1. Responsible entity
The responsible entity in terms of data protection laws is
SanLucar Fruit S. L.
Serra Llarga 24
46530, Puzol, Valencia, Spanien
Tel: +34 96 142 40 40
Fax: +34 96 142 41 58
lopd@sanlucar.com
2. Hosting with a web hosting package
Data processing operations are carried out on the server of the host provider for the purpose of creating and maintaining our internet offer. These include the provision and use of infrastructure, storage space and computing power as well as the use and implementation of security measures, maintenance and updates. Host processing operations include communication information (such as IP addresses, date and time of visit) from visitors to the site, customers, and users, as well as usage data, contract data, contact information, and inventory data.
Legal basis (Article 13 (1) (c) GDPR): Article 6 (1) (1) (f) GDPR, Article 28 GDPR, order for data processing contract
Legitimate interest of the person responsible in the sense of Article 6 (1) (1) (f) GDPR (Article 13 (1) (d) GDPR): The processing is based on the interest in the secure, efficient, reliable and rapid provision of our Internet offer.
Beneficiaries or categories of recipients (Article 13 (1) (e) GDPR): host provider
Duration of data storage (Article 13 (2) (a) GDPR): The data will be stored: (i) until the time of cancellation in the event of an objection; (ii) until the time of automatic deletion, which normally takes 90 days; (iii) until such time as the internet offer changes to such an extent that it is no longer consistent with the purposes for which data collection is sought. The first occurring event is decisive.
3. Anonymised data collection and processing on this website
The data collected by the server, which are transmitted to the server via your browser, are automatically stored in special files called log files. These are the following data:
• the type and version of the browser you are using,
• the type and version of the operating system you are using,
• the URL of the page from which you arrived to our website,
• the keywords you used to find our site,
• the date and time of access to our website,
• the names of the subpages you have requested,
• the IP address used for the query,
• the provider used for the query.
We collect and process this data in anonymous form, i.e. the data can be processed by us, i.e. in particular without the assistance of relevant authorities, courts or the requesting provider, in principle not be assigned to a specific person. The purpose of the data collection and processing is the evaluation for internal system-related and statistical purposes as well as in case of misuse (e.g. criminal offenses) for purposes of investigation and prosecution and prosecution by competent authorities as well as for asserting civil claims.
Legal basis (Article 13 (1) (c) GDPR): Article 6 (1) (1) (f) GDPR, Article 28 GDPR, order for data processing contract.
Legitimate interest of the person responsible in the sense of Article 6 (1) (1) (f) GDPR (Art. 13 (1) (d) GDPR): The processing is based on the interest of the controller in obtaining information for the improvement and optimisation of the Internet offer and to facilitate the prosecution of abusive behaviour.
Duration of data storage (Article 13 (2) (a) GDPR): Data are stored: (i) up to 90 days; (ii) until the date of cancellation on the occasion of an objection; (iii) in the case of the relevance of the data as evidence until the conclusion of a similar procedure. In the cases referred to in i and ii, the first occurring event is decisive.
4. Cookies
We use what are known as “cookies” for our websites. Cookies are small text files that are stored on your computer when you visit our website and stored by your browser. With the aid of cookies, our server can recognise your browser, your individual settings in our website (e.g. language, font size, design) and, if necessary, parts of the login data in encrypted form, thus making it easier for you to use our pages and, if necessary, enable automatic login. Cookies are also used to analyse the use of our Internet offer in terms of page usage behaviours (how often and how long which pages have been accessed) to optimise our website and make it user-friendly. Cookies allow the server of our website to recognise the calling browser after going to a different page. The data stored in cookies may affect:
– login data,
– articles in a shopping cart or order overview,
– procedural status regarding an order or reservation process,
– identification number for the usage process, so-called session ID – English session identifier,
– reference to the use of cookies on the website, the so-called cookie banner.
Your browser settings allow you to reject cookies, delete cookies from your computer, block cookies or request them before setting a cookie. When you visit the website, you will be informed by a cookie banner that this website uses cookies, referring to this Privacy Policy.
Legal basis (Article 13 (1) (c) GDPR): Article 6 (1) (1) (f) GDPR, Article 28 GDPR, order for data processing contract.
Legitimate interest of the controller within the meaning of Article 6 (1) (1) (f) GDPR (Article 13 (1) (d) GDPR): processing is based on the controller’s interest in improving the speed, efficiency and user-friendliness of the Internet offer. As far as cookies are used for analysis purposes, this is done for the purpose of optimizing our Internet offer and to improve the user-friendliness.
