PRIVACY POLICY

J. García Carrión, S.A. (hereinafter, “García Carrión”), in compliance with personal-data-protection regulations, informs the user of this website (hereinafter, the “User”), contained in this web page (hereinafter, the “Website”), of the following conditions, which will govern the processing of his/her personal data within the use and interaction with the Website, as well as the processing of his/her data regarding any contact that may be established with its owner.

1. Who is the Data Controller?

 

Controller J. García Carrión, S.A.
TAX A08267403
Registred adress Carretera de Murcia S/N, 20520 Jumilla (Murcia)
E-mail atcliente@jgc.es
Data Protection Officer dpo@jgc.es

 

2. Whats personal-data processing do wer carry out?

Purpose 1: handling communications, information requests and enquiry resolution

  • Data processed: identification and contact data communicated through the means provided by García Carrión, such as Website forms, e-mail or telephone. Specifically, and among other data that may be communicated depending on the particular enquiry, the processing of name, surname, e-mail address, telephone, professional position and company or entity where the User works is foreseen
  • Description: attending to the enquiry raised and providing the information requested by the User.
  • Legal basis: User’s consent by accepting the processing of his/her data for the indicated purpose in the basic data-protection information and the privacy policy.
  • Retention period: necessary to resolve the enquiry or provide the requested information, as well as to meet any liabilities or legal obligations that may arise; data may be duly blocked afterwards for at least five years, this being the general limitation period for personal actions.

Purpose 2: management of the commercial relationship with the customer

  • Data processed: identification, contact and, where appropriate, economic, training and academic data communicated through the means provided by García Carrión, such as Website forms, e-mail, telephone, or during the development of the commercial relationship. Specifically, processing of name, surname, e-mail, telephone, delivery address and transaction and financial data necessary to carry out the purchase transaction and delivery of the purchased goods is foreseen.
  • Description: managing, within the provision of its services, all aspects that may arise from the commercial relationship established with García Carrión by reason of the purchase of products in its online store and/or the relationship established with García Carrión.
  • Legal basis: performance of the contractual relationship
  • Retention period: while the contractual relationship lasts, as well as to meet any liabilities or legal obligations that may arise; data may be duly blocked afterwards for at least five years.

Purpose 3: data analytics through cookies

  • Data processed: depending on the case, identification, contact and browsing data may be processed—for example, browsing habits (patterns, most-requested features and services, preferences) or browsing identifiers (device or IP address)
  • Description: analysing the User’s browsing on the Website in order to know browsing patterns, improve the Website and the User’s experience.
  • Legal basis: data subject’s consent, granted by accepting the download of cookies in the cookie notice shown upon entering the Website
  • Retention period: until consent is withdrawn and, specifically for each cookie, the period indicated in the “expiry” column of section “3. What cookies do we use?” of our Cookies Policy.

Purpose 4: sending our own commercial communications

  • Data processed: identification and contact data, such as name, surname and e-mail address.
  • Description: sending commercial communications related to García Carrión’s activity.
  • Legal basis: User’s consent (recipient of the communications). The User may withdraw the given consent at any time by writing to atcliente@jgc.es and/or setting his/her privacy preferences in the reserved area (registered users).
  • Retention period: while the User does not object to the processing or withdraw consent, and to meet any liabilities or legal obligations; data may be duly blocked afterwards for at least five years.

Purpose 5: compliance with legal obligations

  • Data processed: any personal data that may be processed within compliance with the legal obligations to which García Carrión is subject.
  • Description: complying with any legal obligations applicable to García Carrión.
  • Legal basis: compliance with the specific legal obligation that applies.
  • Retention period: the one indicated in the applicable regulations according to the legal obligation imposed on García Carrión.

Purpose 6: reservation management

  • Data processed: identification and contact data, such as name, surname and e-mail address required in the reservation form.
  • Description: management of the reservation.
  • Legal basis: performance of the contractual relationship.
  • Retention period: while the contractual relationship lasts, as well as to meet any liabilities or legal obligations; data may be duly blocked afterwards for at least five years.

3. To wihc recipiens Will you data be communicated?

For proper provision of the services, García Carrión may communicate your data to providers acting as processors.

In addition, certain data, under current regulations or the contractual relationship with García Carrión, may be communicated to:

  • Banks and financial institutions for the collection of contracted services and/or purchased products
  • Public administrations with competence in García Carrión’s activity sectors, when established by current regulations.

4. Are international data transfers carried out?

García Carrión may carry out from this Website international data transfers arising from accepting cookies.

Google LLC and Google Ireland Limited, as well as Meta Platforms Inc., transfer data to the United States based on the user’s consent when accepting cookies or by using WhatsApp as a communication channel.

By accepting these entities’ cookies, the user consents to the transfer of his/her personal data that may be collected through the loading and reading of the cookies to the United States, a country about which the European Commission adopted the adequacy decision of 10 July 2023 (EU–USA Data Privacy Framework), declaring that companies located in the US and adhered to it provide adequate guarantees equivalent to the level of protection of European regulations.

If the user does not consent to this international data transfer to the United States, he/she must reject these cookies, and the functionalities or services offered with these cookies will not be provided.

You can learn about transfers to third countries that, where appropriate, are carried out by the third parties identified in the Cookies Policy in their corresponding policies.

5. Wha are you rights when you provide us with your data?

  • Right to request access to personal data concerning the data subject.
  • Right to rectification or erasure.
  • Right to object.
  • Right to request the restriction of processing.
  • Right to data portability.
  • Right not to be subject to decisions based solely on automated processing.

Holders of the obtained personal data may exercise their data-protection rights by sending a written communication to García Carrión’s registered address or to the e-mail dpo@jgc.es

Models, forms and more information about your rights are available on the website of the national supervisory authority, the Spanish Data Protection Agency (AEPD), www.aepd.es.

6. Can I withdraw consent?

You have the possibility and the right to withdraw consent for any specific purpose given at the time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

7. Where can I lodge a complaint if i believe my data are not being processed correctly?

If any data subject considers that his/her data are not processed correctly by García Carrión or that requests to exercise rights have not been satisfactorily handled, he/she may lodge a complaint with the relevant data-protection authority, the Spanish Data Protection Agency (AEPD) in the national territory, www.aepd.es.

8. Security and updating of your personal data

To safeguard the security of your personal data, we inform you that García Carrión has adopted all technical and organisational measures necessary to guarantee the security of the supplied personal data, preventing their alteration, loss and/or unauthorised processing or access, as required by regulations, although absolute security does not exist.
It is important that, so we can keep your personal data up to date, you inform us whenever they are modified.

9. Confidentiality

García Carrión informs you that your data will be treated with the utmost care and confidentiality by all personnel involved in any phase of the processing. We will not transfer or communicate your data to any third party, except in the legally provided cases or unless the data subject has expressly authorised us.

10. Code of conduct

García Carrión is adhered to the Code of Conduct on Data Protection in Advertising of AUTOCONTROL, accredited by the Spanish Data Protection Agency, and is therefore bound by its out-of-court system for handling claims related to data protection and advertising. You can obtain more information here.