DATA CONTROLLER DETAILS
- Registered name: Cima Óleo, S.L. (hereinafter, the “Company” or the “Controller”).
- Tax identification number (CIF): B56068679
- Registered office: C/ Las Camelias, 14 – 14900 Lucena (Córdoba)
Applicable legislation
Our Privacy Policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and, insofar as it does not contradict the aforementioned Regulation, with the provisions of the Spanish legislative framework on the protection of personal data.
By providing us with your data, you declare that you have read and are aware of this Privacy Policy, and you give your unambiguous and express consent to the processing of your personal data in accordance with the purposes and terms set out herein.
The Company may amend this Privacy Policy in order to adapt it to new legislation, case law or interpretations issued by the Spanish Data Protection Agency (AEPD). These privacy terms may be supplemented by the Legal Notice, the Cookie Policy and any General Terms and Conditions that may be established for certain products or services, where such access involves any specific considerations regarding the protection of personal data.
Purpose of the processing of personal data
We process your personal data for the following purposes:
- To provide you with information about the products and services offered by our company and described on this website.
- To arrange the contracting of our services through the acceptance of the corresponding quotation / order and/or the signing of a commercial contract.
- To send you, by email and/or post, news and updates about our organisation, as well as updates to our catalogue of products and services. And, where applicable, to manage your subscription to our newsletter.
Retention period for your data
We will retain your personal data from the moment you give us your consent until you withdraw it or request the restriction of processing. In such cases, we will keep your data blocked for the periods required by law.
Lawful basis and data collected
The lawful basis for the processing of your data is the express consent you give by means of a positive, affirmative act (completing the relevant form and ticking the box accepting this policy) at the time you provide us with your personal data.
Consent to the processing of your data
By completing the forms, ticking the “I accept the Privacy Policy” box and clicking to submit the data, or by sending emails to the Company through the accounts provided for that purpose, the User states that they have read and expressly accepted this Privacy Policy and gives their unambiguous and express consent to the processing of their personal data for the purposes indicated.
The User certifies that they are over 14 years of age and therefore have the legal capacity required to give consent to the processing of their personal data, all in accordance with the provisions of this Privacy Policy.
Categories of data
The data collected fall within the category of identification data, such as: name and surname(s), telephone number, postal address, company, email address, as well as the IP address from which you access the data collection form.
Security measures
As part of our commitment to guaranteeing the security and confidentiality of your personal data, we hereby inform you that the technical and organisational measures necessary to ensure the security of personal data and to prevent its alteration, loss, or unauthorised processing or access have been adopted, taking into account the state of the art, the nature of the data stored and the risks to which they are exposed, in accordance with Article 32 of the GDPR (Regulation (EU) 2016/679).
Disclosure of data to third parties
No disclosures of your data to third parties or international transfers of your data are envisaged, except for those authorised by tax, commercial and telecommunications legislation, and in cases where a judicial authority requires us to do so.
User rights
Any data subject has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data and to request the rectification of inaccurate data or, where applicable, to request its erasure where, among other reasons, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will retain the data only for the exercise or defence of legal claims. On grounds relating to their particular situation, data subjects may object to the processing of their data. The data controller will cease processing the data, except on compelling legitimate grounds or for the exercise or defence of possible legal claims.
How can I exercise my rights?
To exercise your rights, you may write to Bulevar Los Santos nº 103 – 14900 Lucena (CORDOBA), or you may also send an email to the Controller or, where applicable, to the Data Protection Officer at
[email protected], requesting the relevant form for exercising the chosen right. Optionally, you may contact the competent supervisory authority for further information about your rights. Please remember to enclose a copy of a document that allows us to identify you.
