Privacy Policy

1. User Information

Who is responsible for processing your personal data?

LETTUS SALADS, S.L. is the CONTROLLER of the USER's personal data and informs them that such data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December (LOPDGDD).

Why do we process your personal data?

To maintain a commercial relationship with the user. The operations envisaged for processing are:

• Sending commercial advertising communications by email, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enables commercial communications to be made. These communications will be carried out by the CONTROLLER and will be related to their products and services, or those of their collaborators or suppliers with whom an promotional agreement has been reached. In this case, third parties will never have access to personal data.
• Conducting market research and statistical analysis.
• Processing orders, requests, responding to enquiries or any type of request made by the USER through any of the contact methods available on the CONTROLLER's website.
• Sending the online newsletter about news, offers and promotions related to our activity.

Why are we entitled to process your personal data?

Because the processing is legitimised by Article 6 of the GDPR as follows:

• With the USER's consent: sending commercial communications and the newsletter.
• Based on the legitimate interest of the CONTROLLER: conducting market research, statistical analysis, etc. and processing orders, requests, etc. at the USER's request.

How long will we keep your personal data?

Data will be retained for no longer than is necessary to fulfil the purpose of the processing, or as required by legal obligations governing their retention, and once no longer necessary, they will be deleted using appropriate security measures to ensure anonymisation or complete destruction of the data.

Who do we share your personal data with?

No disclosure of personal data to third parties is envisaged, except where necessary for the development and execution of the processing purposes, to our service providers related to communications, with whom the CONTROLLER has signed the confidentiality and data processing agreements required by current privacy regulations.

What are your rights?

The USER's rights are:

• Right to withdraw consent at any time.
• Right of access, rectification, portability and erasure of their data, and the right to restrict or object to its processing.
• Right to lodge a complaint with the supervisory authority (www.aepd.es) if they consider that the processing does not comply with current regulations.

2. Mandatory or optional nature of the information provided by the user

USERS, by ticking the relevant boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unambiguously accept that their data is necessary to attend to their request by the provider, with the inclusion of data in the remaining fields being voluntary. The USER guarantees that the personal data provided to the CONTROLLER is accurate and takes responsibility for communicating any changes to it.

The CONTROLLER informs that all data requested through the website is mandatory, as it is necessary for the provision of an optimal service to the USER. If all data is not provided, it cannot be guaranteed that the information and services provided will be fully suited to their needs.

3. Security measures

In accordance with the provisions of current personal data protection regulations, the CONTROLLER is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, under which data is processed lawfully, fairly and transparently in relation to the data subject, and in a manner that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS, and has communicated adequate information to them so that they may exercise those rights.