1.Responsible for the processing

Company name: ECOTRUFFLE, S.L.
Address: Masia Loma Plana, S/n (La Puebla de Valverde, Teruel)
NIF: B- 67707570
Telephone: (+34) 618489921
E-mail: hola@trufam.es

2.Origin and categories of data

2.1. We will process the data that you provide us with through the “Contact” and “Newsletter” forms, as well as through other means related to the use or services offered on the Website. This data generally includes name, city and email address in general cases and, when applying for a job offer, will include various curricular data.

2.2. In addition to this data, we may process other personal data that you provide to us or that is generated during our communications or contracting of services or products.

2.3. We may also collect data through cookies for analytical and advertising purposes. You can find more information in our Cookies Policy.

2.4. Finally, please note that, by providing us with your data, you guarantee the truthfulness and/or accuracy of these data. Consequently, you will be liable for any false or inaccurate statements you make, as well as for any damage caused to ECOTRUFFLE, S.L. or third parties as a result of these.

3. Purpose and legitimacy of treatment

Purpose-> To provide you with services: To provide you with the services you request from us (e.g., sale of a product) and/or to respond to your requests for information. Legal basis-> Art. 6.1.(b) General Data Protection Regulation (“GDPR”): Need to offer you and provide you with the services or information you request from us.

Purpose-> Legal obligations: We will also process your data to comply with our legal obligations (tax, accounting, money laundering, etc.), as well as to comply with your rights. Legal basis->Art. 6.1.(c) RGPD: Necessity to comply with our obligations and to allow the exercise of your rights.

Purpose-> Marketing: To send you electronic commercial communications and newsletters. Please note that you may object at any time by sending an email to hola@trufam.es or by following the instructions contained in each communication. Legal basis->Art. 21 LSSICE or Art. 6.1.(a) RGPD: If you are a customer, we will rely on Art. 21 of Law 34/2002, of July 11, 2002, on information society services and electronic commerce (“LSSICE”) to send you information by digital means about our services/products and news. If you are not a customer, we will only send you this information if you give us your consent or request to register for our newsletter.

Purpose-> Satisfaction surveys: To send you satisfaction surveys about our products and services. Legal basis->Art. 6.1.(f) RGPD: Legitimate interest to conduct surveys about our business activity in order to improve our services.

Purpose-> Analysis To carry out data analysis (not identifying any person) of the navigation on our website. Legal basis-> Art. 6.1.(a) RGPD: Consent to the installation and use of cookies as explained in the Cookies Policy.

Purpose-> Behavioural advertising and social networks: To show you advertising during browsing through the use of cookies based on your preferences, as well as based on the interactions you make on social networks through our Website. Where appropriate, the corresponding social networks may process your data in accordance with their privacy policies. Legal basis-> Art. 6.1.(a) RGPD: Consent to the installation and use of cookies as explained in the Cookies Policy.

Purpose->Candidates: In the event that you submit an application for any of the job vacancies we have published, we will process your data for the purpose of managing your application as well as to offer you other applications that may fit your profile. Please note that if you use a third party platform to apply, such third parties will also process your personal data in accordance with their privacy policy. Legal basis-> Art. 6.1.(b) RGPD and Art. 6.1.(f) RGPD: Need to manage your application as part of the pre-employment process. In case you are not finally hired, we will keep your data for a reasonable period of time in case you suggest another offer that fits your profile, based on legitimate interest.

4. Retention of data

4.1. We will retain your data for the duration of our relationship. However, if we observe a prolonged period of inactivity, we will also delete your data to the extent that the processing is no longer adequate, relevant and necessary for the purposes intended for the processing. This rule applies unless you request us to delete your data.

4.2. Once the processing of your data is no longer adequate, relevant and limited to what is necessary for the purposes for which it is processed, we will keep your data properly blocked and only for potential legal liabilities, as required by law.

4.3. Finally, we inform you that we will take all reasonable steps to ensure that your data is rectified or deleted when it is inaccurate.

