The website www.baroniadeturis.es is the property of La Baronía de Turís Coop. V. and complies with the requirements set out in Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, and current regulations on the protection of personal data and, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of individuals with regard to the processing of personal data and the free movement of such data.
Who is the DATA CONTROLLER?
The data collected or that you voluntarily provide to us through the Website, either by browsing it, as well as all those that you may provide in the contact forms, via email or telephone, will be collected and processed by the File Controller, whose details are indicated below:
If, for any reason, you wish to contact us on any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you may do so by any of the means indicated above.
When, why, who, how, for what purpose and how long do we process your personal data?
You can browse most of our websites without providing any personal information, but in some cases this information is necessary to render the electronic services you request from us.
If we need to collect personal data in order to render such service, we will process the information according to the policy outlined in this document and under the specific conditions of the particular service in question (if any), which contain specific privacy statements about the use of the data and inform you of why, for what purpose, how and how long we process your personal data and what safety measures we implement.
The collection and processing of personal data that you may provide us with is carried out by our entity or, where appropriate, its data processors. In relation to the latter case, these data processors are third parties who are contractually required to ensure that their activity complies with the law and implement appropriate safety measures to protect such data.
The personal data that we request from you, or that you provide us with as a result of browsing, are used to manage, provide and improve the services that you have requested.
For example, we will process your personal data to be able to manage the queries you send us, to be able to manage your participation in recruitment processes, to send you electronic communications if you request them, and/or to compile statistics.
To this effect, we ask you for an e-mail address when you use our contact forms on the web. We only collect the sender’s personal data which are necessary to provide him/her with an answer.
When you subscribe from our newsletters, we also ask you for an e-mail address so that we can provide you with the service. You can unsubscribe from the service whenever you wish, and we provide you with the means to do it.
How do we process your data?
We only collect personal information to the extent necessary to achieve a specific purpose. The information will not be used for a purpose incompatible with that described.
We only disclose information to third parties if it is necessary for the fulfilment of the service purpose and only to persons who need to know it. All this is done so that the service can be provided by processing your personal data with confidentiality and discretion, in accordance with current legislation.
In any case, our entity adopts safety measures to protect the data against possible misuse or unauthorised access, alteration or loss.
How long do we store your data for?
We store data only for as long as it is necessary to fulfil the purpose of collection or further processing. The period of data retention will depend on the service and the length of personal data processing will be indicated for each service.
At the end of this document we provide you with a table of specific retention periods.
For what purposes will we process your personal data?
We process your personal data for the purpose of (i) managing your purchase or service provided; (ii) maintaining the contractual and pre-contractual relationship for invoicing, preparing quotes and monitoring it, as well as sending you information by electronic means regarding your request; (iii) sending you communications on commercial information by electronic means that may be interesting for you, provided that there is express authorisation; (iv) we may prepare a commercial profile based on the information you provide in order to offer you products and services according to your interests. No automated decisions will be made based on this profile.
We process your personal data for the purpose of (i) invoicing and (ii) maintaining commercial contact, (iii) as well as sending you information by electronic means about our products or services.
– Web or e-mail contacts:
We process your personal for the purpose of (i) answering your queries and requests; (ii) managing the service requested or processing your order; (iii) sending you commercial information by electronic means that may be interesting for you, provided that there is express authorisation; (iv) we may draw up a commercial profile based on the information you provide so that we can offer you products and services in accordance with your interests. No automated decisions will be made based on this profile.
We process your personal data for the purpose of (i) answering your questions and requests, (ii) managing the requested service, answering your request or processing your orders and (iii) interacting with you and creating a community of followers.
We process your personal data for the purpose of (i) counting on you in the recruitment selection processes, (ii) summoning you for job interviews and evaluating your application, (iii) communicating your curriculum to group companies, partner companies or similar companies with the sole purpose of involving you in their selection processes, provided that you have given us your consent.
– Participants in our contests:
We process your personal data for the purpose of managing your participation in the contests that we organise as well as announcing the name of the winners of the contest and advertising the awards ceremony.
The winning participants may be photographed or videotaped and disseminated in any of the media, our website or other means of communication. Consequently, the participants’ image may be captured, recorded and/or reproduced in a way that is ancillary to the main activity.
By browsing our website we collect information about your browser, your device and data on your use of our website as well as any information you provide when using our website. Anonymously or in the aggregate, we may record the IP address (the device’s Internet access identification number, which allows devices, systems and servers to recognize and communicate with each other).
The purpose of the processing is (i) to obtain practical knowledge of how users use our website so we can improve it; (ii) to carry out statistical analyses that will help us to improve our business strategy; (iii) to carry out website performance analyses and (iv) for technical safety and system diagnostics reasons.
The data we obtain are not related to a specific user and will be stored in our databases.
In order to offer relevant information or services depending on the location of the User, we may access data relating to the geolocation of the User’s device in cases where the User setup for this purpose allows it.
The Portal may offer features for sharing content through third-party applications, such as Facebook or Twitter. These applications can collect and process information related to the user’s navigation on the different websites. Any personal information collected through these applications may be used by third party users. Their interactions are subject to the privacy policies of the companies providing the applications.
The Portal may host blogs, forums, and other applications or social media services to facilitate the exchange of knowledge and content. Any personal information the user provides may be shared with other users of that service over whom we have no control.
What are the legal grounds for processing your data?
The legal grounds for processing your data are (i) the performance of a contract and maintenance of the contractual relationship and (ii) your consent that is requested for sending products and services offers by electronic means, and under no circumstance the withdrawal of this consent will make the performance of the contract conditional.
The legal grounds for processing your data are (i) the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures.
– Web or e-mail contacts:
The legal ground for processing your data is (i) the consent of the data subject.