Duration of data storage (Article 13 (2) (a) GDPR): the storage of cookies on the device of the user and continues until the cookies have been deleted or overwritten.
5. Use and disclosure of personal data for contractual purposes
Personal data, insofar as these are required for the establishment, content or modification of a contractual relationship (inventory data), are collected and processed solely to answer your inquiries, to process contracts concluded with you and for technical administration. The processing of your personal data involves the storage, modification, transmission, blocking and deletion of this data. Your personal data will only be disclosed or otherwise transmitted to third parties if this is necessary for the purpose of contract execution – in particular transfer of order data to suppliers, the shipping company commissioned with the delivery and the bank responsible for the payment processing – this is required for billing purposes or you previously agreed. In these cases, however, the amount of data transmitted is limited to the minimum required.
The provision of personal data is basically neither legally nor contractually required but required for the conclusion of the contract. You are not required to provide personal information. The non-provision of personal data necessary for the conclusion of the contract has the consequence that the contract cannot be concluded and an exchange of services cannot take place.
Legal basis (Article 13 (1) (c) GDPR): Article 6 (1) (1) (a), (b) and (c) GDPR, Art. 28 GDPR, order for data processing contract
Beneficiaries or categories of recipients (Article 13 (1) (d) GDPR): Host providers, suppliers, subcontractors, external service or contractors, mail order companies, third parties involved in payment processing, credit institutions
Duration of data storage (Article 13 (2) (a) GDPR): The data are stored (i) until the time of cancellation in the event of a revocation; (ii) until the date of cancellation on the occasion of a revocation; (iii) if storage is no longer required to fulfil the purpose for which it was stored; (iv) until the end of a legally required storage or retention period; (v) until the expiration of contractual or statutory warranty and guarantee periods. Unless there is a case under iv or v, in the case of i to iii, the event that occurs first is authoritative. In the case of iv and v, the deletion takes place when the later occurring event occurs.
6. Contact form
Our internet offer includes the possibility to contact us via a contact form. If you use it, the entered data will be saved on the server. The data deals with:
– Title, name,
– Companies,
– E-mail address,
– Telephone number,
– Text of the message addressed to us,
– IP address and date and time of registration.
The data collected are used for processing and, if necessary, replying to the contact request. Upon submitting the contact request, you will be asked to give your consent to the use of your personal data and reference will be made to this privacy policy.
The provision of personal data is basically neither legally nor contractually required and for a contract in principle not required. You are not required to provide personal information. The non-provision of personal data may result in a contact request not being answered, incorrectly or incompletely answered. Legal basis (Article 13 (1) (c) GDPR): Article 6 (1) (1) (a) GDPR; Art. 28 GDPR, order for data processing contract
Recipients or categories of recipients (Article 13 (1) (e) GDPR): Host provider duration of data storage (Article 13 (2) (a) GDPR): The data will be stored: (i) until revocation on the occasion of a revocation; (ii) until cancellation on the occasion of a revocation; (iii) until the date on which the correspondence resulting from the contact is terminated, as is the case if, according to the circumstances of the case, the subject of the contact request is deemed to have been completed; (iv) as far as data are stored in log files – that concerns the IP address as well as date and time of the registration – these are deleted in accordance with the remarks made in number 3. In cases, according to i to iii, the first occurring event is decisive.
Beneficiaries or categories of recipients (Article 13 (1) (e) GDPR): host provider
Duration of data storage (Article 13 (2) (a) GDPR): The data will be stored: (i) until the time of cancellation in the event of an objection; (ii) until the time of automatic deletion, which normally takes 90 days; (iii) until such time as the internet offer changes to such an extent that it is no longer consistent with the purposes for which data collection is sought. The first occurring event is decisive.
7. E-Mail
Our internet offer includes the possibility to contact us by e-mail. If you use it, the entered data will be saved on the server. The data is concerned with
– the e-mail address used by you,
– text of the message addressed to us,
– IP address and date and time of sending and receiving the e-mail.
The storage of the data is used for processing and, if necessary, replying to the contact request. The provision of personal data is basically neither legally nor contractually required and in principle, for a contract, is not required. You are not required to provide personal information. The non-provision of necessary personal data has the consequence that an e-mail cannot be answered properly or not replied to completely.