5. Automated decisions

5.1. We will not make individual decisions based solely on automated processing that produce legal effects on you or significantly affect you in a similar way.

6. Recipients

6.1. As a general rule, we will not disclose your data to third parties. However, in certain cases we may need to disclose your data to:

Suppliers: We will provide access to your personal data to suppliers who need such access in order to provide services to us, such as data managers, IT or cloud providers or hosting providers, CRM providers, partners, logistics companies or postal services, telecommunications providers, payment gateways, financial institutions or accounting and legal advisors. These third parties will act as our (sub)processors and will have in place appropriate safeguards to protect your personal information including a corresponding contract of commissioned processing in accordance with Art. 28 GDPR.

• Other: We will share your personal data with third parties if we are required to do so by law, by an administrative or judicial authority or in the public interest or for public order, such as to comply with anti-money laundering and counter-terrorism regulations, tax obligations or social security obligations.6.2. Finally, please note that we may also share your information if we believe it is reasonably necessary to enforce the terms and policies of the Website or to protect our operations or Users. In addition, in the event of a business restructuring, merger, spin-off or sale, we may transfer all of your personal information to the third party resulting from such transaction

7. International transfers.

7.1. We do not make international transfers of data. However, as is now commonplace, many IT providers have their servers outside the European Economic Area (EEA). Therefore, some of our current providers (such as Google, MailChimp, Freshsales, Odoo and others that we may contract in the future) are located or provide services from outside the EEA. In this case, and only where strictly necessary to operate the Website and/or provide you with the services you request from us, we will make international transfers in the course of providing the requested services to such suppliers.

 

7.2. In any event, please note that we will enter into such documents with all such suppliers as may be necessary to ensure that they provide adequate safeguards equivalent to those in the EU for such international transfers.

 

8. Rights

8.1. What rights do you have?

As provided for in the General Data Protection Regulation (GDPR) and Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights, we inform you that you have the following rights:

Access: You have the right to access your data to find out what personal data concerning you we are processing.
Rectification or erasure: In certain circumstances, you have the right to rectify inaccurate personal data concerning you that is processed by us or even to ask us to erase it.
Restriction: In certain circumstances, you have the right to ask us to limit the processing of your data, in which case we inform you that we will only keep them for the exercise or defence of claims.
Portability: In certain circumstances, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transfer it to another data controller.
Objection: In certain circumstances and for reasons relating to your particular situation, you have the right to object to the processing of your data in which case, we would stop processing it except for compelling legitimate reasons or for the exercise or defence of possible claims. You may object to receiving commercial communications at any time.

8.2. How can you exercise your rights?

You may exercise your rights at any time by contacting the Data Controller (ECOTRUFFLE, S.L.) as indicated in Section 1, indicating “Privacy” in the subject line. In order to verify your identity, we may ask you to send us certain additional information or documentation such as, for example, a copy of your ID card or similar identification document.

The exercise of these rights is free of charge. However, please note that a fee may be charged where requests are unfounded, excessive or repetitive.

8.3. Do you have the right to withdraw your consent?

Yes, you may at any time withdraw your consent to the processing of your data for one, several or all of the above purposes which are based on your consent to their processing. Please note that, if applicable, this may alter or even lead to the termination of the provision of services.

8.4. Do you have the right to complain?

Yes, at any time you can complain to the competent supervisory authority depending on your place of residence. In the case of Spain, the Spanish Data Protection Agency (AEPD). You can consult the different supervisory authorities by contacting us at info@heurafoods.com.

In any case, before initiating any claim, please contact us by e-mail (hola@trufam.es) in order to try to resolve any discrepancy or dispute amicably.

8.5. How soon will we reply?

We will respond to your requests as soon as possible and, in any case, within one month. If this is not the case, please apologise and contact us again so that we can attend to you and correct any possible technical errors that may have prevented us from responding to you within the deadline.

9. Modification.

ECOTRUFFLE, S.L. reserves the right to modify this Privacy Policy in accordance with the provisions of the Legal Notice.