PRIVACY POLICY

This Privacy Policy describe the processing of your personal data conducted by the company, “NORTIA AGRICULTURAL, S.A.” (hereafter “DEHESA EL MOLINILLO”), through the Internet portal: https://dehesaelmolinillo.com (hereafter the “Website”).

WHO IS THE CONTROLLER?

• Identity: NORTIA AGRICULTURAL, S.A.
• Tax code: A-28196855
• Address: Carretera CM-4017, km 50 – Finca el Molinillo, 13194, Retuerta del Bullaque, Ciudad Real, Spain.
• Email: protecciondatos@nortia.com

WHICH PERSONAL DATA DO WE PROCESS?

1. Personal data that you provide.  Generally, the personal information that you provide (through the purchase form on the Website or if you contact our customer services) is: your full name, address, national identity document number, date of birth, address, email and contact phone number.
   In this same regard, the aforementioned personal data is compulsory to attend to your request, as refusing to provide it would make it impossible to attend to it and, if applicable, provide the services requested.
   In the event you provide third-party data, you declare that you have their consent and you shall pass on the information contained in this clause, and shall exempt DEHESA EL MOLINILLO from any responsibility. In any event, DEHESA EL MOLINILLO may carry out periodical verifications to verify this fact, adopting the corresponding measures of due diligence in accordance with the applicable standards.

2. Personal data that we collect. The Website use cookies (and/or similar technologies) so, depending on your configuration for these, DEHESA EL MOLINILLO may gather and process personal data.

   Generally, we collect and store limited personal information and anonymous global statistics from all Users that visit our Website, either because they actively provide this information or are simply browsing our Websites. The information that we gather includes the Internet Protocol (IP) address of the device you are using, the browser you use, the operating system, the date and time of access, the Internet address of the website through which you access our Website and also information on how you use our Website

   For further information on cookie (and/or similar technologies) use and settings, please consult our Cookies Policy.

    

   The Website use cookies (and/or similar technologies) so, depending on your configuration for these, DEHESA EL MOLINILLO may gather and process personal data.

FOR WHAT PURPOSES?

DEHESA EL MOLINILLO processes your personal data for the following purposes:

1. In the event you request information through the contact form provided for this purpose or you contact our customer services, to process and attend to your request, and to provide the best service possible;
2. In the event you acquire any product through the online shop, to process your order, and to manage the payment and shipping.
3. If applicable, to transfer your data to other companies in the business group to which DEHESA EL MOLINILLO belongs, for internal administrative purposes, including the processing of personal data of Customers;
4. Depending on your configuration on cookie use, to carry out statistical analysis and draw up profiles based on your browsing habits.

LAWFUL BASIS

The lawful basis for processing your personal data, depending on the purposes described above, is as follows:

1. In the event you request information through the contact form or you contact our customer services: fulfilling our contractual relationship with you, or the adoption of precontractual measures if you are not yet a Customer;
2. In the event you acquire any product through the online shop: fulfilling our contractual relationship with you;
3. If applicable, the basis is our legitimate interest to communicate your data to other companies in the group to which DEHESA EL MOLINILLO belongs; and
4. If applicable, your consent to carry out statistical analysis and draw up profiles based on your browsing habits.

WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

In general, DEHESA EL MOLINILLO does not communicate your personal data to third parties, except in the following cases:

1. to authorities and competent bodies, courts, tribunals or any other third parties authorised in accordance with the applicable regulations;
2. to other companies in the business group to which DEHESA EL MOLINILLO belongs, for internal administrative purposes, including the processing of personal data of Customers.
3. Finally, to all other companies that require the data for the purpose of providing services for DEHESA EL MOLINILLO, in their capacity as data processor (e.g. services of virtual infrastructure, cloud computing, etc.).

Note that some of these suppliers may process and store personal information on servers located outside of your country of residence.

Therefore, depending on the User’s location, data may be transferred to other countries. In such cases, your personal data may be transferred internationally to third parties located outside of the European Economic Area (EEA), provided DEHESA EL MOLINILLO has the authority to do so and subject to compliance with the appropriate guarantees established in Articles 44 to 50 of the GDPR. Such third parties shall only access the data to provide their services in the name of and representing DEHESA EL MOLINILLO, under the obligation of confidentiality and always following their instructions. At no time may they use this data for their own and/or unauthorised purposes.

