PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, agrogestion.net (hereinafter also referred to as the “Website”) is committed to adopting the necessary technical and organizational measures, according to the appropriate level of security, based on the risk of the data collected.

Laws incorporated into this Privacy Policy

This privacy policy is adapted to the current Spanish and European regulations on the protection of personal data on the internet. Specifically, it adheres to the following standards:

• Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, concerning the protection of individuals with regard to the processing of personal data and the free movement of such data (GDPR).
• Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007, of December 21, approving the Development Regulation of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
• Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The entity responsible for the processing of personal data collected is CIF: B-06132286 (hereinafter referred to as the Data Controller). Their contact details are as follows:

• Address: Calle Salvador de Madariaga, nº 2-A Entreplanta Izquierda. 06011 Badajoz
• Contact phone: 924 24 55 08
• Contact email: cgragera@agro-gestion.es

Personal Data Registration

In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by Agrogestión Extremeña through the forms provided on its pages will be included and processed in our file to facilitate, expedite, and fulfill the commitments established between Agrogestión Extremeña and the User or to maintain the relationship established through the forms completed by the User, or to address a request or inquiry made by the User. In accordance with the GDPR and the LOPD-GDD, unless the exception provided for in article 30.5 of the GDPR applies, a record of data processing activities is maintained, specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.

Principles applied to the processing of personal data

The processing of the User’s personal data will be governed by the following principles as outlined in Article 5 of the GDPR and in Article 4 and subsequent of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights:

• Lawfulness, fairness, and transparency principle: The User’s consent will always be required, and information about the purposes of the data collection will be provided transparently.
• Purpose limitation principle: Personal data will be collected for specified, legitimate, and explicit purposes.
• Data minimization principle: The data collected will only be those necessary for the purposes for which they are processed.
• Accuracy principle: Personal data must be accurate and kept up to date.
• Storage limitation principle: Personal data will only be kept for as long as necessary for the purposes for which they are processed.
• Integrity and confidentiality principle: Personal data will be processed in a manner that ensures their security and confidentiality.
• Accountability principle: The Data Controller is responsible for ensuring the compliance with the above principles.

Categories of personal data

The categories of data processed by Agrogestión Extremeña are strictly limited to identifying data. No special categories of personal data, as defined in Article 9 of the GDPR, are processed.

Legal basis for processing personal data

The legal basis for processing personal data is the consent of the User. Agrogestión Extremeña commits to obtaining the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw their consent at any time. Withdrawing consent is as easy as giving it. As a general rule, the withdrawal of consent will not affect the use of the Website.

In cases where the User is required to provide data via forms for inquiries, requesting information, or for purposes related to the Website content, the User will be informed if any fields are mandatory because they are essential for the proper development of the operation.

Purposes of personal data processing

Personal data are collected and processed by Agrogestión Extremeña to facilitate, expedite, and fulfill the commitments established between the Website and the User or to maintain the relationship established through the forms completed by the User or to address a request or inquiry.

Additionally, data may be used for commercial purposes, operational, and statistical customization, and activities related to the social objective of Agrogestión Extremeña, such as data extraction, storage, and marketing studies to adjust the content offered to the User, as well as to improve the quality, operation, and navigation of the Website.

When personal data are obtained, the User will be informed about the specific purposes for which their data will be used.

Data retention periods

Personal data will only be retained for the minimum necessary period to fulfill the purposes of processing and, in any case, for the following period: 12 months, or until the User requests their deletion.

When personal data are collected, the User will be informed about the retention period or, if that is not possible, the criteria used to determine this period.

Recipients of personal data

The personal data of the User will be shared with the following recipients or categories of recipients:

If the Data Controller intends to transfer personal data to a third country or international organization, the User will be informed about the specific third country or international organization, as well as whether the Commission has made an adequacy decision.

Personal data of minors

In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, only individuals over 14 years of age can provide valid consent for the processing of their personal data by Agrogestión Extremeña. If the User is under 14 years old, consent from their parents or guardians will be necessary, and this will only be considered lawful if authorized by them.

Confidentiality and security of personal data

Agrogestión Extremeña commits to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, to guarantee the security of personal data and to prevent accidental or unlawful destruction, loss, alteration, unauthorized communication, or access to personal data.

The Website has an SSL (Secure Socket Layer) certificate, ensuring that personal data are transmitted securely and confidentially, as the transmission of data between the server and the User, and in feedback, is fully encrypted.

However, since Agrogestión Extremeña cannot guarantee the invulnerability of the internet or the total absence of hackers or others who may gain fraudulent access to personal data, the Data Controller commits to notifying the User without undue delay if there is a data security breach likely to result in high risks to the rights and freedoms of individuals. A data breach is understood as a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized transmission, or access to personal data.

Personal data will be treated as confidential by the Data Controller, who commits to ensuring that this confidentiality is respected by employees, associates, and anyone who has access to the data.

Rights derived from the processing of personal data

The User has the following rights over Agrogestión Extremeña regarding their personal data:

• Right of access: The User has the right to obtain confirmation as to whether Agrogestión Extremeña is processing their personal data and, if so, to receive information about their specific data and the processing carried out.
• Right to rectification: The User has the right to correct inaccurate or incomplete personal data.
• Right to erasure (“right to be forgotten”): The User has the right to request the deletion of their personal data when these are no longer necessary for the purposes for which they were collected or processed.
• Right to restriction of processing: The User has the right to limit the processing of their personal data.
• Right to data portability: The User has the right to receive their personal data in a structured, commonly used, and machine-readable format, and to transfer it to another data controller.
• Right to object: The User has the right to object to the processing of their personal data.
• Right not to be subject to automated decision-making, including profiling: The User has the right not to be subjected to decisions based solely on automated processing of personal data, including profiling.

The User may exercise these rights by sending a written communication to the Data Controller at the following address or email:

• Postal address: Calle Salvador de Madariaga, nº 2-A Entreplanta Izquierda. 06011 Badajoz
• Email address: cgragera@agro-gestion.es

Links to third-party websites

The Website may contain hyperlinks or links to third-party websites that are not operated by Agrogestión Extremeña, which are the responsibility of the respective owners of those sites.

Complaints to the supervisory authority

If the User considers that their personal data is being processed in violation of the applicable regulations, they have the right to judicial protection and may file a complaint with the supervisory authority. In Spain, the supervisory authority is the Spanish Agency for the Protection of Personal Data (https://www.aepd.es).

Changes to the Privacy Policy

Agrogestión Extremeña reserves the right to modify or update this Privacy Policy at any time. When changes are made, the date of the last update will be revised, and the new version will be posted on this page. The User is encouraged to regularly check this Privacy Policy to stay informed about how we protect personal data.