The name of this web domain is property of GALLETAS ARTIACH, SAU. (Hereinafter “ARTIACH”)

PRIVACY AND PERSONAL DATA PROTECTION POLICY

ARTIACH undertakes to follow legislation currently in force on protecting personal data.

ARTIACH, as the holder of personal data collected, guarantees that it will confidentially process the personal data that may be provided to ARTIACH by the users of this portal or when interacting with official ARTIACH profiles on social media, through ARTIACH services or promotions or by any other means.

ARTIACH has adopted the technical measures necessary to maintain the required level of security, consistent with the nature of the personal data processed and the circumstances of processing, with the goal of preventing alteration, loss or unauthorised processing or access, to the degree possible and consistent with the state of the technology.

Below, in keeping with the provisions of personal data protection regulations, you are informed of the terms and conditions of data processing conducted by ARTIACH.

1. CONTROLLER OF YOUR PERSONAL DATA

• Legal name: Galletas Artiach, S.A.U.
• Registered address: 48410 Orozco (Vizcaya), Barrio Bengoechea núm. 20
• Tax ID: A-64929250
• Tel.: 900 202 106
• E-mail: protecciondedatos@artiach.es

2. PURPOSES AND LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA

In compliance with the provisions of Regulation EU 2016/679, on General Data Protection (hereinafter, GDPR), ARTIACH informs you that the processing of personal data you may provide to us may be undertaken to achieve all or some of the following purposes, as will be indicated to you in each case:

I. Advertising, information about ARTIACH’s products and services or, if applicable, to manage promotions: Your personal data will be processed with the purpose of providing you information about ARTIACH’s products and services or, if applicable, to manage promotions.

The lawful basis for processing your personal data for this purpose is your consent.

II. Answering your queries and requests: Your queries and requests made via email, post or phone to any of the contact channels listed in the “Contact” section of the website will be answered.

The lawful basis for processing your personal data for this purpose is your consent.

III. Commercial, precontractual and contractual purposes: In the event that you contract or are going to contract any of our products or services, your personal data will be processed for the purposes of managing our relationship with you.

The lawful basis for processing your personal data for this purpose is the fulfilment of a contract or the application of precontractual measures.

IV. Managing the Internal Information Channel: Your data will be processed within the framework of the company’s Internal Information Channel procedure.

The lawful basis for processing your data for this purpose is the legal obligation set out in Art. 6.1c) of Regulation (EU) 2016/679 of the European Parliament and of the Council and Act 2/2023, dated 20 February, regulating the protection of persons who report legal violations and the fight against corruption.

V. Transfer of data to third parties: Your personal data may be transferred to third parties for commercial purposes. You can find more information about the recipients of your personal data in point 3 of this Privacy Policy.

The lawful basis for processing your personal data for this purpose is your consent.

VI. Statistical purposes: Using the responses to questionnaires completed by users, we may conduct statistical analysis for internal use regarding, for example and for illustrative purposes, the age ranges of participants in certain promotions, the frequency of participation in promotions, geographical area, etc.

The lawful basis for processing your data for this purpose is the legitimate interest of ARTIACH in analysing the market in order to improve its products and services.

VII. Conducting surveys: Your personal data will be processed in order to conduct quality surveys with you about our products and services.

The lawful basis for processing your personal data for this purpose is the legitimate interest of ARTIACH in ensuring the quality of its products and services.

VIII. Managing user accounts: In the event that you decide to register as a user with any of our websites, we will need to process your data to identify the user and in turn be able to grant access to the website’s various features, products and services that would be available to you as a registered user. You may cancel your account at any time in the exercise of your right of erasure and by following the guidelines set out in point number 5 of this Privacy Policy.

The lawful basis for processing your personal data for this purpose is your consent.

IX. Video surveillance: the processing of personal data captured by surveillance cameras is done for the purpose of ensuring the safety and security of the facilities, property and people.

The lawful basis for the processing of your personal data for this purpose is ARTIACH’s legitimate interest in avoiding financial or reputational harms.

