Privacy Policy (Information and Consent)

Basic Information on Data Protection

Should our data protection policy change as a result of legislative updates or criteria issued by the Data Protection Agency, you will be duly informed of any modifications required to comply with the law.

Who is the data controller for your processing?

Identidad: PALMADERA, S.A. CIF: A31007693.

Dirección postal: BARRIO ZALAIN, 9, 31780, Bera/Vera de Bidasoa, Navarra

Teléfono: 948630225

Correo electrónico: rgpd@parklexprodema.com

Delegado de Protección de Datos (DPD): PRODANA CONSULTORES S.L.

Contacto DPD Parque Empresarial La Muga 11, planta 5 oficina 4-A 31160 Orcoyen Navarra España dpo@prodanaconsultores.com

For what purpose do we process your personal data?

PALMADERA, S.A. processes the information provided by data subjects to manage the personal data required to deliver the requested services or products. PALMADERA, S.A. will process the data for administrative, accounting, and tax management, as well as to send commercial communications about our products and services.

GDPR: 6.1.a) The data subject has given consent to the processing of his or her personal data for one or more specific purposes: transfer of data to companies necessary for the provision of the requested service, transfer of data to third-party applications for external services, and sending commercial promotions.

GDPR: 6.1.b) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

GDPR: 6.1.c) Processing is necessary for compliance with a legal obligation to which the controller is subject.

GDPR: 6.1.f) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

How long will we keep your data?

Data will be kept for as long as necessary to fulfill the purpose for which it was collected and to determine any potential liabilities that may arise from that purpose and the processing of the data, including compliance with legal obligations. For purposes requiring your express consent, the data will be kept as long as the data subject does not exercise their right to erasure or restriction of processing, such as for sending commercial communications.

What is the lawful basis for processing your data?

The legal basis for processing your data is as follows:

• Performance of a contract: Performance of a purchase/sale or supply contract regarding our products and/or services.
• Consent of the data subject: Sending commercial communications about our products and services.
• Compliance with legal obligations: Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Legitimate interest of the controller: Purposes related to the provision, assistance, and communication regarding the contracted/supplied services or products: purchasing, customer service, returns, transfer to third parties for transport and delivery, management of customer offers, communications with the customer regarding the service, claims and complaints, transfer of data to third parties for the provision of services, and coordination of business activities.

To which recipients will your data be communicated?

Data will be communicated to the following recipients:

• Public administration with competence in the relevant matter, for the purpose of complying with legal obligations.
• Social Security Treasury and other public bodies.
• Individuals and organizations related to the data controller, for the purpose of providing external services to the company, such as: legal and tax advice, IT, consultants, auditors, insurance, occupational risk prevention, lawyers, and other external service providers.
• Financial institutions for the purpose of economic transactions.

Third-party data processors that provide services to PALMADERA, S.A. are also recipients of the information, with whom the corresponding agreement has been signed to guarantee compliance with the GDPR and appropriate security measures.

Are data transfers to third countries planned?

No data transfers to third countries are planned.

What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation as to whether or not PALMADERA, S.A. is processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, PALMADERA, S.A. will stop processing the data, except for compelling legitimate grounds, or the exercise or defense of potential claims.

You can physically exercise your rights in the following way: You have the right to access, rectify, and erase the data, as well as other rights indicated in the additional information, which you can exercise by sending an email to rgpd@parklexprodema.com or directly at the address: BARRIO ZALAIN, 9, 31780, Bera/Vera de Bidasoa, Navarra.

If you have given your consent for any specific purpose, you have the right to withdraw the consent granted at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

If you feel your rights have been violated regarding the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Supervisory Authority via its website: www.agpd.es.

What rights do you have?

To know whether or not we are processing your data.

To access your personal data.

To request the rectification of your data if it is inaccurate.

To request the erasure of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw the consent you granted us.

To request the restriction of the processing of your data in certain circumstances, in which case we will only keep it in accordance with current regulations.

To data portability, meaning your data will be provided to you in a structured, commonly used, and machine-readable format. If you prefer, we can send it to the new data controller you designate. This is only applicable in certain circumstances.

To lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe we have not addressed your request correctly.

To withdraw your consent at any time for any processing to which you previously agreed.

If you modify any of your data, we would appreciate it if you let us know so that we can keep it up to date.

Would you like a form to exercise your rights?

We have forms available for you to exercise your rights; you may request them from us by email, or if you prefer, you can use those prepared by the Spanish Data Protection Agency (AEPD) or third parties.

These forms must be electronically signed or accompanied by a photocopy of your ID (DNI/Passport).

If someone is representing you, you must attach a copy of their ID or have them sign it with their electronic signature.

The forms can be submitted in person, sent by mail, or sent by email to the Controller’s address listed at the beginning of this text.

How long will it take us to respond to the exercise of your rights?

It depends on the right, but at most within one month from your request, and up to two months if the matter is highly complex and we notify you that we need more time.

How did we obtain your data?

The personal data processed by PALMADERA, S.A. comes directly from the data subject. The types of personal data processed are as follows:

• Identification data: ID card/Tax ID (DNI/NIE), first and last names, telephone number, image, voice, address, signature, and email address.
• Other types of data: personal characteristics, academic and professional background, commercial information, transactions of goods and services, and banking details.
• Commercial information
• No special categories of personal data are processed (these are data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning health, or data concerning a natural person’s sex life or sexual orientation).