WEBSITE PRIVACY POLICY

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with the provisions of the current legislation, CAPS FOOD SYSTEMS ES, S.L. (hereinafter also the Website) undertakes to take the necessary technical and organizational measures in accordance with the level of security that corresponds to the risk of the collected data.

Laws incorporated into this privacy policy

This privacy policy is adapted to current Spanish and European legislation on the protection of personal data on the Internet. In particular, it meets the following standards:

Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (RGPD).
Organic Law 3/2018 of December 5 “Protection of Personal Data and Guarantee of Digital Rights” (LOPD-GDD).
Royal Decree 1720/2007 of December 21 approving the Regulations for the Implementation of Organic Law 15/1999 of December 13 on the Protection of Personal Data (RDLOPD).
Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE).

The domain of our Website www .capsfoodsystemses.com is owned by CAPS FOOD SYSTEMS ES, S.L., with ES code B10618957 and registered office at CAPS FOOD SYSTEMS ES, S.L. Paseo De La Castellana, 194 Bajo B, Madrid, España / Madrid, Spain and registered in the Commercial Register of Madrid, volume 43941, sheet 72, entry 1, sheet number M-768117, as data controller, you are hereby informed that: CAPS FOOD SYSTEMS ES, S.L. has an email address for handling data protection issues: info@capsfoodsystemses.com.

Registration of personal data

In accordance with the provisions of the RGPD and LOPD-GDD, we inform you that personal data collected by CAPS FOOD SYSTEMS ES, S.L. through the forms provided on its pages, will be included and processed in our file in order to facilitate, accelerate and fulfill the obligations established between the company CAPS FOOD SYSTEMS ES, S.L. and the User, or to maintain the relationship established in forms filled out by the User, or to respond to a User’s inquiry or request. In addition, in accordance with the provisions of the RGPD and the LOPD-GDD, unless the exception provided for in Article 30.5 of the RGPD applies, a record of processing activities is kept, which indicates, in accordance with the purposes, the processing activities carried out and other circumstances established by the RGPD.

Principles applied to the processing of personal data

The processing of the User’s personal data is subject to the following principles, which are contained in Article 5 of the GDPR and in Article 4 and subsequent articles of Basic Law 3/2018 of December 5 on the protection of personal data and data guarantees. digital rights:

The principle of legality, loyalty and transparency: the User’s consent will be required at any time after absolutely transparent information about the purposes for which personal data is collected.
Principle of purpose limitation: personal data is collected for specific, clearly defined and legitimate purposes.
The principle of data minimization: only those personal data that are strictly necessary for the purposes for which they are used are collected.
Principle of accuracy: personal data must be accurate and always up-to-date.
The principle of limitation of the storage period: personal data will be stored only in a way that allows identification of the User during the time necessary for the purposes of their processing.
The principle of integrity and confidentiality: personal data will be processed in a way that guarantees their security and confidentiality.
Principle of proactive responsibility: The data controller is responsible for ensuring compliance with the above principles.

Information and consent

By accepting this Privacy Policy, the user receives information and gives his free and specific consent to the processing of personal data provided through our websites, hereinafter “Website”, as well as those that may be provided by other means or in the future by CAPS FOOD SYSTEMS ES, S.L., in the remainder of the document entitled CONTROLLER.

Obligation to provide data

The data requested in the forms on the Website are mandatory. If they are not provided or performed properly, the user’s request cannot be satisfied. The user will be able to freely view the content of the website if he agrees to the use of cookies; if not, he will be prompted to leave the website.

What user data will the responsible party process?

The responsible party will process the following categories of personal data depending on the request or request made by the user:
— Personal characteristics
— Social circumstances
— Education and professional activity
— Information about work
— Commercial information
— Economic, financial and insurance information
— Operations with goods and services
— Navigation data
— User and/or owner identification codes or keys.

For what purpose will the responsible person process the user’s personal data? – What is the legality of user data processing?

Personal data provided through the website will be processed by the responsible party in accordance with the following purposes:

A) For purposes of compliance with contractual obligations.
To comply with the product supply agreements you enter into with us and to be able to perform them in accordance with the terms set out in each case.

For concluding agreements and employment contracts.