3. TRANSFER OF DATA

Personal data processed by ARTIACH for the purposes detailed above may by transferred (except video surveillance footage) following consent of the person concerned to the other businesses in the ADAM FOODS Group:

• LP FOODIES, S.A.U. Sociedad Unipersonal (Tax ID: A-08009359). https://www.lapiara.com/en/privacy-policy/
• GRANJA SAN FRANCISCO, S.L.U. Sociedad Unipersonal (Tax ID: B-55216758). https://www.granjasanfrancisco.com/es/politica-privacidad-proteccion-datos-personales/
• CUETARA S.L.U. Sociedad Unipersonal (Tax ID: B-87127676).https://www.cuetara.es/politica-privacidad
• TRIGORICO, S.L.U. Sociedad Unipersonal (Tax ID: B-87438750).https://www.panpanrico.es/politica-de-privacidad/

4. INTERNATIONAL DATA TRANSFER AND RECIPIENTS

The data collected by ARTIACH may be transferred to data processors and, when required by law, to public administrations and bodies. In this sense, personal data may be communicated to State Security Forces and Bodies and/or Courts. Under no circumstances will international data transfers be performed.

5. DATA STORAGE PERIOD

Your personal data will be stored as long as they are needed to achieve the purposes described herein and as long as you do not withdraw your consent if applicable, or unless you exercise your rights of opposition or deletion, or you withdraw from the commercial communications service. Once one of these circumstances applies, ARTIACH will keep your data duly frozen for the amount of time necessary to fulfil its legal or regulatory requirements for the applicable prescription periods set out in relevant law, if needed.

Once the respective storage period has elapsed, ARTIACH will delete the data as long as the data need not be preserved for other purposes for which those data may be necessary.

Footage obtained from video surveillance cameras will be delated after thirty (30) days following recording unless the footage must be submitted to State Security Forces and Bodies or to the Courts because it provides a record of a possible crime or another sort of violation.

6. EXERCISING YOUR DATA PROTECTION RIGHTS

Data protection regulations grant you a series of rights regarding the processing of personal data that can be summarised as:

Accessing your data: the right to access and know if we are processing your personal data, the right to access them and request information about how and why we are processing them and, if applicable, request a copy of these data.

Request the rectification or deletion of your data: he right to rectify the personal data we are processing and that you consider inaccurate, or also the right to request the deletion of such data at such time when they may no longer be necessary for the established purposes.

Request the limitation of processing of your data: the right to request limitations on how we process your personal data. We inform you that, in this case, we would keep your data duly frozen and that we would only use them for the exercise and defence of claims, for the reasons that you may give us consent for or to meet legal and contractual responsibilities.

Portability:You will be able to obtain an electronic copy of the data that are being processed, as well as request that they be transmitted to another entity.

Object to the processing of your data: under certain circumstances and for reasons related to your specific situation, you will have the right to object to the processing of your data. In that case, we would stop processing them except where may be necessary for legitimate reasons in the exercise or defence of possible claims.

Users may exercise their rights by sending the appropriate request to the e-mail address or postal address provided at the bottom of each form or, if these are absent, to the following postal or e-mail address:

Grupo ADAM FOODS, Travesera de Gracia, núm. 342, 08025 Barcelona, providing the following reference information on the envelope: REF: Personal Data/Datos Personales (GALLETAS ARTIACH, S.A.U.), or by sending a message to the following e-mail address protecciondedatos@artiach.es, clearly stating the right you wish to exercise.

In the event that consent has been granted for a specific purpose, you have the right to withdraw consent at any time, without this affecting the lawfulness of processing based on that consent prior to its withdrawal.

If you believe there is an issue with the way that ARTIACH is processing your data, you may lodge a claim with the Spanish data protection body, the Agencia Española de Protección de Datos, on its website: www.agpd.es

7. USE OF COOKIES AND TRACKING BROWSING BEHAVIOUR

To see information on this point, we are providing you with the Cookie Policy of this website

https://www.artiach.es/en/cookies-policy

8. MODIFICATIONS TO THIS POLICY

We may modify this Privacy and Personal Data Protection Policy and, if we introduce any significant change, we will advise you through our websites or by other means, and you will have the right to review these changes before they take effect. If you disagree with any change, you may exercise your rights or manage your consents.

The continued use of our websites after publishing or sending a notice about our changes to this Privacy and Personal Data Policy means that the collection, use and shared use of your personal data are subject to the updated Privacy and Personal Data Policy.

Last updated: 19 September 2024