Responsible for the processing
Company name: Isauki Superfood S.L.
Address: Alameda Mazarredo 10, Local 48001 Bilbao Vizcaya
Telephone: (+34) 610062904
Origin and categories of data
2.1. We will process the data that you provide us with through the “Contact” and “Newsletter” forms, as well as through other means related to the use or services offered on the Website, such as, for example, to apply for a job offer. This data generally includes the name, city and email address in general cases and, when applying for a job offer, will include various curriculum vitae data.
2.2. In addition to such data, we may process other personal data that you provide to us or that is generated in the course of our communications or contracting for services or products.
2.3. We will also collect data through cookies for analytical and advertising purposes. You can find more information in our Cookies Policy.
2.4. Finally, please note that, by providing us with your data, you guarantee the truthfulness and/or accuracy of these data. Consequently, you will be responsible for any false or inaccurate statements you make, as well as for any damage caused to Isauki Superfood or third parties as a result of these.
Purpose and legitimacy of the processing
To provide you with services
To provide you with the services you request from us (e.g., sale of a product) and/or to respond to your requests for information.
We will also process your data to fulfil our legal obligations (tax, accounting, money laundering, etc.) as well as to fulfil your rights (e.g. warranties or returns).
To send you electronic commercial communications and newsletters. Please note that you may object at any time by sending an e-mail to firstname.lastname@example.org or by following the instructions contained in each communication.
To send you satisfaction surveys about our products and services.
To carry out data analysis (which will not identify any individual) of your browsing on our website.
Behavioural advertising and social networks
Show you advertising while browsing by using cookies based on your preferences, as well as based on the interactions you make on social networks through our Website. Where appropriate, the relevant social networks may process your data in accordance with their privacy policies.
-Art. 6.1.(b) General Data Protection Regulation (“GDPR”)
Need to offer and provide you with the services or information you request from us.
-Art. 6.1.(c) GDPR
Need to comply with our obligations and allow you to exercise your rights.
-Art. 21 LSSICE or Art. 6.1.(a) RGPDSIf you are a customer, we will rely on Art. 21 of Law 34/2002, of 11 July, on information society services and electronic commerce (“LSSICE”) to send you information by digital means about our services/products and news. If you are not a customer, we will only send you this information if you give us your consent or request to register for our newsletter.
-Art. 6.1.(f) GDPR
Legitimate interest to conduct surveys about our business in order to improve our services.
-Art. 6.1.(a) GDPR
-Art. 6.1.(b) RGPD and Art. 6.1.(f) RGPD
Need to manage your application as part of the pre-recruitment process. In case you are not finally hired, we will keep your data for a reasonable period of time in case you suggest another offer that fits your profile, based on legitimate interest.
Retention of data
4.1. We will retain your data for the duration of our relationship. However, if we observe a prolonged period of inactivity, we will also delete your data to the extent that the processing is no longer adequate, relevant and necessary for the purposes intended for the processing. This rule applies unless you request us to delete your data.
4.2. Once the processing of your data is no longer adequate, relevant and limited to what is necessary for the purposes for which it is processed, we will keep your data properly blocked and only for potential legal liabilities, as required by law.
4.3. Finally, we inform you that we will take all reasonable steps to ensure that your data is rectified or deleted when it is inaccurate.
5.1. We will not make individual decisions based solely on automated processing that produce legal effects on you or significantly affect you in a similar way.
6.1. As a general rule, we will not disclose your data to third parties. However, in certain cases we may need to disclose your data to:
Suppliers: We will provide access to your personal data to suppliers who need such access in order to provide services to us, such as administrators, IT or cloud providers or hosting providers, CRM providers, partners, logistics companies or postal services, telecommunications providers, payment gateways, financial institutions or accounting and legal advisors. These third parties will act as our (sub)processors and will have in place appropriate safeguards to protect your personal information including a corresponding contract of commissioned processing in accordance with Art. 28 GDPR.
Others: We will share your personal data with third parties in case we are required to do so by law, by an administrative or judicial authority or for the good of public interest or public order, such as for example to comply with anti-money laundering and anti-terrorism regulations, tax obligations or social security obligations.
6.2. Finally, please note that we may also share your information if we believe it is reasonably necessary to enforce the terms and policies of the Website or to protect our operations or Users. In addition, in the event of a business restructuring, merger, spin-off or sale, we may transfer all of your personal information to the third party resulting from such transaction.
7.1. We do not make international transfers of data. However, as is now commonplace, many IT providers have their servers outside the European Economic Area (EEA). Therefore, some of our current providers (such as, for example, Google, MailChimp, Freshsales or Odoo and others that we may contract in the future) are located or provide services from outside the EEA. In this case, and only where strictly necessary to operate the Website and/or provide you with the services you request from us, we will make international transfers in the course of providing the requested services to such suppliers.
7.2. In any event, please note that we will enter into such documents with all such suppliers as may be necessary to ensure that they provide adequate safeguards equivalent to those in the EU for such international transfers.
8.1. What rights do you have?
As provided by the General Data Protection Regulation (GDPR) and the Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights, we inform you that you have the following rights:
Access: You have the right to access your data to find out what personal data concerning you we are processing.
Rectification or erasure: In certain circumstances, you have the right to rectify inaccurate personal data concerning you that is processed by us or even to ask us to erase it.
Restriction: In certain circumstances, you have the right to ask us to limit the processing of your data, in which case we inform you that we will only keep them for the exercise or defence of claims.
Portability: In certain circumstances, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transfer it to another data controller.
Objection: In certain circumstances and for reasons relating to your particular situation, you have the right to object to the processing of your data in which case, we would stop processing it except for compelling legitimate reasons or for the exercise or defence of possible claims. You may object to receiving commercial communications at any time.
8.2. How can you exercise your rights?
You may exercise your rights at any time by contacting Superfood as indicated in Section 1 [include link], indicating “Privacy” in the subject line. In order to verify your identity, we may require you to send us certain additional information or documentation, such as a copy of your ID card or similar identification document.
The exercise of these rights is free of charge. However, please note that a fee may be charged where requests are unfounded, excessive or repetitive.
8.3. Do you have the right to withdraw your consent?
Yes, you may at any time withdraw your consent to the processing of your data for one, several or all of the above purposes which are based on your consent to their processing. Please note that, if applicable, this may alter or even lead to the termination of the provision of services.
8.4. Do you have the right to complain?
Yes, you may at any time complain to the competent supervisory authority depending on your place of residence. In the case of Spain, the Spanish Data Protection Agency (AEPD). You can consult the different supervisory authorities by contacting us at email@example.com.
In any case, before initiating any claim, please contact us by e-mail (firstname.lastname@example.org) in order to try to resolve any discrepancy or dispute amicably.
8.5. How soon will we reply?
We will respond to your requests as soon as possible and, in any case, within one month. If this is not the case, we apologise and ask you to contact us again so that we can attend to you and correct any technical errors that may have prevented us from responding to you within the deadline.