All our forms have a checkbox that must be ticked to access the services offered.
The purposes of the processing will be as follows:
a) Manage the queries or requests for information that you send us via the Website, e-mail or telephone.
The personal data you provide us with by this means will not be communicated to third parties, and La Baronía de Turís Coop. V. will be the only body who directly answers this kind of questions.
Los datos personales que nos facilites por este medio no serán comunicados a terceros, siendo La Baronia de Turis Coop. V. quien dé, directamente respuesta a este tipo de consultas.
The legal grounds for processing your data is the acceptance of the contractual relationship with the corresponding social media provider stated when you register in their application and in accordance with their privacy policies, which does not belong to us.
If you provide us with your curriculum vitae, either via the website, email or physically in the office or in any of the headquarters, La Baronía de Turís Coop. V. will include them in its database. The curriculum will be stored for a period of 1 year, after which, if we have not contacted you, it will be deleted.
The legal grounds for the processing will be based on the express consent given by the data subject to the processing of the data contained in the curriculum when sending it and ticking the box fitted for this purpose.
The purpose of the treatment is to include you in present and future recruitment processes of La Baronía de Turís Coop. V. or any entity belonging to the business group.
In the event that the data subject becomes an employee of La Baronía de Turís Coop. V. or any of the entities in the same group of companies, his or her data will be included into a database, in order to internally manage the work relationship between the employee and the employer.
On the website you have the option to subscribe to the Newsletter of La Baronía de Turís Coop. V. To do this, you will have to provide us with an email address where the Newsletter will be sent.
This information will be stored in a database of La Baronía de Turís Coop. V. where it will be registered until the data subject decides to unsubscribe or, if applicable, La Baronía de Turís Coop. V. stops sending it.
The legal grounds for processing these personal data is the express consent given by all the data subjects who subscribe to this service by ticking the box fitted for this purpose.
The data in the e-mails will only be processed and stored to manage the sending of the Newsletter by the users who request it.
– Participants in our contests
Personal data collected will not be disclosed to third parties.
To which recipients will your data be communicated?
Your data will not be disclosed on to third parties unrelated to the service we provide, unless provided by law. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial institutions in order to charge for the service provided or product purchased.
Your data may also be communicated to our service providers, when necessary, for the performance of the contract. In such cases, the data processor has contractually undertaken to use the data only for the purpose justifying the processing and to maintain adequate safety measures.
What safety measures do we apply?
You can rest assured that we have taken appropriate technical and organisational measures to guarantee the confidentiality, integrity and availability of the processing of your personal data that we carry out, in particular those that prevent the loss, misuse, alteration, unauthorised access and theft of personal data.
What are your rights when you provide us with your data?
You may exercise your rights to access, rectification, erasure, portability, restriction or objection to the processing of your data, including the right to withdraw your consent, as detailed below:
Right to access: You can ask us if we are processing your data and how.
Right to rectification: You can ask us to update your personal data if they are incorrect and delete them if you wish.
Right to restriction of processing: In these case data will only be stored for the exercise or defence of claims.
Right to object: Following your request to object processing, we will no longer process the data in the manner you have indicated, unless for compelling legitimate grounds or the exercise or defence of possible claims it is necessary to continue processing.
Right to data portability: In case you want your data to be processed by another company, your data will be transmitted to the new controller.
Right to erasure: You may request that we erase your data when they are no longer needed for processing, you withdraw your consent, the data have been unlawfully processed or there is a legal obligation to do so. We will analyse the situation and apply the law.
If you need further information about what rights are granted to you by law and how to exercise them, we recommend you to contact the Spanish Data Protection Agency, which is the supervisory authority on data protection.
You may address the Data Protection Officer before filing a complaint against the data controller with the AEPD.
If we have not served you properly when exercising your rights, you may file a complaint with the Spanish Data Protection Agency.
We have forms for the exercise of rights that can be requested at the above-mentioned e-mail address; you can also use those prepared by the Spanish Data Protection Agency or those of third parties. These forms must be electronically signed or complemented by a photocopy of your ID card. If you act through a representative in the same way, it must be complemented by a copy of your ID card or electronically signed.
Forms must be submitted in person or sent by post or e-mail to the addresses listed in the “Data Controller” section.
The maximum time limit for a decision is one month from the date of receipt of your application.
How long will we keep your data for?
Personal data will be kept for as long as you have a relationship with us.
At the end of this period, the personal data processed for each of the indicated purposes will be kept for the periods provided for by law. If no such legal period exists, data will be kept until the data subject requests its erasure or withdraws the consent given, or for as long as a judge or court may require it regarding the statute of limitations for legal actions.
For each processing or type of data, we provide a specific period, which can be consulted in the following table:
|Human Resources||Payrolls, TC1, TC2, etc.||10 years|
|Curriculum vitae||Until the end of the recruitment process, and 1 more year with your consent|
|Work contracts.Data of temporary employees.||4 years|
|Employees’ files.||5 years after termination.|
|Marketing||Databases or web visitors.||As long as the processing lasts.|
|Access control and video surveillance||Visitors’ list||30 days|
|Videos||30 days – blocking|
3 years – disposal
|Accounting||Accounting books and documents.||6 years|
|Taxes||Running the administration of the company, rights and obligations relating to the payment of taxes.||10 years|
|Health and Safety||Employees’ Medical Records||5 years|
|Insurances||Insurance policies||6 years (rgeneral rule)|
2 years (damages)
|Purchases||Registration of all supplies of goods or services, intra-Community acquisitions, imports and exports for VAT purposes.||5 years|
|Organic Law for Data Protection||Processing of personal data||3 years|
|Personal data of employees stored on the networks, computers and communications equipment used by them, access controls and internal management/administration systems||5 years|