Privacy Policy

1. User Information

Who is responsible for the processing of your personal data?

LETTUS SALADS, S.L. is the DATA CONTROLLER responsible for processing the USER's personal data and informs them that such data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December (LOPDGDD).

For what purposes do we process your personal data?

To maintain a commercial relationship with the user. The processing operations envisaged are:

• Sending commercial advertising communications by email, fax, SMS, MMS, social media or any other electronic or physical means, present or future, that enables commercial communications to be made. These communications will be carried out by the DATA CONTROLLER and will relate to its products and services, or those of its collaborators or suppliers with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data.
• Conducting market research and statistical analyses.
• Processing orders, requests, responding to queries or any type of request made by the USER through any of the contact methods made available on the DATA CONTROLLER's website.
• Sending the online newsletter about news, offers and promotions related to our activity.

On what legal basis may we process your personal data?

Because the processing is legitimised by Article 6 of the GDPR as follows:

• With the USER's consent: sending commercial communications and the newsletter.
• Based on the legitimate interest of the DATA CONTROLLER: conducting market research, statistical analyses, etc. and processing orders, requests, etc. at the USER's request.

How long will we retain your personal data?

Data will be retained for no longer than is necessary to fulfil the purpose of the processing, or as required by legal obligations dictating their custody, and once no longer necessary, they will be deleted using appropriate security measures to ensure the anonymisation or total destruction of the data.

To whom do we disclose your personal data?

No disclosure of personal data to third parties is envisaged, except where necessary for the development and execution of the processing purposes, to our service providers related to communications, with whom the DATA CONTROLLER has entered into the confidentiality and data processing agreements required by current privacy regulations.

What are your rights?

The USER's rights are:

• The right to withdraw consent at any time.
• The right of access, rectification, portability and erasure of their data, and the right to restriction of or objection to its processing.
• The right to lodge a complaint with the supervisory authority (www.aepd.es) if they consider that the processing does not comply with current regulations.

2. Mandatory or optional nature of the information provided by the user

USERS, by ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unambiguously accept that their data are necessary for the service provider to attend to their request, while the inclusion of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the DATA CONTROLLER are accurate and accepts responsibility for communicating any changes to such data.

The DATA CONTROLLER informs users that all data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the USER. If all data are not provided, it cannot be guaranteed that the information and services provided will be fully suited to their needs.

3. Security measures

In accordance with the provisions of current personal data protection regulations, the DATA CONTROLLER is complying with all provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, under which data are processed lawfully, fairly and transparently in relation to the data subject, and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The DATA CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS, and has communicated adequate information to them so that they may exercise those rights.