Privacy Policy

The personal data that the user may provide:

Name, address and date of birth.

Telephone number and e-mail address.

Location.

Information on payments and refunds.

IP address, date and time that you accessed our services, the internet browser you are using and the details of your device’s operating system.

Any other information or data you choose to share with us.

In some cases, it is compulsory to complete the registration form in order to access and enjoy certain services offered on the website; likewise, failure to provide the personal data requested or failure to accept this data protection policy means that you will not be able to subscribe, register or participate in any of the promotions in which personal data is requested.

Why and for what purpose do we process your data?

ELAIA AGRO S.L. processes the information provided by persons concerned for the following purposes:

Manage orders or contract any of our services, either online or at the company’s physical premises.

Manage the sending of the information that you request from us.

Develop commercial actions and carry out the maintenance and management of the relationship with the user, as well as the management of the services offered through the website and information tasks, being able to carry out automatic assessments, profiling and customer segmentation tasks with the aim of personalising data processing in accordance with its characteristics and needs and improving the customer’s online experience.

Develop and manage any competitions, prize draws or other promotional activities that may be organised.

In some cases it will be necessary to provide information to authorities or third-party companies for auditing purposes, as well as to handle personal data from invoices, contracts and documents in order to respond to customer or government requests.

We inform you that the personal data obtained as a result of your registration as a user will form part of the Record of Processing Activities and Operations (RAT, Spanish acronym), which will be updated periodically in accordance with the provisions of the GDPR.

What are the legal grounds for the processing of your data?

The processing of your data can be based on the following legal grounds:

Consent of the data subject for the contracting of services and products, for contact forms, requests for information or registration in e-newsletters.

Legitimate interest for the processing of our customers’ data for direct marketing purposes and the express consent of the data subject for all matters relating to automatic assessments and profiling.

Compliance with legal obligations for fraud prevention, communication with public authorities and third-party requests.

The data processed for the purposes described will be kept for the time necessary to fulfil the purpose for which it was collected (for example, for the duration of the commercial relationship), as well as for the fulfilment of the legal obligations arising from the processing of the data.

ELAIA AGRO S.L. does not intend to share your personal data with any third party, except in circumstances where it is required by law.

In some cases, only when necessary, ELAIA AGRO S.L. will provide user data to third parties, with the exception of the other companies in the group. However, the data will never be sold to third parties. External service providers (e.g. payment providers or delivery companies) with whom ELAIA AGRO S.L. works, may use the data to provide the relevant services, however, they will not use such information for their own purposes or transfer it to third parties.

ELAIA AGRO S.L. seeks to ensure the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have adequate measures in place to protect personal data. These third parties are obliged to ensure that the information is processed in accordance with data privacy regulations.

In some cases, personal data may be required by law to be disclosed to public bodies or other parties, but it will only be disclosed where such disclosure is strictly necessary for the fulfilment of said legal obligations.

The personal data obtained may also be shared with other companies of the group.

Where is your data stored?

In general, the data are stored within the EU. For data sent to third parties outside the EU, we will ensure that they offer a sufficient level of protection, either because they have Binding Corporate Rules (BCRs) or because they have signed up to the Privacy Shield.

What rights do you have and how can you exercise them?

You can send your communications and exercise your rights by sending a request to the following e-mail address: rgpd@grupoelaia.com

Under the provisions of the GDPR, you can request:

• Right of access: you may request information about the personal data we hold about you.
• Right of rectification: you can communicate any change in your personal data.
• Right to erasure and the right to be forgotten: you can request the deletion of your personal data after it has been blocked.
• Right to restrict processing: this entails the restriction of the processing of personal data.
• Right to object: you can withdraw your consent to the processing of your data by objecting to further processing.