Privacy Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you about the processing of personal data that you provide to us through our website.

DATA CONTROLLER

The data controller responsible for processing your personal information is ALCALÁ OLIVA S.A., C.I.F A23359896. Address: Carretera A339, KM50, 23680, Alcalá la Real (Jaén). Telephone: 953581017, e-mail: info@alcalaoliva.com

PURPOSE OF DATA PROCESSING

Depending on how you interact with us through the website and the relationship established, your personal data will be processed for the following purposes:

  • User Registration: The data provided through the registration form will be processed to create and manage your user account. This allows you to save your details for future purchases, speed up the checkout process, and access your order history and tracking information.
  • Purchase Form: The data you provide through the purchase form will be processed to fulfil and manage the sales contract established with you. This includes processing your order, handling billing, payment and shipping, and maintaining contact with you to send relevant information about the purchased products or services – including satisfaction surveys related to them or to the quality of our customer service.
  • Management of Possible Returns.
  • Contact Forms: The information you provide through any contact form available on the website will be used solely to respond to your inquiry and communicate with you.
  • Subscription to Our Newsletter: If you subscribe to our newsletter, your data will be used to send information about our products, services, and promotions by any means, including electronic communications. Please note that we may analyse user engagement with our campaigns (such as opening rates or link clicks) to better understand the effectiveness of our communications.

LEGAL BASIS FOR PROCESSING YOUR DATA

  • Online Purchase (Order): The processing of your data is based on the performance of the sales contract.
  • User Registration, Newsletter Subscription, or Contact Form Submission: The lawful basis for processing your data is your consent, voluntarily given when you subscribe to the newsletter, register, or submit us a query. You may withdraw your consent at any time.

DATA RETENTION PERIOD

The data provided for the purpose of making purchases will be retained for the duration of the contractual or commercial relationship established, and subsequently for the period required by law to address any potential liabilities arising from that relationship.

Data relating to payments and invoicing will be retained for the periods established under applicable accounting, tax, and commercial regulations.

In cases where the processing is based on consent (such as newsletter subscription, inquiries, or user registration), data will be retained until you withdraw your consent. Once consent is withdrawn, your data will be duly blocked for the period during which any potential liabilities related to the processing may arise, in accordance with current legislation.

DATA DISCLOSURE

To fulfil the established relationship and the purposes described, your data may be shared with certain third parties such as financial institutions, logistics and transport providers, technical service providers, and others, as well as in cases where such disclosure is required by law.

INTERNATIONAL DATA TRANSFERS

For the distribution of our promotional emails and newsletters, we use the Mailchimp platform, operated by The Rocket Science Group LLC d/b/a Mailchimp. This company is based in the United States, which implies that an international data transfer takes place. We inform you that The Rocket Science Group LLC d/b/a Mailchimp provides adequate data protection, as it adopted the Standard Contractual Clauses approved by the European Commission’s Decision 2010/87/EU.

SOCIAL NETWORKS

This website includes links to social media profiles operated by ALCALÁ OLIVA S.A. If you choose to follow us on these platforms, please note that your data will be processed in accordance with the terms and conditions, privacy policies, and access levels of each respective social network. We will process your data to manage our list of followers and to share updates, news, and activities related to ALCALÁ OLIVA S.A. through these platforms. This processing will continue only while you remain a follower or maintain interaction with our profiles.

RIGHTS OF ACCESS, RECTIFICATION, ERASURE, RESTRICTION, OBJECTION, AND PORTABILITY

You may exercise your rights of access, rectification, erasure, restriction, and objection by sending an email with the subject line “data protection” or by written request to the following address: Carretera A339, KM50, 23680, Alcalá la Real (Jaén), Spain, attaching proof of your identity in all cases. Where processing is based on consent or on a contract (or pre-contractual measures) and carried out by automated means, you also have the right to data portability – that is, to receive your data in a structured, commonly used, and machine-readable format, or to have it transmitted to another data controller.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

If you believe that your data protection rights have been violated, you may lodge a complaint with the competent Supervisory Authority, particularly if you are not satisfied with the response received when exercising your rights. In Spain, this authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos) located at C/Jorge Juan nº 6, 28001 Madrid, or electronically via their website: www.agpd.es

INFORMATION ON THE EXERCISE OF RIGHTS OF DATA SUBJECTS

ALCALÁ OLIVA S.A. will facilitate the exercise of your rights upon request, in accordance with Articles 15 and following of the European General Data Protection Regulation (GDPR).

The exercise of these rights is personal and must be requested by the data subject themselves. In the case of minors or legally incapacitated persons, the request must be made by their legal representative.

These rights may also be exercised through voluntary representation, provided that the identity of the represented person and the authorization of the representative are duly verified.

We have prepared a template for submitting requests to exercise your rights, which is provided below: view template