Privacy Policy

1. INFORMATION FOR THE USER

Who is responsible for the processing of your personal data?

ZELATUN, S.A. is the RESPONSIBLE PARTY for the processing of the USER's personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).

Why do we process your personal data?
To maintain a commercial relationship with the user. The operations planned to carry out the processing are:

• Sending commercial advertising communications by email, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that makes it possible to carry out commercial communications. These communications will be made by the RESPONSIBLE PARTY and will relate to its products and services, or those of its collaborators or suppliers, with which it has reached a promotional agreement. In this case, third parties will never have access to personal data.
• Conducting market research and statistical analysis.
• Processing orders, requests, responding to inquiries or any type of request made by the USER through any of the contact forms made available to them on the RESPONSIBLE PARTY's website.
• Sending the online newsletter about news, offers and promotions in our business activity.

On what grounds can we process your personal data?
Because the processing is legitimized by Article 6 of the GDPR as follows:

• With the USER's consent: sending commercial communications and the newsletter.
• By legitimate interest of the RESPONSIBLE PARTY: conducting market research, statistical analysis, etc. and processing orders, requests, etc. at the USER's request.

For how long will we keep your personal data?
The data will be kept for no longer than necessary to maintain the purpose of the processing or until there are legal prescriptions that dictate its custody, and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the anonymization of the data or its total destruction.

To whom do we provide your personal data?
No communication of personal data to third parties is planned unless, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the RESPONSIBLE PARTY has signed the confidentiality and data processor contracts required by current privacy regulations.

What are your rights?
The rights available to the USER are:

• Right to withdraw consent at any time.
• Right of access, rectification, portability and deletion of your data, and of limitation or opposition to its processing.
• Right to file a complaint with the supervisory authority (avpd.euskadi.eus) if you consider that the processing does not comply with current regulations.

Contact details to exercise your rights:
ZELATUN, S.A.. Urreta Bailara, 10 - 20495 Albiztur (Gipuzkoa). E-mail: cipri@zelatun.com.

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

USERS, by checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data is necessary for the provider to attend to their request, with the inclusion of data in the remaining fields being voluntary. The USER guarantees that the personal data provided to the RESPONSIBLE PARTY is truthful and is responsible for communicating any modifications thereof.

The RESPONSIBLE PARTY informs that all data requested through the website is mandatory, as it is necessary for the provision of optimal service to the USER. In the event that not all data is provided, there is no guarantee that the information and services provided will be completely suited to your needs.

3. SECURITY MEASURES

In accordance with the provisions of current regulations on the protection of personal data, the RESPONSIBLE PARTY is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The RESPONSIBLE PARTY guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and LOPDGDD in order to protect the rights and freedoms of USERS and has communicated the appropriate information to them so that they can exercise them.

For more information on privacy guarantees, you can contact the RESPONSIBLE PARTY through ZELATUN, S.A.. Urreta Bailara, 10 - 20495 Albiztur (Gipuzkoa). E-mail: cipri@zelatun.com