1. Who are we?
1.1 Data controller
The following information is provided to you to explain the commitments for the protection of personal data of SOSA INGREDIENTS, SLU with CIF B08932188, a company whose registered office is located at Colonia Galobart s/n, 08270 Navarcles, Barcelona., Registered in the Mercantile Registry of Barcelona, Volume 23,945, Page 77, Sheet 61,693, Section. General, Inscription 6ª, acting as the data controller for the processing of personal data described in the present document and designated the “Data Controller” or “we”.
1.2 Our data protection policy
The Data Controller has designated a person responsible for data protection whom you may contact by email at the following address: rgpd@sosa.cat or by post at the following address: Colonia Galobart s/n, 08270 Navarcles, Barcelona.
2. The personal data we process
In the framework of processing of personal data, the Data Controller collects and processes the following data :
3. The purposes and legal bases of our processing of personal data
3.1 The purposes of our processing
The processing we perform has the following purposes :
3.2 The legal bases for our processing
We only process personal data if one at least of the following conditions is met:
3.3. The legitimate interests pursued
The legitimate interests pursued by the Data Controller may be designed to enable business continuation, improve the consumer experience, build consumer loyalty or understand consumer expectations.
4. The recipients of your data
The personal data we collect at present or subsequently are destined for our use as the Data Controller. We will ensure that only authorised persons may have access to that data. Our subcontractors and service-providers may receive that data for performance of the services we confer on them. Your personal data may be compared or shared between all the Data Controller’s parent or associated companies and subsidiaries. They may be communicated to those entities for the purposes described in the present notice, in accordance with the applicable regulatory requirements and in such a manner as to ensure protection of your data and civil liberties.
5. Transfer of your data
In the framework of the services proposed, we may transfer your personal data to recipients located in the following countries:
Each such transfer is subject to appropriate legal safeguards. Certain of the countries listed above are covered by adequacy decisions by the European Commission, which means that they afford your personal data a level of protection equivalent to that prevailing within the European Union.
We inform that Sosa Ingredients SLU makes use of the Mailchimp tool for the management of commercial communications, and for this reason international data transfers are made to the US. Sosa Ingredients SLU has the adequate guarantees to carry out said transfer, by virtue of the requirements established by the General Data Protection Regulation.
6. The period(s) for which we retain your data
The period(s) for which we retain your data are proportionate to the purposes for which we collected them. Our retention policy is thus organised as follows:
Prospection: 3 years with effect from your last contact or, if applicable, from the end of our commercial relationship extended by any statutory period of limitation.
Customer relationship: For contracts entered into, the applicable data is retained throughout the period of our commercial relationship extended by any statutory period of limitation.
Cookies: 13 months following their installation on your device.
Contracts with a value in excess of €120: 10 years** (the imperative legal requirement) from conclusion of the contract
In the event of exercise of rights of access, rectification, erasure or restriction of processing, data identifying the data subject and enabling processing of the rights exercised: 1 year from receipt of the request
In the event of exercise of the right of opposition to processing, data identifying the data subject and enabling processing of the right exercised: 6 years from receipt of the request
7. Your rights
7.1 Exercise of your rights
You may exercise your rights by email sent to the following address: rgpd@sosa.cat or by letter sent to the following address: Colonia Galobart s/n, 08270 Navarcles, Barcelona.. For that purpose, you must provide your surname, forename(s) and the address at which you wish to receive the reply. In principle, you may exercise all your rights without charge but you may be asked to pay a reasonable charge reflecting the administrative cost of providing any copies of data you may request. With regard to the right to information, the Data Controller is not obliged to respond if you request information you already possess. The Data Controller will inform you if a response cannot be made. The rights mentioned are not absolute and are subject to various conditions founded in:
The Data Controller stresses that any failure to provide, or modification of, your data may have consequences for the processing of certain aspects of the performance of our contractual relationship, and that your request in exercise of your rights will be retained for 6 years in the case of your right of opposition and 1 year in the case of your other rights. All the rights of which you have the benefit are detailed below.
7.2 Your right to information You recognise that the present notice informs you as to the purposes, applicable legal framework and interest of collection of your personal data, and as to the recipients or categories of recipients with whom your personal data are shared, as well as to the possibility of transfer of your data towards a third country or international organisation. In addition to that information and for the purpose of ensuring fair and transparent processing of your data, you confirm that you have received additional information concerning:
If we decide to process your data for another purpose than that initially indicated, we will provide you with full information on that other purpose
7.3 Your right of access to and rectification of your data
By exercising this right, you may obtain confirmation that your personal data are (or are not) subject to processing and if they are so subject, you may have access to them and to information concerning:
You may request that your personal data be rectified or completed if they are inexact, incomplete, equivocal or out of date.
7.4 Your right to erasure of your data
You may request erasure of your personal data if:
Exercise of this right is nevertheless not possible if the conservation of your personal data reflects a legal or regulatory requirement or is necessary for the establishment, exercise or defence of legal claims.
7.5 Your right to restrict the processing of your data
You may request restriction of the processing of your personal data in accordance with the applicable legal and regulatory provisions.
7.6 Your right of opposition to the processing of your data (deregistration)
You have the right to object to processing of your personal data unless such processing is justified by compelling legitimate grounds on the part of the Data Controller. If we contact you directly, this right may be exercised by any means including, in particular, clicking on the unsubscribe link at the bottom of the message sent.
7.7 Your right to data portability
You have the right to portability of your personal data. The right is applicable to the following data:
The right is limited to processing based on your consent or on a contract and to personal data you have personally generated. It does not extend to derived or inferred data which are personal data created by the Data Controller.
7.8 Your right to withdraw your consent
Where processing is based on your consent, you may withdraw your consent at any time, in which case we will no longer process your personal data but any earlier processing to which you agreed will not be affected.
7.9 Your right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority without prejudice to your other rights of administrative or legal recourse.
7.10 Automated individual decisions
Right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects on him or significantly affects him in a similar way.
7.11 Limitation
Right to suspend the processing of the user's personal data in certain cases
In any case, you can request the guardianship of the Spanish Data Protection Agency through its website: https://www.aepd.es/es