Privacy Policy

In compliance with the General Data Protection Regulation, we inform you of the following:

1. Data controller. Who will process your data?

QUESOS REVILLA S.L.

2. Purpose. What will your data be used for?

2.1. If you access our premises, to ensure security through video surveillance.

2.2. If you exercise a right related to data protection: To manage the obligations of attending to the exercise of rights related to the data protection of individuals.

2.3. If you are notified of a security breach: to manage and assess any security breaches that occur.

2.4. If you send your CV to participate in selection processes: To manage job candidates through selection processes.

2.5. If you have a business or administrative relationship with us: If you are a party to a contract as a self-employed person or a natural person, to manage the service you have contracted. If, as a party to a contract, you are a representative or contact person for a legal entity, the purpose is to maintain contact with the entity you represent or work for.

2.6. If you are a natural person or a contact person for a legal entity or an individual entrepreneur, to manage commercial and marketing activities.

3. Retention periods or criteria. How long will we keep your data?

3.1. If you visit or access our centres and we record your image: the data is deleted one month after it is captured by erasing the image, except for recordings related to criminal or administrative offences in the field of public safety, an ongoing police investigation or open judicial or administrative proceedings.

3.2. If you exercise a right related to data protection: it will be retained for three years from the end of the processing of the right. Statute of limitations for very serious offences (Draft Organic Law on Data Protection, Article 72).

3.3. If you are notified of a security breach: they will be kept for three years from the end of the processing of the right. Statute of limitations for very serious offences (Draft Organic Law on Data Protection, Article 72)

3.4. If you send your CV to participate in selection processes: for the time necessary to fulfil the purpose for which they were collected and to determine possible liabilities and deal with any claims that may be brought against the entity in the future, and in the case of retaining your data for subsequent selection processes, provided that you do not request its deletion.

3.5. If you have a business or administrative relationship with us: if you are a party to a contract and are self-employed or a natural person, the data will be kept for the time necessary to fulfil the purpose for which it was collected and to determine possible liabilities and deal with any claims that may be brought against the entity in the future. If you are a representative or contact person for a legal entity, for as long as you maintain your representation or professional position or unless you request its deletion.

3.6. If you are a contact person for a legal entity or an individual entrepreneur and the legal entity or your company is the recipient of our commercial offers, we will keep your data for as long as you do not exercise your right to object.

4. Legitimacy Why are we entitled to process your personal data?

4.1. If you visit or access our offices and we record your image: our legitimacy to process the data is based on our legitimate interest as provided for in Article 9.2. f) Regulation (EU) 2016/679 General Data Protection Regulation) to carry out image processing through cameras or video cameras for the purpose of preserving the safety of persons, property and facilities, as your interests or fundamental rights and freedoms do not prevail over this interest.

4.2. If you exercise a right related to data protection: Because the processing is necessary for compliance with a legal obligation applicable to the data controller (Article 6.1.c) of Regulation (EU) 2016/679 General Data Protection Regulation).

4.3. If you are notified of a security breach: Because the processing is necessary for compliance with a legal obligation applicable to the data controller (Article 6.1.c) of Regulation (EU) 2016/679 General Data Protection Regulation).

4.4. If you send your CV to participate in selection processes: Because the processing is necessary for the implementation of pre-contractual measures (Article 6.1.b) of Regulation (EU) 2016/679 General Data Protection Regulation).

4.5. If you have a business or administrative relationship with us: If you are a party to a contract and are self-employed or a natural person, the purpose of the processing is to maintain and develop the contractual relationship. We are entitled to do so because Article 9.2.c) of Regulation (EU) 2016/679 General Data Protection Regulation allows us to do so, as it is necessary for the performance of a contract or for the implementation of pre-contractual measures at the request of the data subject. If you are a party to a contract as a representative of a legal entity or are a contact person for that legal entity, we are entitled to process your data because the processing is necessary for the satisfaction of legitimate interests pursued by the data controller or by a third party (Article 6.1.f) of Regulation (EU) 2016/679 General Data Protection Regulation).

4.6. If you are a contact person for a legal entity or an individual entrepreneur and the legal entity or your company is the recipient of our commercial offers

Because the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (Article 6.1.f) of Regulation (EU) 2016/679 General Data Protection Regulation.

5. Obligation to provide your data Why do you or do you not have an obligation to provide your data?

5.1. If you have a business or administrative relationship with us as a customer or supplier and you must sign a contract: you have an obligation to provide us with your data because it is necessary in order to carry out the contract; therefore, refusal to provide it prevents us from signing the contract.

6. To whom will your data be communicated or transferred?

6.1. If you visit or access our offices and we record your image: the data may be communicated to the State Security Forces and Corps.

6.2. If you exercise a right related to data protection: the data may be communicated to the Spanish Data Protection Agency. Compliance with a legal obligation applicable to the data controller (Article 6.1.c) of Regulation (EU) 2016/679 General Data Protection Regulation).

6.3. If you are notified of a security breach: the data will be communicated to the Spanish Data Protection Agency. Compliance with a legal obligation applicable to the data controller (Article 6.1.c) of Regulation (EU) 2016/679 General Data Protection Regulation). In addition, it may be communicated to the State Security Forces and Corps.

6.4. If you send your CV to participate in selection processes, the data will not be transferred to third parties, nor will we carry out any international transfer of data to third countries or international organisations.

6.5. If you have a business or administrative relationship with us: If you are a party to a contract and are self-employed or a natural person, the data will be sent to banks, savings banks and rural banks for the payment and collection of invoices and expenses for the fulfilment of contractual obligations. The completed tax return forms will be submitted to the Tax Agency: Law 58/2003, of 17 December, General Taxation. If you are a party to a contract as a representative of a legal entity or are a contact person for that legal entity, we will not disclose the data to third parties, unless we have a legal obligation to do so. We will not transfer the data internationally to third countries or international organisations.

6.6. If you are a contact person for a legal entity or an individual entrepreneur and the legal entity or your company is the recipient of our commercial offers. The data will not be transferred to third parties, nor will we transfer the data internationally to third countries or international organisations.

6.7. If you are interested in our products, the data will be communicated to third parties for the purpose of sending advertising communications related to the services offered by us or that you have contracted, provided that you give us your consent at the time of registration.

7. What are your rights when you provide us with your data and how can you exercise them?

7.1. Right of access: Right to obtain confirmation as to whether or not the entity is processing personal data concerning you.

7.2. Right of rectification: Right to request the modification or rectification of your data in the event that it is inaccurate.

7.3. Right of erasure: Right to request that your data be erased or deleted due to unlawful data processing, the disappearance of the purpose that motivated the processing or collection, or when you revoke your consent or object to the processing.

7.4. Right to restriction of processing: Right to restrict processing if you contest the accuracy of the data, while we verify its accuracy, or if you have exercised your right to object to the processing of data, while we verify whether the legitimate grounds of the controller override your rights.

7.5. Right to storage of your data · If the processing is unlawful and we oppose the erasure of the data, requesting the restriction of its use · If the data is needed for the establishment, exercise or defence of legal claims.

7.6. Right to data portability: In a structured, commonly used and machine-readable format, provided that it is technically possible for portability and when they have been used/processed with your consent or because of the existence of a contract.

You may exercise these rights, together with a copy of a document proving your identity, before the Data Protection Officer, whose contact details we have included in the section on this figure.

In addition, you have the right

• To revoke your consent: If the processing is based on consent, you have the right to revoke it.

• To lodge a complaint: You may contact the Data Protection Officer in any case, and you also have the right to lodge a complaint with the Spanish Data Protection Agency.