Controller	Industrial Pastelera San Narciso, S.A.U.
Purposes	Responding to requests; information about products and services; providing agreed services.
Legal basis	Compliance with legal obligations; performance of a contract; consent; legitimate interest (depending on the purpose and processing in question)
Recipients	We share your personal data with the third-party data processors that are listed in detail in the additional information.
Rights	You have the right to access, rectify and erase data and other rights as explained in the additional information.
Additional information	You can consult detailed additional information about data protection on our website: http://inpanasa.com/privacidad

DETAILED ADDITIONAL PERSONAL DATA PROTECTION INFORMATION

Industrial Pastelera San Narciso, S.A.U. informs users of its webpage http://inpanasa.com/ through this Privacy Policy of the processing and protection of users’ personal data that might be collected as a result of them browsing this website or contracting the services provided on it. By using this website, the user accepts this Privacy Policy.

Industrial Pastelera San Narciso, S.A.U. has taken all necessary measures to ensure the security, integrity and confidentiality of the data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the free movement of such data, and for anything not provided for in it by Spanish Organic Data Protection and Digital Rights Protection Act 3/2018, of 5 December, Spanish Royal Decree 1720/2007, of 21 December, Approving the Implementing Regulations for the Organic Data Protection Act, and Spanish Information Society and Electronic Commerce Services Act 34/2002, of 11 July.

We collect and process the personal data from each user that are necessary to manage and maintain some of the services provided through the registration forms on this website. The processing of these data is governed by this Privacy Policy.

Who is the controller of your data?

The controller of the personal data that users provide when accessing and using this website is, in its capacity as the owner of the website, Industrial Pastelera San Narciso, S.A.U., with tax identification number (CIF) A17029067, with its registered office at Urbanización Mas Aliu; c/Barcelona, 5-9, Aiguaviva 17181 Girona, Spain, entered in the companies registry of Girona, Vol. 404, Folio 143, Sheet GI-7973, 2nd entry, telephone 972241911 and email magdalenas@inpanasa.com

Industrial Pastelera San Narciso, S.A.U. undertakes to implement the computer security measures specified in the regulations mentioned above to prevent undue access to or use of the data or their manipulation, deterioration or loss.

How long do we keep your data?

Industrial Pastelera San Narciso, S.A.U., as controller, undertakes to store and manage the personal data and information collected through this website with due confidentiality. We will only store data for the time needed to comply with the purpose for which we collect the data (normally to provide a service or reply to a request by you), and to comply with any legal obligation that derives from the processing of the data in accordance with the data storage policies of Industrial Pastelera San Narciso, S.A.U. When the data are no longer needed for the purpose for which they were collected, they will be deleted when possible. If this is not possible, they will be blocked, being available to Judges and Courts or the competent public administrations, in particular, the data protection administrations for attending to possible liabilities deriving from the processing of the data.

Why do we process your data?

The operations, handling and technical procedures, whether automated or non-automated, that make possible the collection, storage, modification, transfer and other actions performed on personal data, are classed as personal data processing.

At Industrial Pastelera San Narciso, S.A.U., we process the personal data that users provide through http://inpanasa.com/ for the purpose of including these users in our contacts list, managing the requested commercial relationship and using this information as a means for the company to make contact. The processing of the data that are collected also involves managing the sending of information that is requested from us and being able to respond to consultations or questions the user sends through the website, in turn making it possible to provide interested parties with offers of services that might be of interest to them.

The fields in databases and in the contact form must be completed for Pastelera San Narciso, S.A.U. to be able to comply with the purposes mentioned above. We take the principle of data minimization very seriously and so we only ask for data that allow us to contact users of the website to reply to their requests.

Users can object to the sending of commercial communications at any time by emailing dpd@inpanasa.com.

What are the legitimate grounds that allow us to process your data?

The data you provide are processed on the basis of the following legal grounds that justify this processing:

• Performance of a contract

The contracting of services from Industrial Pastelera San Narciso, S.A.U. and the performance of the requested professional order, the terms and conditions of which will be made available to the user prior to entering into a contract. We process your personal information so that we can enter into and perform our contracts. So that the requested professional relationship can be carried out, data subjects must provide their data.

• Consent

Free, specific, informed and unambiguous consent, as after reading this Privacy Policy, you will be informed of it and so can accept it, if you are in agreement with it, through a declaration or a clear affrmative action, such as ticking a box provided for this purpose.

• Compliance with a legal obligation

We can process your personal data to comply with various legal and regulatory obligations. These include but are not limited to: General Consumer and User Protection Act 26/1984, of 19 July, General Tax Act, Corporate Income Tax Act, Accounts Auditing Act, Value Added Tax Act, Civil Code, Commercial Code.

• Legitimate interest

We process personal data for the purpose of marketing our products and services, improving our management of internal risks and defending our legal rights, including personalising our offer of products and services for you or the body you represent by improving the quality of our products or services; advertising products or services that match your circumstances and profile.

If a data subject does not provide the data in question or the data are erroneous or inaccurate, we will be unable to respond to the request, and it will be impossible to provide the requested information or carry out the contracting of the services. Consequently, Industrial Pastelera San Narciso, S.A.U. as the controller will be released from any liability that might derive from not performing the professional assignment or for the consequences deriving from this inaccurate or erroneous information.

With which third parties do we share your data?

To comply with the purposes mentioned above, we will only share your personal data with the following third parties (these are examples and this list is not exhaustive):

• We will make the disclosures that can be required by law to:
  • The State Tax Administration Authority
  • Judges and Courts
  • Banking and Finance Bodies
  • Bodies dedicated to fulfilment or non-fulfilment of financial obligations
  • Other public administrations with competence in the matter
• The data processors are suppliers who process personal data on behalf of Pastelera San Narciso, S.A.U. in the exercise of the provision of a service. These are listed below:
  • Suppliers of management services, such as consultants, agents undertaking business with government departments, and advisors: COMPUTAPAGE, S.L.; CANOVAS 1852, S.L. and LABOREX ASSESSORS LAB. S.L.
  • Suppliers of compliance services, such as auditors or certifying bodies: AUDITORS ASSOCIATS, S.L. – CATAUDIT and PERE SIMÓN CASTELLANO (ICAB 39341).
  • Suppliers of IT, such as telecommunications infrastructure services, telecommunications, software, hardware, consultants, digital communications equipment or services: IN2INSOLUCIONSTECNOLOGIQUES, S.L.; JORDI ROCA CASAS and RAMON BERNÁCER DE LAS HERAS.
  • Providers of general services, such as maintenance, security, cleaning and auxiliary services.
  • Hosting and collaborative work providers: Microsoft Dynamics NAV 17 (ERP cloud) and Google G-Suite.

In general, Industrial Pastelera San Narciso, S.A.U. will not disclose personal data to third parties that are not listed above, with the exception of when provision of a service involves a need for a contractual relationship with a data processor and this is strictly necessary to manage and maintain the relationship between the user and the company in question, following express authorisation by the user. This will only be done for the time needed to enable the performance of the order contract, and in the same conditions and with the same responsibilities that are demanded of the controller. Once the task is complete, the processor will return the personal data to the controller and will delete any copies in its possession.

You can consult the cookies policy with recipients at http://inpanasa.com/cookies

What are your data protection rights?

You can exercise at all times, in the terms laid down by the applicable legislation, your rights of access, rectification or erasure of data, request restriction of their processing, object to processing, request the portability of your data (in our case, this right does not apply given that it can only be exercised if the legitimating grounds are consent or a contract for a service provided through electronic services or digital media, which does not correspond to the provision of services by our company) as well as revoking consent that has been given, rights recognised in the Regulation (EU) mentioned above. You can exercise these rights by contacting the Data Protection Officer or DPO of Industrial Pastelera San Narciso, S.A.U. at the postal address given above, or by sending an email to the following address: dpd@inpanasa.com

To exercise these rights, you must verify your identity by giving your name and surname(s), providing a photocopy of your national identity card or an equivalent identifying document that demonstrates your identity, stating what your application specifically requests, giving your contact address and the date and your signature.

In addition, you may lodge a complaint with the Spanish data protection agency (Supervisory authority competent in this matter), especially if you are not satisfied with the exercise of you rights, in writing at C/Jorge Juan, nº 6, 28001 – Madrid, Spain, or through the website: https://www.agpd.es