Privacy Policy

Your privacy is important to us. We recommend that you take a few minutes to read, understand and, where appropriate, accept our Privacy Policy.

1. Who is the data controller?

Cuevas y Cía S.A.
Polígono industrial San Cibrao das viñas calle nº10 Ourense
info@marronglace.com
Phone: 988 383 822

2. What data of yours do we process, for what purpose and how long do we keep it?

We process the data you have provided us with – either through purchase forms on our website or through the contact form – when:

a) When you fill in the form to place the purchase order: name and surname, ID (only in the case of a natural person who carries out a professional activity and requests an invoice in their name), landline and/or mobile phone, email address, town and province of residence.

Purpose: to be able to manage the purchase order and the delivery of our products in an optimal way.
Retention: we will store your data provided that you do not expressly request its erasure. In this case, it will be deleted with the appropriate safety measures.

b) When you request to receive our Newsletter, “Push” notifications, “Mail” notifications, “sms” notifications or any other notification about our products, services and activities: name and surname, mobile phone, email address, town, province of residence.

Purpose: to be able to inform you about news, products and services of our brands, as well as receive alerts about opportunities and promotions that are updated.
Retention: we will store your data provided that you do not request your cancellation as a recipient of the aforementioned communications.

c) When you give us your consent to record images/sounds for draws, competitions or other promotions, as well as when you participate in visits to our facilities: name and surname, ID card, image (photograph and/or video), audio, date of birth, landline number, mobile telephone number, email address and signature.

Purpose:
– The publication of the images/sound recordings on the company’s private Intranet
– The publication of the images/sound recordings on social networks of Cuevas y Cia and companies of the Cuevas group.
– The publication of the images/sound recordings in a potential magazine, blog or other corporate material/format.
– The communication of images/sound recordings to the media.

Retention: we will store your data provided that you do not expressly request its erasure. In this case, it will be deleted with the appropriate safety measures.

d) When you contact us through customer support concerning a general matter or about a particular product or service: name and surname, email address.

Purpose: to know the opinion of our customers and resolve any type of incident either related to the product and the conditions of purchase and delivery as well as accounting/tax matters.
Retention: we will store your data provided that you do not expressly request its erasure. In this case, it will be deleted with the appropriate safety measures.

3. What is the legal basis that authorises Cuevas y Cía, S,A. to process your data?

a) When you request the processing of an order for our products, we are authorised by the fact that you have given us your express and unequivocal consent.

b) When you request to receive our Newsletter, “Push” notifications, “Mail” notifications, “sms” notifications or any other notification about our products, services and activities, we are authorised by your consent to receive this type of notification.

c) When you participate in any image/sound recording for draws, or other promotions or when you participate in visits to our facilities, we are authorised by the fact that you have given us your express and unequivocal consent.

d) When you contact us through customer support concerning a general question or about a particular product or service, we are authorised by you having given us your express and unequivocal consent.

4. Who is the recipient of your data?

The data you have provided us with by any of the means explained above will not be communicated to third parties except in the following cases:

– When you request the processing of an order for our products, to third parties that provide us with support services, such as financial entities, anti-fraud entities, suppliers of technological, logistics, transport and delivery services.

– When you participate in the recording of images/sounds for draws, or other promotions, as well as in visits to our facilities, and you have given us express consent to communicate your data to the media.

– When you are the recipient of our Newsletter, “Push” notifications, “Mail” notifications, “sms” notifications or any other notification about our products, services and activities and you have given us your consent to communicate your data to third parties to manage its sending.

In no other case will your data be communicated to third parties, unless we are legally obliged to do so. This Policy will be amended as and when it becomes necessary to communicate your data to third parties in cases other than those mentioned above and provided that we have your prior express consent.

5. What are your rights when you give us your details?

In your dealings with us, you have a number of rights so that you can decide and control how we use your personal data at all times. You can exercise these rights at any time and free of charge. You can contact us through any of the following channels:

CUEVAS Y CIA S.A.
Pol. Industrial San Cibrao das viñas, calle 1 nº 10, 32901 Ourense
info@marronglace.com
In order for us to comply with your request, we need to make sure that it is really you, so you must provide us with a copy of your identity document; we will also need you to indicate the right you wish to exercise. If your application does not meet the above requirements, we will ask you to correct it.

In particular, you have the following rights:

– Right to request access to your personal data
– Right to request rectification
– Right to request their erasure
– Right to request restriction of its processing
– Right to object to processing
– Right to data portability

What is the right of access?
You may ask us to tell you whether or not we are using your personal data; if we are, we will also provide you with additional information such as what personal data we have about you, what we are using it for, the entities we share it with, the period during which we will retain your data, or whether we are conducting profiling, among other issues.

What is the right of rectification?
You can ask us to modify some of the personal information we have about you to make it accurate and up-to-date. In any case, it is advisable that you keep the data we store about you updated at all times.

What is the right of erasure?
You may ask us to delete the personal data we hold about you when it is no longer needed for the purpose for which we use it or when you withdraw your consent, if we only process it for purposes based on it.

What is the right of restriction?
You can ask us to temporarily restrict the use of your personal data
(i) when you consider that your data is inaccurate, until we verify or update it
(ii) when we no longer need it to carry out the purposes indicated in section 2 above but you prefer that we keep it so that you can exercise or defend yourself against claims and
(iii) when you object to us using your data for any of the purposes set out in section 2 of this Privacy Policy, while we assess whether the legitimate interest we have in Ignacio de las Cuevas S.A. prevails over your right to object to us using them.

What is the right of portability?
You can ask us to deliver directly to you or to deliver to another entity, whenever technically possible, a structured file, of common use and readable by a computer system, containing the personal data we have.

What is the right of objection?
You may object to our use of your data for any of the purposes set out in section 2 of this Privacy Policy. We especially want to remind you that you can ask us to stop analysing your profile to send you promotional communications. In addition, you can lodge a complaint with the competent data protection supervisory authority: Spanish Data Protection Agency. Likewise, you may withdraw any consent you have given at any time.

6. Updates to our privacy policy.

We may make updates to our Privacy Policy when necessary. The latest version will always be available on our website.