In any event, the appropriate guarantees include, among others, in order of preference of DEHESA EL MOLINILLO:

• Adequacy decision: declaration by the European Commission that a non-EU State offers a satisfactory level of data protection and equivalent to that provided by European data protection legislation, therefore the international transfer of data to a third party established in that non-EU State is possible;
• Binding Corporate Rules: these are applicable to business groups or joint ventures dedicated to a joint economic activity, and facilitate the flow of personal data based on self-regulation that is accepted and undertaken by each of the signatories;
• Standard Contractual Clauses: this is a mechanism signed between the exporter of the personal data from any of the countries in the EEA and a third country. It is a contractual agreement for which a model has been approved and published by the European Commission, in line with the provisions of the GDPR.
• Code of conduct or a certification mechanism, in conjunction with binding, enforceable commitments assumed by the recipient regarding the application of appropriate guarantees to protect the data transferred.In the absence of the above, your personal data may in rare cases be transferred to a third country or international organisation, pursuant to the mechanisms that may be recognised on the matter in the data protection legislation.

DEHESA EL MOLINILLO, in order of preference, shall make international transfers under the following guarantees:

HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

DEHESA EL MOLINILLO shall keep your personal data to attend to and/or provide the services requested (provided you do not request its deletion or opposition through the media indicated in section “YOUR RIGHTS”) and it shall keep it for the limitation periods necessary according to the applicable legislation in each case to attend to future responsibilities. After the legal limitation periods, your personal data will be destroyed.

Nevertheless, for each case of processing, the information we will provide to you at the time this personal data is gathered will inform you of the processing periods of you respective personal data for this processing. Similarly, you are informed that we will take all reasonable measures to guarantee that your data is rectified or deleted if it is not correct.

YOUR RIGHTS

At any time, you may exercise a number of rights with respect to the processing of your personal data. These rights are inherent to each interested party and therefore cannot be renounced. They are the following:

• Right to access: the right to access your personal data processed by DEHESA EL MOLINILLO, as data controller in accordance with Article 15 of the GDPR.
• Right to rectify: the right to request that DEHESA EL MOLINILLO, as data controller, rectify certain personal data of the interested party in accordance with Article 16 of the GDPR.
• Right to oppose: the right to oppose processing that is based on consent or the existence of a legitimate interest (including, but not limited to sending commercial communications) in accordance with Article 21.2 of the GDPR.

In cases in which the processing is based on the existence of a legitimate interest, the interested parties shall have right to request the balancing report drawn up by the data controller. In addition, in cases in which the processing has the purpose of sending their own or third-party advertising information, you may sign up to the voluntary, free of charge advertising opt-out mechanism (you can find more information here: https://www.listarobinson.es/).

• Right to deletion: the right to request that DEHESA EL MOLINILLO, as data controller, delete all or part of your personal data in accordance with Article 17 of the GDPR. Remember that, while our commercial and/or contractual relationship with you continues to be valid, there is certain personal data that we must process to fulfil the contract, so while this remains in effect we cannot delete, block or cancel it, as this would prevent us from fulfilling the contract.

These rights may be exercised by writing to the address of the data controller or to this address: protecciondatos@nortia.com, where you can obtain additional information on the processing of your personal data.

We will attend to your request as soon as possible and in any event, within the established legal limit. Similarly, you may withdraw your consent at any time via the email address: protecciondatos@nortia.com, and this withdrawal shall never, under any circumstances, affect the guarantee of proper management of the trade relationship.

In the event you feel that we have processed your personal data improperly and in breach of the personal data protection regulations, or you are not in agreement with the manner in which we have attended to the exercising of your rights, you may at any time lodge a complaint before the corresponding Control Authority (in the case of Spain, the Spanish Data Protection Agency).

In any event, before initiating any complaint, we ask that you contact us at protecciondatos@nortia.com or to the postal address of DEHESA EL MOLINILLO indicated in this Policy, with the aim of attempting to resolve any discrepancies amicably.

Finally, remember that you are responsible for every piece of personal data that you provide to us, and whether it is true, inaccurate, up to date, valid and authentic, including your consent for it to be used and/or processed. Similarly, you are responsible for the third-party data that you provide and with respect to this you shall obtain consent once you have communicated the content of this Policy, as we do not have direct contact with this third party. Please remember that you are responsible for periodically consulting this Policy and its updates.

LINKS

This Website may include, show or deploy links to other web pages for your convenience and information. These websites may operate independently of us. It is possible that these pages with links have their own privacy policies; we strongly recommended that you read them when you visit them. As the websites with links that you visit are not owned by us nor under our control, we are not responsible for the content of such websites, their use or their privacy practices.

UPDATING

This Policy may be updated periodically to reflect changes in our personal data processing. We will publish a notification on the Website to notify you of any significant changes to our Policy and we will indicate at the bottom when the Policy was last updated.

Last update: April 2024