Legal basis (Article 13 (1) (c) GDPR): Article 6 (1) (1) (a) or (b) GDPR; Art. 28 GDPR, order for data processing contract
Beneficiaries or categories of recipients (Article 13 (1) (e) GDPR): host provider
Duration of data storage (Article 13 (2) (a) GDPR): The data will be stored: (i) pending deletion on the occasion of a revocation; (ii) until cancellation on the occasion of a revocation; (iii) until the date on which the correspondence resulting from the contact is terminated, as is the case if, in the circumstances of the case, the subject of the request is deemed to have been completed; (iv) as far as data are stored in log files – that concerns the IP address as well as date and time of the dispatch as well as the receipt of the E-Mail – these are deleted according to the remarks made in number 3. In cases, according to i to iii, the first occurring event is decisive.
8. Web analysis with Google Analytics
We use Google Analytics, a web analytics service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, d. H. Text files stored on your device which allow an analysis of the use of our website. The subject of the analysis is, in addition to the evaluation of the use of our Internet offer, which has been carried out for us, the determination and evaluation of the activity in our Internet offer and the use of the Internet by creating pseudonymised user profiles. We use Google Analytics to fully evaluate and assess how our website is viewed and use this information to tailor our website to the needs and desires of visitors. In this way, we continuously improve our website. The information generated by cookies on the use of our website is transmitted to and stored by Google, which may be located in the USA. Google is certified under the Privacy Shield Agreement – through self-certification – and guarantees compliance with data protection requirements in the EU. Further information on the Privacy Shield Agreement can be found at https://www.privacyshield.gov . The use of Google Analytics is always done by us only with IP anonymization (extension “anonymizeIP ()”), i.e. your IP address is always truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases does the full IP address be sent to the USA, in which case the IP address is shortened there. You can prevent the storage of cookies by a corresponding setting of your browser software; However, we would like to point out that in this case you may not be able to use all the functions of our Internet service in full.
You may prevent the collection of your data by Google Analytics by clicking on the following link. The link creates an opt-out cookie on your device that prevents your data from being collected on future visits to our website: Click here to opt out of Google Analytics.
You may also prevent the collection by Google of the cookie-generated and related to your use of the website related data (including your IP address) and the processing of this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com .
Information on data usage can also be found in the Google Privacy Policy: https://policies.google.com/privacy/update?hl=en, for ad insertion options, visit: https://policies.google.com/technologies/ads .
Data processing operations are carried out on the server of the host provider for the purpose of creating and maintaining our internet offer. These include the provision and use of infrastructure, storage space and computing power as well as the use and implementation of security measures, maintenance and updates. Host processing operations include communication information (such as IP addresses, date and time of visit) from visitors to the site, customers, and users, as well as usage data, contract data, contact information, and inventory data.
Legal basis (Article 13 (1) (c) GDPR): Article 6 (1) (1) (f) GDPR, Article 28 GDPR, order for data processing contract
Legitimate interest of the person responsible in the sense of Article 6 (1) (1) (f) GDPR (Article 13 (1) (d) GDPR): The processing is based on the interest in the secure, efficient, efficient, reliable and rapid provision of our Internet offer,
Beneficiaries or categories of recipients (Article 13 (1) (e) GDPR): host provider
Duration of data storage (Article 13 (2) (a) GDPR): The data will be stored: (i) until the time of cancellation in the event of an objection; (ii) until the time of automatic deletion, which normally takes 90 days; (iii) until such time as the internet offer changes to such an extent that it is no longer consistent with the purposes for which data collection is sought. The first occurring event is decisive.
9. Overview of your rights
When processing personal data, individuals affected have rights.
a) Right to information
Affected individuals have the right to ask the person responsible (see Point 1) for confirmation of the processing of personal data concerning them. If this is the case, data subjects are entitled to request information about this data and to the following information:
– the processing purposes,
– the categories of personal data being processed,
– the recipients or categories of recipients to whom the personal data have been or are being disclosed, in particular in the case of beneficiaries in third countries or international organizations,
– if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration,
– the right of rectification or erasure of the personal data concerning him, or the limitation of the processing by the person responsible or a right to object to such processing,
– the existence of a right of appeal to a supervisory authority,
– if the personal data are not collected from the data subject, all available information on the source of the data,
– the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
Where personal data are transmitted to a third country or to an international organization, the data subject has the right to be informed of the appropriate guarantees provided for in Article 46 in connection with the transfer.
b) Right to rectification
Affected persons have the right to demand from the person responsible (see Point 1), without delay, the correction of inaccurate personal data concerning them. Subject to the purposes of processing, data subjects have the right to request the completion of incomplete personal data, including by means of a supplementary statement.
c) Right to deletion
Concerned persons have the right to demand from the person responsible (see Point 1) that personal data concerning them be deleted immediately, and the person responsible (see Point 1) is obliged to delete personal data immediately, if one of the following reasons apply:
– The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
– The data subject withdraws the consent on which the processing was based on the provisions of Article 6 (1) (1) (a) GDPR or Article 9 (2) (a) GDPR and lacks a different legal basis for processing.