Legitimacy basis Article 6.1b GDPR, the processing is necessary for the performance of a contract to which the interested party is a party, or for the application, at the request of the interested party, of pre-contractual measures;

B) For commercial communication and informational purposes based on your consent.
In order to be able to communicate commercial promotions, product information and news, and invite you to events and activities, we expressly ask for your consent, which can be easily withdrawn at any time you see fit.

Based on the legality of Article 6.1ª RGPD, the interested party has given his consent to the processing
your personal data for one or more specific purposes

C) Data provided for sending the newsletter.
Manage newsletter subscription and/or unsubscribe via the channel provided on the CONTROLLER’s Website. Based on the legality of Article 6.1ª RGPD, the interested party has given consent to the processing of his personal data for one or more specific purposes

D) Data provided in contact forms.
Manage user contacts and requests for information through the channels provided for this purpose on the CONTROLLER’s website in order to respond to the request made.

Ground of legitimacy Article 6.1f GDPR, the processing is necessary to satisfy the legitimate interests of the person responsible for the processing or of a third party, provided that the interests or fundamental rights and freedoms of the interested party that require protection do not conflict with the stated interests of the personal data, especially if the interested party is a child.

E) Navigation data provided.
To analyze the use of the Website and to check the preferences and behavior of users.

Reason for legitimacy Article 6.1f GDPR, the processing is necessary to satisfy the legitimate interests of the person responsible for the processing or of a third party, provided that the interests or fundamental rights and freedoms of the interested party that require protection do not conflict with the stated interests of the personal data, especially if the interested party is a child.

Recipients of personal data

Personal data of the User will not be transferred to third parties.

In any case, when receiving personal data, the User will be informed about the recipients or categories of recipients of personal data.

With which recipients will user data be shared?

User data, depending on the established relationship and always with their permission, may be transferred:
— Organizations or people directly related to the responsible person.
— Organizations of social protection.
— Tax administration.
— Notaries and lawyers.
— Entities designated for the fulfillment or non-fulfillment of monetary obligations.
— Banks, savings and village banks.
— Subjects of insurance.
— Other financial institutions.
— Healthcare institutions.

International data transfer

We inform you that your data can always be transferred with your prior permission:
— Organizations or people directly related to the responsible person.
— Service providers.

Data storage

A) For the purposes of compliance with the terms of the contract.
The data will be stored for the duration of the contract and, after its termination, during the statute of limitations for legal actions that may arise from it.

B) For commercial communication and informational purposes based on your consent.
The data will be stored until the user withdraws the given consent.

C) Data provided for sending the newsletter.
The data will be stored until the user withdraws the given consent.

D) Data provided in contact forms.
The data will be stored until the user withdraws the consent given, for the duration of the requested service and, after completion, for the period of limitation of legal claims that may arise from it.

E) Navigation data provided.
The data will be stored until the user withdraws the given consent.

Payment gateway

Users who make purchases through the CONTROLLER’S WEBSITE are informed that the payment gateway has an agreement with …………………

User responsibility

The User guarantees that he has reached the age of majority and that the data provided to the CONTROLLER are true and up-to-date. The user will conveniently update the provided information.

The User guarantees that he has informed the third parties to whom he provides data, if he does so, about the aspects contained in this document, guaranteeing at the same time that he has obtained their permission to provide his data to the RESPONSIBLE.

The User is responsible for any false or inaccurate information provided through the Website, as well as for any direct or indirect damages that this may cause to the CONTROLLER or third parties.

Privacy and security of personal data

Company CAPS FOOD SYSTEMS ES, S.L. undertakes to take the necessary technical and organizational measures in accordance with the level of security corresponding to the risk of the collected data in order to guarantee the security of personal data and to prevent accidental or illegal destruction, loss or alteration of personal data transmitted, stored or otherwise processed, as well as unauthorized transfer or access to such data.

The website has an SSL (Secure Socket Layer) certificate, which guarantees that personal data is transmitted safely and confidentially, since the transmission of data between the server and the User, and in the reverse direction, is completely encrypted or coded.

However, given that CAPS FOOD SYSTEMS ES, S.L. cannot guarantee the invulnerability of the Internet or the complete absence of hackers or other persons who gain access to personal data fraudulently, the Data Controller undertakes to notify the User without undue delay of a breach of personal data security that may cause a high risk to the rights and freedoms of individuals . According to Article 4 of the GDPR, a personal data breach means any security breach that results in the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorized disclosure or access to such data.

