and MONTESANO EXTREMADURA, S.A. maintain a connection on the social network. Since MONTESANO EXTREMADURA, S.A. does not have direct control, the data processing can only be accessed or deactivated in a restricted manner. We will process your data as long as the social media user is connected to MONTESANO EXTREMADURA, S.A. as ‚friends‘, ‚likes‘, ‚follows‘, or similar buttons.

To rectify your data, restrict information, or control your shared posts, MONTESANO EXTREMADURA, S.A. is not responsible for making these corrections. Users must do this themselves through their profile settings, adhering to the privacy policy of the respective social network.

Regardless of the legitimacy that supported the data collection, it may be processed for scientific, historical, or statistical research purposes, always implementing adequate guarantees and respecting the rights and freedoms of the data subjects.

4. ADDITIONAL INFORMATION ON DATA PROCESSING

Only those over 14 years of age can provide data through our website and email. If you are under this age, you must have the consent of your parents or legal guardians.

The User guarantees the authenticity and timeliness of all the data communicated to MONTESANO EXTREMADURA, S.A. and declares that they are over 14 years of age, being solely responsible for any false or inaccurate statements made.

In the case of making a reservation for a service or making an online purchase, the interested party must be over 18 years of age, the age legally established in the Civil Code to acquire legal age and capacity to act.

The personal data processed by MONTESANO EXTREMADURA, S.A. may be mandatory or voluntary. Through web forms, special categories of data will not be requested to ensure privacy. In case it is necessary to collect special category data to provide a service, it will be requested through another means. The data that will be requested in the forms are:

  • Identification data: name and surname, telephone, postal and email address.
  • Data related to the request.
  • Data of users subscribing to the newsletter/wanting to receive information, commercial communications, and information.
  • Data of users registered on our platform.

Voluntary information is information that the user is not obliged to provide to contact us.

Fields marked with an asterisk (*) or with the word (required) in our forms are mandatory, and refusing to provide them will make it impossible to provide the service or meet your request.

If you provide us with third-party data, you declare that you have their consent and undertake to convey the information provided in this clause, releasing MONTESANO EXTREMADURA, S.A. from any obligation. However, MONTESANO EXTREMADURA, S.A. may carry out verifications to verify that the third party has been informed, adopting the diligence measures established in data protection regulations.

5. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Data will not be transferred to third parties except for legal obligation or if necessary to attend to your request.

Among the recipients to whom your data may be communicated are:

  • Group companies.
  • Public administrations and bodies when required by tax, labor, Social Security, or any other applicable regulations. Data processing companies (providers of fraud detection and prevention, technological services, customer service, advertising and marketing services, and, in general, third-party providers necessary for the provision of services offered by MONTESANO EXTREMADURA, S.A. such as messenger and transport service providers, etc.)</ li>

6. ARE INTERNATIONAL DATA TRANSFERS MADE?

https://www.ibericosmontesano.es/ is hosted in Spain, a country that is part of the European Union, in the territory of the European Economic Area, or that complies with the guidelines established in articles 46 and 47 of the GDPR; therefore, no international transfers of the data provided by users on the website will be made.

Our website only accesses user data using the following methods:

  • Through contact forms available to users on the website.
  • Through cookies that the user has previously accepted.
  • Through registration in newsletters.

International data transfers may also occur concerning the aforementioned transfers/communications, for which MONTESANO EXTREMADURA, S.A. will use the tools provided in articles 46 and 49 of the GDPR as a guarantee for transfers made to countries without an adequacy decision from the European Commission.

In any case, third parties with whom certain personal data is shared will have previously demonstrated the adoption of adequate technical and organizational measures for the proper protection of this data, and transfers will only be made to third countries when there is a binding legal instrument in accordance with articles 46 and following of the GDPR. By accepting this privacy policy, you accept that an international data transfer may occur in accordance with the indicated guarantees.

In case the requirements established in the GDPR are not met, the data subject may give their consent to the international transfer or a contract may be executed in the interest of the data subject. Otherwise, authorization must be requested from the Supervisory Authority.

MONTESANO EXTREMADURA, S.A. never sells user data to third parties under any circumstances.

7. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

The user can exercise the following rights against MONTESANO EXTREMADURA, S.A.:

  • Access to their personal data
  • Rectification when they are inaccurate or incomplete
  • Request the deletion or cancellation of data when, among other reasons, it is no longer necessary for the purposes for which it was collected
  • Object to its processing
  • Request the limitation of the processing of their data when any of the conditions provided in the regulations are met
  • Request the portability of their data in cases provided for in the regulations
  • Prevent automated decisions
  • Revoke granted consents

To exercise their rights, the user must send a written request indicating the right they wish to exercise and attach proof of their identity and postal or email address for notification purposes. This request can be made either by postal mail to: MONTESANO EXTREMADURA, S.A. Carretera Nacional 435, Km 234., 06380 – Badajoz, or by email to: ibericos@montesano.es.

The data subject is informed that MONTESANO EXTREMADURA, S.A. has appointed a Data Protection Officer to whom any issues regarding the processing of their personal data can be addressed. The data subject can contact the Data Protection Officer via the following email address aixa3906@dpocanarias.com or by postal mail to the following address: Carretera Nacional 435, Km 234., 06380 – Badajoz.

MONTESANO EXTREMADURA, S.A. must respond to the request to exercise rights within one month from the receipt of the request. This period may be extended by two more months if necessary, taking into account the complexity and the number of requests. Any extension will be notified within one month of receiving the request, stating the reasons for the delay.

Furthermore, data subjects have the right to lodge a complaint with the competent supervisory authority (Spanish Data Protection Agency) if they consider that MONTESANO EXTREMADURA, S.A. has violated the rights granted to them by data protection regulations, which can be done through www.aepd.es.

8. ARE MY DATA SECURE?

MONTESANO EXTREMADURA, S.A. has a current contract with the hosting company DinaHosting SL for the hosting of its website. It is a European company with the latest security measures in place. Although it is hosted in Spain, it has appropriate technical and organizational security measures for the proper protection of data, and international transfer is made because there is a binding legal instrument in accordance with articles 46 and following of the GDPR.

In any case, MONTESANO EXTREMADURA, S.A. guarantees the adoption of appropriate measures to ensure the confidential treatment of your data, given its confidential nature. It commits to keeping such data secret, treating it with the utmost confidentiality, and declares that it has implemented information security policies corresponding to the type of data handled in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals concerning the processing of personal data and the free movement of such data (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that allows for an encrypted connection when a user visits our website and exchanges information with us.

9. DO YOU NEED AN ACCOUNT AND/OR PASSWORD?

The user can register on our website, and the creation of an account is essential for this. It is the user’s responsibility to maintain the confidentiality of the account information, including the password, as well as all activities that occur in it.

The user is obligated to immediately inform MONTESANO EXTREMADURA, S.A. if there is any unauthorized use of their account or password, or if there is any security-related issue, by sending an email to ibericos@montesano.es.

10. LINKS TO OTHER WEBSITES

If you choose to leave our website through links to other websites not owned by our entity, MONTESANO EXTREMADURA, S.A. will not be responsible for the privacy policies of such websites or the cookies they may store on the user’s computer.

Date: October 20, 2023

Version: V.1.0