GRUPO HORTIBERIA S.A., hereinafter the “company”, may collect and process data from users of the website and other data subjects, obtained through various means such as:
- Web forms.
- Email.
- Telephone contact.
- Paper forms.
- Post.
- Publicly accessible sources (official journals and gazettes, the media, etc.)
The data collected through these sources will be processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation), Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, and any other applicable legislation in force.
For the purpose of setting out the company’s privacy policy, the following sections are presented:
Who is the Controller of your data?
| Identity: | GRUPO HORTIBERIA S.A. |
| Tax ID (NIF/CIF): | A30752703 |
| Address: | C/ ZAGREB, Nº 13, P.I. CABEZO BEAZA, 30353 CARTAGENA (MURCIA) SPAIN |
| Telephone: | 968321620 |
| Email: | hortiberia@hortiberia.es |
For what purpose do we process your personal data?
At the company we process the data of data subjects for the management and development of communications (user contact, handling of enquiries, commercial promotion, sending of newsletters, management of the company’s social media profiles, etc.) and to provide the services requested.
The remaining data processing that we may carry out relates to the normal activity of the company and the activities inherent in its management, the data being used for the purposes of internal administration, commercial and financial management, human resources management, management of communications with data subjects and any other purpose arising from the fulfilment of the corporate purpose and articles of association of the company.
On the basis of the information provided, we may create a commercial profile in order to improve your user experience and tailor the offers and communications that we consider of interest to you. No automated individual decisions will be taken on the basis of that profile.
If the reason for contacting the company and sending information about yourself is to seek employment (sending CVs, etc.), the data provided will be processed to assess your possible candidacy for the company’s job vacancies. If the data provided are of interest to the company, a profile will be created with them and kept on file for human resources management.
What types of data do we process?
In addition to the various means of collection mentioned and the various processing purposes set out above, we inform you that the types of data we may process in our information system, depending on the profile of the data subject (customer, supplier, employee), are:
- Identification, image and contact data
- Identification codes or keys
- Postal or email addresses
- Personal and professional characteristics data
- Academic and CV data
- Economic, financial and insurance data
- Economic and non-economic payroll data and other employment-related information
- Other data and information necessary for or inherent in the activity and services of the company
How long will we keep your data?
Personal data will be kept for as long as a relationship with you is maintained, either as a customer or as another type of data subject; for as long as their erasure is not requested; or for as long as there is any legal provision or requirement to retain them.
When the data are no longer necessary for the purposes for which they were collected, they will be erased, ensuring their confidentiality.
In the case of data provided for job-seeking purposes, if they are not of interest to the company, they will be deleted immediately, ensuring their confidentiality.
What is the legal basis for processing your data?
The legal basis for processing your data may be the performance of a commercial, business, employment or other contract to which the data subject is a party.
Another legal basis for processing your data is informed consent in the case of other processing such as, for example: the website contact form, registration for activities organised by the company, participation in the company’s social media profiles, and any other processing that necessarily involves the collection of your personal data, for which a clear affirmative action by the data subject will be an essential requirement.
To which recipients will your data be disclosed?
The data of data subjects will not be disclosed to any third party, except: a) ancillary services, authorised processors or other third parties necessarily involved in the proper provision of goods and services; b) competent public authorities in the exercise of their functions; c) other legitimate interested parties and third parties provided for by law.
What are your rights when you provide us with your data and/or we process them?
As a data subject, you may at any time ask us to exercise any of the following data protection rights to which you are entitled:
- Access to the data subject’s personal data in order to confirm whether or not data concerning them are being processed and to obtain further information about that processing.
- Rectification or Erasure of the personal data concerning the data subject when, among other reasons, they are inaccurate or no longer necessary for the purposes for which they were collected.
- Restriction of the processing of the data subject’s personal data in certain circumstances, in which case they will only be kept for the establishment, exercise or defence of legal claims, for the protection of the rights of another person or for reasons of public interest.
- Receipt of the personal data concerning them that they have previously provided to us, in a structured format where possible (Portability of your data).
- Objection to the processing of your data in certain circumstances and on grounds relating to your particular situation. The company will stop processing your data, except for compelling legitimate grounds or the establishment, exercise or defence of possible legal claims.
- Withdrawal of consent, which may entail the annulment or termination of the existing business or contractual relationship, if any. This is without prejudice to any processing carried out before consent was withdrawn.
To do so, you only need to contact us at the email address hortiberia@hortiberia.es, or by letter to C/ ZAGREB, Nº 13, P.I. CABEZO BEAZA, 30353 CARTAGENA (MURCIA) SPAIN.
Optionally, you may also contact the Spanish Data Protection Agency (www.agpd.es) to find out more about your rights or to request their protection by the supervisory authority.
Data security
The company adopts in its information system the technical and organisational measures necessary to guarantee an adequate level of confidentiality, integrity and availability of the information we process.
However, to the extent permitted by law, we accept no liability for damage or loss resulting from alterations that third parties may cause to our information system. Any security breach will be duly and immediately reported to the competent authority and/or the State security forces.
Sending of communications or information
Our policy regarding the sending of information by electronic means (email, instant messaging, etc.) is limited to sending only communications that we consider of interest to our users and data subjects, in relation to the functions and activity of the company, or that you have agreed to receive.
If you prefer not to receive these messages, we will offer you, through the messages themselves, the possibility of exercising your right to cancel and opt out of receiving them, in accordance with Title III, Article 22 of Law 34/2002 on Information Society Services and Electronic Commerce.
This privacy policy was reviewed in July 2020, so there may be changes until the next review of the text.