The controller of personal data treats personal data as confidential and undertakes to inform and ensure, through legal or contractual obligations, compliance with such confidentiality by its employees, partners and any other person to whom it provides access to information.

Rights arising in connection with the processing of personal data

The user can exercise the following rights recognized in the GDPR and Basic Law 3/2018 of December 5 on the protection of personal data and the guarantee of digital rights before the data controller:

The user has the right to receive confirmation of whether CAPS FOOD SYSTEMS ES, S.L. is processing his personal data and, if so, to obtain information about his specific personal data and the processing that CAPS FOOD SYSTEMS ES, S.L. has carried out or will carry out, as well as, among other things, the available information about the origin of the specified data and the recipients of messages carried out or planned for the specified data.
The user has the right to change his personal data, which turned out to be inaccurate or, taking into account the purposes of processing, incomplete.
The user has the right, unless otherwise provided by law, to request the deletion of his personal data if they are no longer necessary for the purposes for which they were collected or processed; The user has withdrawn his consent to the processing and there is no other legal basis for the processing; The user objects to the processing and there is no other legal basis for continuing the processing; The user objects to the processing and there are no other legal grounds for continuing the processing; personal data were processed illegally; personal data must be deleted in accordance with a legal obligation; or personal data were obtained as a result of a direct offer of information society services to a child under 14 years of age. In addition to erasure, the Controller must, taking into account the available technologies and the cost of their implementation, take reasonable steps to inform the controllers processing the personal data of the data subject’s request for the erasure of any reference to that personal data.
The user has the right to limit the processing of his personal data. The User has the right to restriction of processing if he disputes the accuracy of his personal data, if the processing is illegal, if the Controller no longer needs the personal data, but the User needs them to make claims, and also if the User objects to the processing.
In case of processing by automated means, the User has the right to receive his personal data from the Controller in a structured, generally accepted and readable format and transfer them to another controller. If technically possible, the Controller shall transmit data directly to such other Controller.
The user has the right to refuse the processing of his personal data or to stop the processing of his personal data by CAPS FOOD SYSTEMS ES, S.L.
The user has the right not to be the subject of an individual decision based solely on the automated processing of his personal data, including the creation of existing profiles, unless otherwise established by current legislation.

Thus, the User can exercise his rights by means of a written notification addressed to the Data Controller with a link to “RGPD-www.capsfoodsystemses.com”, indicating:

Name, surname (surnames) of the User and a copy of the identity document. In cases where representation is allowed, the person representing the User must also be identified in the same way, as well as a document confirming the authority of the representative. A photocopy of an identity document can be replaced by any other legally valid identity document.
A request specifying the specific reasons for the request or the information to be accessed.
Address for messages.
Date and signature of the applicant.
Any document confirming the request made.

This application and any other attached document can be sent to the following address and/or e-mail:

Postal address: CAPS FOOD SYSTEMS ES, S.L. Paseo De La Castellana, 194 Bajo B,
Madrid, España / Madrid, Spain

Email: info@capsfoodsystemses.com

Links to third-party sites

The website may contain hyperlinks or links that allow access to third-party websites that do not belong to CAPS FOOD SYSTEMS ES, S.L.. The owners of these websites have their own data protection policies and in each case are responsible for their files and own privacy policy.

Claims to the supervisory body

In the event that the User believes that there is a problem or violation of applicable law in the process of processing his personal data, he will have the right to effective legal protection and file a claim with the supervisory authority, in particular, in the state in which you live, work or have the place of the alleged violation. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/).

II. AGREEMENT TO THE PRIVACY POLICY AND CHANGES TO IT

It is necessary that the User has read and agreed to the terms of protection of personal data contained in this Privacy Policy, as well as consented to the processing of his personal data, so that the Data Controller can continue to act in the order, during the time periods and for the purpose specified in the Privacy Policy . Use of the Website constitutes acceptance of the Privacy Policy.

CAPS FOOD SYSTEMS ES, S.L. reserves the right to modify its Privacy Policy according to its own criteria or motivated by legislative, legal or doctrinal changes of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be directly communicated to the User. The user is encouraged to periodically review this page to be aware of the latest changes or updates.

This Privacy Policy has been updated to adapt to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (RGPD) and to Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights.