PRIVACY POLICY

DETAILS OF OUR PRIVACY POLICY

1.- GENERAL INFORMATION
The purpose of this "Privacy and Data Protection Policy" is to disclose the conditions governing the collection and processing of your personal data by our entity or corporate group to ensure your fundamental rights, honor and freedoms, all in compliance with current regulations governing the Protection of Personal Data according to the European Union and the Spanish Member State.

In accordance with these regulations, we need to have your authorization and consent for the collection and processing of your personal data, so below we provide you with all the details of interest to you regarding how we carry out these processes, for what purposes, which other entities may have access to your data and what your rights are.

For all the reasons stated above, once you have reviewed and read our Data Protection Policy, it is essential that you accept it as proof of your agreement and consent.

2.- DATA CONTROLLER
Who collects and processes your data?

The Data Controller is the natural or legal person, public or private, or administrative body, which alone or jointly with others determines the purposes and means of the processing of personal data; in the event that the purposes and means of the processing are determined by the Law of the European Union or of the Spanish Member State.

In this case, our identifying data as Data Controller are as follows:

ONE SUPERMARKET

How can you contact us?

Address of our offices: Av.Doctor Fleming 25bj. Churra 30110 Murcia Spain
Email: info@onesupermarket.es - Phone: 644989309

3.- SECURITY MEASURES
What do we do to ensure the privacy of your data?


Our entity or corporate group adopts the necessary organizational and technical measures to guarantee the security and privacy of your data, to prevent its alteration, loss, processing or unauthorized access, depending on the state of the technology, the nature of the data stored and the risks to which they are exposed.

Among others, the following measures stand out:

- Ensure the ongoing confidentiality, integrity, availability and resilience of treatment systems and services.
- Restore the availability and access to personal data quickly, in the event of a physical or technical incident.
- Regularly verify, evaluate and assess the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
- Pseudonymize and encrypt personal data, if it is sensitive data.

4.- PURPOSE OF THE TREATMENT
Why do we want to process your data?


We need your authorization and consent to collect and process your personal data, so below we detail the intended uses and purposes.

Ecommerce customer management Electronic commerce; Customer/supplier management, accounting, tax and administration
Labor management; Control of labor presence; Labor training; Management of payrolls and labor contracts; Prevention of occupational risks; Human resources; Labor supervision and control
Supplier Management Contact and commercial activities with suppliers
Commercial communications Marketing, advertising and commercial prospecting

How long do we retain your data?

We use your data for the time strictly necessary to fulfill the purposes indicated above. Unless there is a legal obligation or requirement, the expected retention periods are:

Ecommerce customer management : For a period of 6 years from the last confirmation of interest. Article 30 Commercial Code
Employment management: For a period of 5 years from the last confirmation of interest. Article 21 of Royal Legislative Decree 5/2000
Supplier management: For a period of 6 years from the last confirmation of interest. Article 30 of the Commercial Code
Commercial communications: As long as their deletion is not requested by the interested party

5.- LEGITIMATION OF THE TREATMENT
Why do we process your data?

The collection and processing of your data is always legitimised by one or more legal bases, which we detail below:

Ecommerce customer management: (Art. 6.1.b GDPR) Existence of a contractual relationship with the interested party through a contract or pre-contract
Employment management: (Art. 6.1.b GDPR) Existence of a contractual relationship with the interested party through a contract or pre-contract

Supplier management: (Art. 6.1.b GDPR) Existence of a contractual relationship with the interested party through a contract or pre-contract
Commercial communications: (Art. 6.1.a GDPR) Consent of the interested party; (Art. 6.1.b GDPR) Existence of a contractual relationship with the interested party through a contract or pre-contract

6.- RECIPIENTS OF YOUR DATA
To whom do we transfer your data within the European Union?


Sometimes, in order to comply with our legal obligations and our contractual commitment to you, we are obliged and required to transfer some of your data to certain categories of recipients, which we specify below:

Ecommerce customer management : Banks, savings banks and rural banks
Employment management: Social Security Agencies; Tax Administration; Banks, savings banks and rural banks
Supplier management: Tax Administration; Banks, savings banks and rural banks

7.- RIGHTS OF INTERESTED PARTIES
What rights do you have?

Current data protection regulations protect you with a series of rights in relation to the use we give to your data. Each and every one of your rights are personal and non-transferable, meaning that they can only be exercised by the data owner, after verifying their identity.

Below we indicate your rights:

Request ACCESS to your personal data
Request the RECTIFICATION of your data
Request DELETION or elimination of your data (right to be "forgotten")
LIMIT or OPPOSE the use we give to your data
Right to PORTABILITY of your data for cases of telecommunications or internet services.
Right to WITHDRAW your consent at any time
Right to file a COMPLAINT regarding data protection before the Control Authority: Spanish Data Protection Agency

How can you exercise your rights in relation to your data?

To exercise your rights of access, rectification, deletion, limitation or opposition, portability and withdrawal of your consent, you can do so in the following manner:

Responsible: ONESUPERMARKET
Address: Av.Doctor Fleming 25bj churra 30110 Murcia Spain
Phone: 644989309
Email: info@onesupermarket.es
Website: https://www.onesupermarket.es/

How can you file a claim?

In addition to the rights that assist you, if you believe that your data is not being collected or processed in accordance with current Data Protection regulations, you may file a claim with the Control Authority, whose contact details are provided below:

Spanish Data Protection Agency
C/. Jorge Juan, 6. 28001, Madrid (Madrid), Spain
Email: info@aepd.es - Phone: 912663517
Web: https://www.aepd.es

8.- CONSENT AND ACCEPTANCE
Acceptance of this document indicates that you understand and accept all the clauses of our privacy policy and therefore authorize the collection and processing of your personal data under these terms. This acceptance is made by activating the "Read and Accept" checkbox of our Privacy Policy.