Privacy Policy

Aceites Málaga S.L. maintains a confidentiality policy regarding the data provided by its users through the following means: the internet, paper forms, telephone communications, or any other medium; Aceites Málaga S.L. undertakes to protect such data, both during its collection and in its subsequent processing, in accordance with the provisions of Organic Law 3/2018, as well as Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

Aceites Málaga S.L. guarantees that it will use users personal data confidentially and that appropriate technical and organizational security measures have been adopted in its facilities, systems, and files, in accordance with the terms established by the applicable Organic Law and the GDPR.

Aceites Málaga S.L. may disclose personal data, as well as any other information contained in its records and/or informatic systems, to the competent public authorities when so required, and always in compliance with the applicable legal and regulatory provisions.

Purpose

• To manage, for administrative purposes, the service and/or product requested and/or contracted, by traditional or electronic means.

• To manage any additional services following the purchase and/or contracting thereof.

• To maintain the contractual relationship that may exist between you and us.

• To inform you, by traditional or electronic means, about products, services, or events of our company or group of companies that may be of interest to you.

• To process and manage customers’ requests for information, suggestions, and complaints, and to ensure their handling and resolution.

• To manage personnel recruitment and selection processes.

Lawful Basis

The lawful basis for processing is the performance of a contract, your prior consent, or, where applicable, legitimate interest, such as for security purposes, fraud prevention, or to manage requests, inquiries, or potential complaints.

The data subject is only required to provide the data that are strictly necessary (if any) to process the requested service or inquiry. If the data subject submits a request without providing the data required to handle it, Aceites Málaga S.L. will be unable to process the request and shall be exempt from any liability in this regard.

Source of Data

The personal information processed by us originates from:

• The direct provision by data subjects through forms provided for data collection.

• Information necessary provided by data subjects for the provision/purchase of the service/product.

Recipients

Recipients will be limited solely to other companies within the same group, if applicable, or to other third parties subject to any legal obligation to which the transfer of data is bound.

Retention Period

The retention period for personal information will be limited to the time during which it is necessary to use it for the purpose for which it was collected, or until the right to erasure, cancellation, and/or restriction of processing is exercised.

In such cases, we will keep the information properly blocked, without any use, while it may be necessary for the exercise or defense of claims or if any type of judicial, legal, or contractual liability could arise from its processing, which must be addressed and for which retrieval of the data is necessary.

Automated Decisions and Transfers

• No automated decisions will be made regarding these data.

• No international transfers of any kind will be made regarding these data.

Rights

Data subjects may exercise their rights to rectification, erasure, objection, restriction of processing, and data portability by submitting a written request to the address indicated above, along with a document for identification purposes.

Security

In order to protect your personal information and privacy, we implement appropriate technical and organizational measures, which are reviewed periodically.

The information and documentation related to compliance with the applicable regulations on the Protection of Personal Data will be reviewed whenever there are changes to such legislation or to any of the procedures used to process your personal information.

Complaints

If you believe that the processing of your personal data violates applicable regulations or the provisions of this document, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), which is the competent supervisory authority for the protection of your personal data, through its electronic headquarters at www.agpd.es.

If you have any questions, comments, or concerns regarding how we process personal information, you may contact us by telephone or email.

Consent

Finally, before proceeding with the processing of your data, we require your authorization by means of your explicit consent.

To do so, it will be sufficient to select the corresponding option provided in the form.