1Introduction
We are highly committed to people's privacy, which is why the protection of personal data is important to us.
We process data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation, Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, and other applicable regulations.
This Privacy Policy was reviewed in November 2024 in order to comply with the information and transparency obligations of the website itself and of the controller in general, and to provide any type of data subject, and not only users of the website, with the controller's general terms on the matter. It may be subject to changes until its next review
2Who is the controller of your data?
Controller: ALINATUR PETFOOD S.L.U.
Tax ID (NIF/CIF): B73573610
Address: POL. IND. SAPRELORCA, AVDA. FRANCISCO JIMENO SOLA, 3 PARCELAS D6 Y D7. 30817 LORCA (MURCIA)
Email: info@alinatur.es
3What is the source and type of data we process?
The information we process may come from any of the following categories:
Paper, electronic or digital forms.
Communication and messaging systems: email and messaging applications, telephone, etc.
Other lawful sources of information.
The different categories of data that we may process, depending on the type of data subject (user, customer, supplier, employee, etc.), the nature of the controller's activity and the different data processing operations, are:
Identification data, for example: first name and surname, image.
Identification codes or keys, for example: username, employee code.
Postal or electronic contact details, for example: telephone, email, social media profile.
Personal and professional characteristics, for example: age, date of birth, qualifications, professional experience, CV.
Economic, financial and insurance data; for example: bank details, credit card, etc.
Economic and non-economic payroll data and other employment-related information; for example: job position, payslip, etc.
Transaction data, for example: goods and services supplied and received.
Special category data, for example: health, trade union membership, racial origin.
Other data and information necessary for or implicit in carrying out our activities, services and corporate purpose.
MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE DATA SUBJECT.
By ticking the corresponding boxes and entering data in the fields marked as mandatory (for example, with an asterisk) in the contact form or in download forms, data subjects expressly, freely and unequivocally accept that their data are necessary for the controller to deal with their request, the inclusion of data in the remaining fields being voluntary.
The data subject guarantees that the personal data provided to the controller are accurate and undertakes to report any changes to them. The data requested through the website and marked as mandatory are necessary to provide an optimal service to the data subject. If not all the data are provided, there is no guarantee that the information and services provided will be fully tailored to their needs.
4For what purpose do we process your personal data?
In general, data are processed in order to successfully carry out the actions implicit in the normal development and management of the controller's activity. However, different processing purposes can be specified according to the possible categories of data subjects:
Customers and prospective customers: management and maintenance of commercial, pre-contractual and contractual relationships; internal administration; financial management; advertising and marketing; customer service.
Partners, creditors and suppliers: management and maintenance of commercial relationships, internal administration and financial management.
Employees: management, development and maintenance of the employment relationship, human resources management, communications, training activities, occupational risk prevention, working time recording and other purposes arising from legal obligations and the development of employment relationships.
Candidates: management of CVs received, management of job offers and staff recruitment.
Website and social media users: user support and management of communications between the parties.
Visitors: visitor support and access control to the premises.
Any information on other categories of data subjects processed by the controller shall be processed within the framework of its activity, in strict compliance with the applicable regulations and under the general criteria of this Privacy Policy.
Other general purposes that the controller may implement are:
Creating a commercial profile in order to improve your experience by personalising offers and communications. No individual decisions will be made on the basis of this profile, and processing will be based on legitimate interest.
Video surveillance, for the security of property and people, as well as the corresponding monitoring of work, on the basis of legitimate interest.
Telephone switchboard, in order to record communications for security, assurance and quality of service purposes, on the basis of legitimate interest.
Financial risk analysis and monitoring of monetary obligations. In the case of debtors with certain, overdue and enforceable outstanding payments, the controller may report this circumstance to credit reference files, debtor files and debt management or collection services, among others, on the basis of legitimate interest.
Communications: preparing and sending communications through the available contact data and channels (email, instant messaging, etc.) to internal (employees) and external (customers, prospective customers, partners, suppliers, etc.) categories of data subjects. The purposes of these communications may be informative, organisational, commercial and promotional, as appropriate, on the basis of informed consent and the controller's legitimate interest.
Other purposes arising from the nature of the controller, motivated by the normal development and exercise of its activity, on a valid legal basis.
5How long will we keep your data?
In general, personal data will be kept at least for as long as there is a relationship with the data subject, until their erasure is requested, for as long as liabilities may arise, or for as long as there is any legal retention requirement.
Data relating to candidates and job seekers will be deleted immediately when they are no longer of interest to the controller.
As part of its data protection plan, the controller keeps an inventory of retention periods that it follows in order to manage the different applicable retention periods.
Data will always be erased in a way that ensures their confidentiality.
6What is the legal basis for processing your data?
The controller observes and applies the different existing legal bases applicable to each processing purpose. These are:
Informed consent of the data subject.
Pre-contractual or contractual commitments.
Legitimate interest of the controller.
Applicable legal obligations.
Other legally established legal bases.
7To which recipients will your data be disclosed?
Data subjects' data will not be disclosed to any third party by default, except to: a) ancillary services, authorised processors or other implicit third parties necessary for the proper provision of goods and services; b) competent public authorities and administrations in the exercise of their functions; c) other legitimate interested parties and third parties provided for by law.
8What are your rights when you provide us with your data and/or we process them?
As a data subject, you may at any time request to exercise any of the following data protection rights to which you are entitled:
Access to the data subject's personal data in order to confirm whether or not data concerning them are being processed and to obtain further information about that processing.