– The individual affected objects to the processing pursuant to Article 21 (1) of the GDPR and there are no high-level legitimate grounds for the processing or the individual affect objects to the processing in accordance with Article 21 (2) GDPR.
– The personal data were processed unlawfully.
– The deletion of personal data is required to fulfil a legal obligation under Union or national law, to which the responsible person is subject.
– The personal data were collected in relation to information society services offered pursuant to Article 8 (1) of the GDPR.
If the person responsible (see Point 1) has made the personal data publicly available and is obliged to delete them in accordance with Article 17 (1) GDPR, he shall take appropriate measures, including technical ones, for data processing, taking into account the available technology and the implementation costs, to inform those who process the personal data that an affected person has requested that they delete all links to such personal data or copies or replications of such personal data.
The right of cancellation and the requirements described in the preceding paragraph do not apply if processing is required
– to exercise the right to freedom of expression and information,
– to fulfil a legal obligation required by the law of the Union or of the Member States to which the responsible entity is subject, or to carry out a task of public interest or in the exercise of official authority delegated to the controller,
– to assert, exercise or defend legal claims.
d) Right to restriction of processing
Affected persons have the right to require the person responsible (see Point 1) to restrict processing if one of the following conditions applies:
– the accuracy of the personal data is disputed by the data subject for a period allowing the controller to verify the accuracy of the personal data;
– the processing is unlawful and the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data,
– the controller no longer needs the personal data for processing purposes, but the data subject requires them to assert, exercise or defend legal claims; or
– the individual affected has lodged an objection to the processing under Article 21 (1) GDPR, as long as it is not certain that the legitimate reasons of the person responsible prevail over those of the individual concerned.
If the processing has been restricted as described above, these personal data may only be stored with the consent of the affected individual or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for the purposes of: important public interest of the Union or of a Member State.
A data subject who has obtained a restriction of processing in accordance with the above provisions shall be informed by the controller (see Point 1) before the restriction is lifted.
e) Right to object to the processing
Affected persons have the right, for reasons of their own particular situation, to object at any time to the processing of personal data concerning them pursuant to Article 6 (1) (e) or (f) of the GDPR; this also applies to profiling based on these provisions. The controller (see Point 1) no longer processes the personal data unless he can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves the purpose of asserting, exercising or defence of legal claims.
If personal data are processed in order to operate direct mail, data subjects have the right to object at any time to the processing of personal data concerning them for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58 / EC, the data subject may, in the context of the use of information society services, exercise his right to object through automated procedures using technical specifications.
f) Right to data transferability
Affected individuals have the right to receive personal data concerning the person responsible (see Point 1) in a structured, common and machine-readable format.
Interested persons also have the right to transfer this data directly to another party without hindrance by the controller (see Point 1), as far as this is technically feasible and the rights and freedoms of other persons are not affected, directly between the other party responsible and the person responsible ( see Point 1), provided that
– the processing is based on a consent pursuant to Article 6 (1) sentence 1 (a) or Article 9 (2) (a) GDPR or a contract pursuant to Article 6 (1) (b) GDPR, and
– the processing is done using automated procedures.
g) Right of revocation with prior consent
Affected individual have the right to revoke their consent to the processing of personal data at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
h) Automated decision / Profiling
Affected persons have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on them or, in a similar manner, significantly affects them. That does not apply if the decision
– is required for the conclusion or performance of a contract between the data subject and the controller (see Point 1),
– is permitted by Union or Member State legislation to which the controller is subject (see point 1) and which contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or
– with the express consent of the person concerned.
In cases in which the decision to conclude or fulfil a contract between the data subject and the controller (see Point 1) is required or is made with the express consent of the data subject, the person responsible (see Point 1) appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject. These include at least the following rights:
– the right to obtain the intervention of a person by the person responsible,
– the right to express one ‘s own position and
– the right to challenge the decision.
i) Right to file a complaint to a supervisory authority
Affected persons have the right to complain to a supervisory authority. The right of appeal applies independently of any other legal remedies of the persons concerned.