PRIVACY POLICY
Below we provide you with all the necessary information regarding our Privacy Policy in relation to the personal data we collect.
- Controller of Your Personal Data
ISF BY FARM FAES, S.L. (B-67772194) (hereinafter, “ISF”)
Plataforma Logística de Huesca PLHUS, Ronda de Valdabra, 9–11,
22197 Huesca, Spain
Contact email: rgpd@farmfaes.com
- Specific Personal Data That Will Be Collected
The personal data that we will collect and process are those provided by users in the event that data collection forms exist, as well as the data that may be sent to us when using any contact sections that may exist.
Such personal data will be adequate, relevant, and not excessive, as required in order to fulfill the purposes set out below.
- Purposes, Legal Basis, and Retention of the Processing of Your Personal Data
CUSTOMERS OR POTENTIAL CUSTOMERS
Purpose: To maintain contact and communication with the customer, manage the contractual and/or commercial relationship, including after-sales services, and manage and invoice the services and/or products requested. Likewise, customers may be sent advertising or promotional communications in accordance with the provisions of Article 21 of Law 34/2002 of July 11 on Information Society Services and Electronic Commerce.
Legal basis: The legal basis that legitimizes the processing of our customers’ personal data is the contractual relationship in each case.
Retention: Until the termination of the contractual relationship and, subsequently, for the legally required periods.
- SUBSCRIPTION TO OUR WEBSITES
Purpose: The provision of the services whose performance has been requested by the data subject, in each case, in accordance with the detailed description on each of the websites.
Legal basis: The user’s consent when requesting subscription on the website for the provision of services and by checking the box accepting the privacy policy.
Retention: Until the data subject withdraws consent and requests cancellation of the service.
- CONTACT FORM
Purpose: To provide you with a means through which you may contact us and to respond to your information requests.
Legal basis: The user’s consent when requesting information through our contact form and by checking the box accepting the privacy policy.
Retention: Once your request has been resolved through our form or answered by email, provided it has not generated new processing.
- SENDING OF EMAILS
Purpose: To respond to your requests for information, address your inquiries, and answer your questions or concerns.
Legal basis: The user’s consent when requesting information via email.
Retention: Once your request has been answered by email, provided it has not generated new processing.
- SUBSCRIPTION TO OUR NEWSLETTERS
Purpose: Sending informational and advertising communications related to any of the products and/or services of the Faes Group, including by electronic means such as email.
Legal basis: The user’s consent when subscribing to our newsletters and/or commercial communications and by checking the box accepting the privacy policy.
Retention: Until the data subject withdraws consent and requests cancellation of the service.
- SWEEPSTAKES AND CONTESTS
Purpose: Participation in sweepstakes and/or contests organized by ISF.
Legal basis: The user’s consent when subscribing to such sweepstakes and/or contests and by checking the box accepting the privacy policy.
Retention: During the duration of the sweepstakes and/or contests.
- USERS SUBSCRIBED TO COURSES
Purpose: To provide the course requested by the user.
Legal basis: The contract entered into with the user to deliver the course in which the user has enrolled.
Retention: For the duration of the course in question.
- VISITOR WI-FI ACCESS
Purpose: To provide visitors with internet access via their electronic devices and, additionally, as a necessary security measure in order to identify the devices connected to the ISF network.
Legal basis: The user’s consent when accessing the Wi-Fi network and by checking the box accepting the privacy policy.
Retention: For the time strictly necessary for visitor access to the Wi-Fi network.
- SOCIAL MEDIA
ISF maintains various profiles on some of the main social media platforms. ISF is responsible for the personal data that users send to it privately.
The processing of data of individuals who become followers of ISF’s official pages on different social networks, who contact ISF through such pages, or who perform any linking or connection action through those social networks, shall be governed by this section and by the privacy and usage policies of the corresponding social network in each case.
Accordingly, the data processing carried out by ISF within each social network shall be limited to the maximum extent permitted by the social network for corporate profiles.
Purpose: To properly manage ISF’s presence on social media, inform users of ISF’s activities, products, or services, as well as any other purpose permitted by the regulations of the relevant social network.
- Recipients of Your Personal Data
ISF undertakes not to sell, disseminate, or otherwise transmit users’ personal data to third parties, except in the cases indicated in this Privacy Policy.
Your personal data may be disclosed to other companies within the Faes Group for internal administrative purposes, including the processing of personal data of customers or employees.
Likewise, ISF may share personal data with IT and logistics service providers, who are contractually obligated to protect the confidentiality and security of the personal data to which they have access and who have their own applicable privacy conditions.
Personal data may also be accessed by regulatory bodies, law enforcement authorities, public bodies, or national or international courts, or transferred to them, when required by applicable law or upon request.
By accepting this Privacy Policy, users expressly and unequivocally authorize the communication of their data to companies within the Faes Group, acknowledging that this may, in certain cases, involve an international transfer of data to a country outside the European Union, and providing their unequivocal consent to such transfer.
If we transfer users’ personal data outside the European Economic Area (EEA), we guarantee adequate protection by:
(i) applying the level of protection required under applicable local data protection legislation, and
(ii) acting in accordance with our internal policies and standards.
- Rights Regarding Your Personal Data
The rights described in this section may be exercised by sending a request to ISF at the registered office address indicated above or by email to rgpd@farmfaes.com, attaching a copy of a valid identification document.
Users may withdraw their consent at any time. Likewise, users may exercise the following rights:
- Right of access to personal data
- Right to rectification of inaccurate data and/or right to erasure
- Right to restriction of processing, whereby data will only be processed for the exercise or defense of legal claims
- Right to object to processing, except where compelling legitimate grounds or legal claims require continued processing
- Right to data portability, receiving personal data in a structured, commonly used, machine-readable format and having it transferred to another controller
If you disagree with ISF regarding the processing of your data, you may file a complaint with the competent data protection authority. In Spain, this is the Spanish Data Protection Agency (AEPD): www.aepd.es.
- Source of Personal Data
Personal data processed by ISF originate either directly from the data subject or from other companies within the Faes Group.
Categories of data processed:
- Identification data
- Identification codes or credentials
- Postal or electronic addresses
- Commercial information
- Financial data
Additionally, specially protected personal data, such as genetic data and health-related data, may be processed and are duly protected through appropriate security measures.
- Technical and Transactional Data
The following categories of technical and transactional data may be collected:
- Information about the user’s browser and device
- Statistics relating to website usage
- Usage data
- Any other information provided when using our websites
Such data, including personal data generated through cookies (see Cookie Policy), are collected in pseudonymized form and are subject to objection rights as described in the Cookie Policy.
Purpose: These data are not used to identify individual visitors, but to gain practical insight into how users interact with our websites in order to improve them.
- Third-Party Personal Data
With regard to third-party data, users must respect the privacy of others. Users may only consent to the processing of their own personal data, not that of third parties.
If you provide third-party personal data, you are solely responsible for obtaining their prior and express consent and for informing them of the inclusion of their data in our records.
- What Happens If You Do Not Provide Personal Data?
Providing personal data is voluntary. However, failure to provide such data may prevent us from properly assisting you or providing our services.
- Updating Your Personal Data
By voluntarily providing personal data, users guarantee that they are authorized to do so and that the information is accurate, truthful, and up to date. Users must inform ISF of any changes; otherwise, ISF shall not be responsible for data accuracy.
- Linked Websites and Third-Party Applications
Our websites may contain hyperlinks that allow access to third-party websites. These sites are not under ISF’s control and have different privacy policies. ISF’s Privacy Policy applies only to personal data obtained through ISF websites and services. ISF assumes no responsibility for third-party websites.