Rectification or Erasure of personal data concerning the data subject where, among other reasons, they are inaccurate or no longer necessary for the purposes for which they were collected.
Restriction of processing of the data subject's personal data in certain circumstances, in which case they will only be kept for the exercise or defence of claims, for the protection of the rights of another person or for reasons of public interest.
Receiving the personal data concerning them that they have previously provided to us, in a structured format where possible. (Data portability).
Objecting to the processing of their data in certain circumstances and on grounds relating to their particular situation. The company will stop processing the data, except for compelling legitimate grounds or the exercise or defence of possible claims.
Withdrawing consent, which may result in the annulment or cancellation of any existing business or contractual relationship. This is without prejudice to any processing carried out prior to the withdrawal of consent.
To do so, you simply need to contact us at the email or postal address indicated at the beginning.
Optionally, you may also contact our designated data protection officer, or the Spanish Data Protection Agency, to find out more about your rights or to request their protection by the supervisory authority.
9Data security
We adopt in our information system the technical and organisational measures necessary to guarantee an appropriate level of confidentiality, integrity, availability and resilience of data in order to protect the rights and freedoms of data subjects.
The controller complies with the provisions and principles set out in the GDPR to process data lawfully, fairly and transparently in relation to the data subject, and in a manner that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
However, to the extent permitted by law, we accept no liability for damage or loss resulting from alterations that third parties may cause to our information system. Any security breach will be duly and immediately reported to the competent authority and/or the State law enforcement agencies.
10Sending communications or information
Our policy regarding the sending of information by electronic means (email, instant messaging, etc.) is limited to sending only communications that we consider to be of interest to our users and data subjects, in relation to the company's functions and activity, or that you have consented to receive.
If you prefer not to receive these messages, we will offer you, through these same messages, the option to exercise your right to unsubscribe and opt out of receiving them, in accordance with Title III, Article 22 of Law 34/2002 on Information Society Services and Electronic Commerce.
11Social media
The controller may have a presence on social networks through the corresponding profiles; this section and any legal and privacy terms on the website apply to the processing of the data of users or data subjects who become followers of, or in any way connect with, those profiles.
The controller uses these profiles for communication, business development, marketing and advertising, handling enquiries submitted to the controller and user support, providing information about actions, activities and events organised by the controller or in which it participates, and interacting through the official profiles.
The legal bases set out in section 6 above are supplemented in this case because the user or data subject may have a profile on the same social network as the controller and has decided to join or connect with the controller's profile, thereby showing interest in the information published by the controller. Therefore, by following the controller's profiles, they give their consent to the processing of the data available on their profile.
The user may at any time access the privacy policies and terms of the corresponding social network and configure the privacy settings available on their profile. Posts made by the user will be visible to other users, so the user is primarily responsible for their own privacy.
Users who follow and/or participate in our profiles shall refrain from:
Publishing content or information contrary to the law, morals and good faith. Any unlawful, offensive or inappropriate use or behaviour that may generate negative opinions on the profile or that violates people's rights is not permitted.
Behaving in a manner contrary to the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, consumer protection and intellectual and industrial property rights.
The controller reserves the right to remove, without prior notice, any content deemed inappropriate. It also disclaims any responsibility in relation to the security measures of each platform; users should familiarise themselves with these, together with the legal terms and conditions of use of the platform itself.
The controller shall be expressly exempt from any liability that may arise from the use of social networks by minors or persons with special needs. The controller's social networks do not knowingly collect any personal information from minors; therefore, if the user is a minor, they must not register or use the controller's social networks, nor provide any personal information. In Spain in particular, the processing of a minor's personal data may only be based on their consent from the age of 14. Furthermore, if any rule or regulation so requires, or if the user has special needs, the intervention of the holder of parental authority or guardianship, or of their legal representative, will be required by means of a valid document proving such representation.
12Employment and candidate management
Those interested in accessing the controller's job offers may provide their data and professional information to the controller through different channels, preferably through the existing forms, email addresses and other means available for this purpose, where applicable.
These data will be processed in accordance with these privacy terms for the purpose of managing applications for possible job offers, internships and training at the controller and any subsidiaries or companies belonging to the same business group, where applicable.
Processing will be based on the informed consent of the data subject or another valid legal basis.
If the data provided are not of professional interest to the entity, or once they are no longer necessary for the purposes for which they were collected, they will be deleted, ensuring their confidentiality and anonymisation.
Any data subject may withdraw their consent and exercise their privacy rights under the terms set out in this privacy policy.
13Ethics Channel
Data provided by any data subject through the procedures available in our Ethics Channel will be processed on the basis of informed consent, the controller's legitimate interest and compliance with legal obligations.
The purpose of processing is to manage and monitor any reports and complaints under the conditions set out in our Ethics Channel.
The data of any data subject or affected party, of the person making the report or complaint, of employees and of third parties will be kept only for as long as strictly necessary to decide whether an investigation is warranted. In any case, the information provided will be deleted, ensuring its confidentiality, once the legal periods for retaining or safeguarding evidence have elapsed.
No automated decisions will be made and no profiling will be carried out in relation to the information and data collected.
Data may be disclosed to third parties where necessary to take disciplinary measures or to pursue any legal proceedings that may apply.
Any data subject may exercise their data protection rights under the terms set out in this privacy policy.
Users should be aware that the information and data provided are confidential and restricted.
