Identity of the person responsible for the website

WWW.CEREALTO.COM (hereinafter, the ‘Website’) is a domain registered by Cerealto Industrial Spain, S.A., with registered office at Avenida Burgos, 29, Venta de Baños, 34200, Palencia, and Tax Identification Number A34002527 (hereinafter, ‘The Company’).

Motivation

The Company respects the privacy rights of its Users and recognises the importance of protecting the personal data that the Company collects about its Users.

The purpose of this document is to inform Website Users about the processing of personal data carried out on this Website.

Purpose of processing

Generally, persons making use of the Website do so without having to provide any personal data. However, in order to request information, Users must, in certain cases, provide certain personal data. The Company guarantees the confidentiality of the personal data provided by Users, in accordance with the provisions of the regulations on Personal Data Protection and on Information Society Services and Electronic Commerce.

The Company will process the information provided by the User for different purposes, depending on how the data is collected:

  • Manage the contractual or commercial relationship established between the Company and the User, based on the performance of the contract (Art. 6.1.b GDPR).
  • To provide the services or information requested by the User, based on the performance of the contract or the implementation of pre-contractual measures. (Art. 6.1.b GDPR).
  • Send information about new products or services that may be of interest to the User, by any means, including electronic means, based on the legitimate interest of the Company. (Art. 6.1.f GDPR).
  • If you apply as a candidate for any of the Cerealto Group companies, we will evaluate your application for current and future selection processes, based on the consent given by the User. (Art. 6.1.a GDPR).
  • Furthermore, simply by accessing the Website, the Company collects the IP address and other data relating to the connection and its origin. The IP address is a code that identifies the User's internet connection at a specific time. Only the User's internet service provider can identify the subscriber who was assigned an IP address at a specific time. Due to the nature of the server that supports the Website, the User's IP address is automatically recorded along with the date and time of access. This data is used solely to manage the normal use of the Website and to perform statistical analyses on the use of the Website. The legal basis that legitimises the processing of the IP address is the technological necessity to enable the provision of the Website.

Recipients of the information

The data provided by the USER to the Company will not be communicated to any third party, unless:

  • The assignment is authorised by law.
  • La cesión tenga por destinatario alguna de las empresas del Grupo Cerealto con la finalidad de atender su solicitud, pudiendo estar ubicadas en terceros países, incluso en aquellos donde la legislación no exige un nivel de seguridad adecuado a criterio del Director de la Agencia Española de Protección de Datos. Las entidades que conforman el grupo empresarial Cerealto son: Cerealto Global, S.L., Molinos de Castilla la Mancha, S.L.U, Imasdea, Innovaciones y Desarrollos Alimentarios, S.L.U., Cerealto Industrial Spain, S.A.U., Cerealto Aguilar, S.L.U., Cerealto VB6, S.L.U., Cerealto Venta de Baños,S.A.U., Cerealto Pasta VB3, S.L.U., Cerealto VB1, S.L.U., Cerealto Snacks VB2, S.L.U., Cerealto Jaén, S.L.U., Cerealto Spain Foods, S.A.U., Cerealto Industrial International, S.L.U., Cerealto Foods Corporate, S.L.U., Cerealto UK Ltd., Hill Biscuits Limited, Ginger Acquisition Company Limited, Cerealto Tepeji, S. de R.L. de C.V., Cerealto USA, LLC, Fresca Holding Company , LLC y Cerealto Sintra Foods, S.A.
  • The data are requested by the Ombudsman, the Public Prosecutor's Office or the Judges or Courts or the Court of Auditors, in the exercise of the functions attributed to them.

Data processing period

The data provided will be kept for the time necessary to fulfil the purpose for which it was collected and to determine any possible liabilities that may arise from that purpose and from the processing of the data, in addition to the periods established in the regulations on archives and documentation.

Exercise of rights

Data protection regulations guarantee Users the following rights:

  • Access: Allows the User to know what information is held, where it has been obtained from, to whom it has been provided and for what purposes it has been processed.
  • Rectification: Allows the User to rectify any erroneous or outdated data.
  • Deletion: Allows the User to request that their data no longer be processed.
  • Objection: Allows the User to stop their data from being used for a specific purpose.
  • Restriction: Allows the User to restrict the processing of their data, but in such a way that it is retained for a later purpose.
  • Portability: Allows the User to obtain a copy of their data in electronic format and, in certain circumstances, request that it be communicated to another service provider. This only applies to computerised processing carried out with the User's consent or for the fulfilment of a contract.
  • Withdrawal of consent: Allows the User to withdraw any consent they may have given for the processing of their data.

These rights require the ability to identify the User requesting them and link their identity to the data processed by the entity.

However, the entity cannot establish this link with any of the data it processes simply by accessing the website, unless the User can provide certain documentation that allows for their identification (for example, a certificate from their Internet service provider indicating the IP address assigned to the User on a specific date and time).

Users are informed that they may exercise the aforementioned rights before the entity, as well as revoke their consent for any processing they may have provided, by post to the above address or by email to dpo@cerealto.com. Likewise, if you consider that your data has been processed inappropriately, you have the right to lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6. 28001 – Madrid www.aepd.es).

Commitments of the USER

The USER guarantees that he/she is over 14 years of age and that the information provided is accurate and truthful.

The USER undertakes to inform the Company of any changes to the information provided by sending an email to ‘dpo@cerealto.com’, identifying themselves as a User of the Website and specifying the information to be modified.

Likewise, the User undertakes to keep passwords and identification codes secret and to inform the Company as soon as possible in the event of loss, theft or unauthorised access. Until such notification is made, the Company shall be exempt from any liability that may arise from the misuse of such passwords and identification codes by unauthorised third parties.

Third-party data provided by the User

In the event that the User provides personal data of third parties for any purpose, they guarantee that they have previously informed the affected parties and obtained their consent for the communication of their data to the Company.

The User guarantees that the persons concerned are over 14 years of age and that the information provided is accurate and truthful.

The Company will verify the consent of those affected by sending them an initial non-commercial email requesting verification of the consent given on their behalf by the User.

In the event that liabilities arise due to a breach of these conditions by the User, they shall be liable for the consequences of such breach.

Information about cookies.

The Company wishes to inform you that our website uses cookies to measure and analyse our users' browsing habits. Cookies are files that are installed on the device from which you access our website for the purposes described in our Cookie Policy. 

Further information

If the User has any questions about the information contained in our Privacy Policy, they may send an email to dpo@cerealto.com.