In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (hereinafter, GDPR), we inform you that any personal data provided will be incorporated into a Database owned by VINYA ELS VILARS SL (hereinafter, "THE COMPANY"), with CIF: B25503640, postal address: Camí Puig-Grós (25140), Arbeca - Lleida, and email: vinyaelsvilars@vinyaelsvilars.com.

For any inquiries related to the processing of personal data by THE COMPANY, you may contact our Data Protection Officer via the following email address: vinyaelsvilars@vinyaelsvilars.com.

"THE COMPANY" will collect the following data:

Commercial Contact: Handling inquiries and contact requests received through any means regarding THE COMPANY’s services, as well as maintaining business relationships.

• Collected data: Name, phone number, email, and inquiry.
• Purpose: To respond to information requests made through any means regarding THE COMPANY’s products and services, and to establish and maintain business relationships.
• Legal Basis: Based on the provision of consent, THE COMPANY is authorized to process the data provided in the contact request and in accordance with legitimate interest for the development and maintenance of business relationships.
• Retention Period: Data will be retained until the user requests deletion. Once deleted, they will remain available to public administration, judges, and courts for the legally established periods for handling and defending any responsibilities arising from the data processing.

Curriculum or Employment:  Submission of résumés via the website or by any other means to THE COMPANY.

• • Collected data: Professional area, name, surname, phone number, email, CV, cover letter, and any other personal data associated with the résumé or professional profile.
  • Purpose: Management of the applicant’s candidacy for published selection processes or other vacancies matching their professional profile that may arise in the future within THE COMPANY’s activities.
  • Retention Period: Data will be retained until the candidate is hired for a position or requests its deletion. Data will be kept as long as necessary for the intended purpose, and once completed, will remain available to public administration, judges, and courts for the legally established periods to handle and defend any responsibilities arising from data processing.
  • Legal Basis: Provision of the applicant’s consent.
  • Recipients: The data provided and derived from the selection process may be shared with:

-Third-party companies identified by the applicant for reference requests that may be necessary for the candidate's selection process.

Promotional or Newsletters: sending information, updates, notices, reminders, and promotions that may be of interest to the user, related to THE COMPANY’s activities.

• • Collected data: Email address, first and last name.
  • Purpose: Registering interested users to receive information, updates, and promotions, as well as to establish and maintain business relationships.
  • Legal Basis: The user’s consent for THE COMPANY to subscribe them to promotional services, and legitimate interest in the development of business relationships.
  • Retention Period: Data will be retained until the user requests cancellation or deletion. Once deleted, they will remain available to public administration, judges, and courts for the legally established periods to handle and defend any responsibilities arising from data processing.

Services: data provided for the provision of THE COMPANY’s services. The services will be identified at the time of data collection and registration.

• • Collected data: Email address, first and last name.
  • Purpose: Registering interested users to receive information, updates, and promotions, as well as to establish and maintain business relationships.
  • Legal Basis: The user’s consent for THE COMPANY to subscribe them to promotional services, and legitimate interest in the development of business relationships.
  • Retention Period: Data will be retained until the user requests cancellation or deletion. Once deleted, they will remain available to public administration, judges, and courts for the legally established periods to handle and defend any responsibilities arising from data processing.

Registration and Monitoring of Corporate Social Media Accounts: personal data provided or enabled on social media when becoming a follower of THE COMPANY's corporate accounts. THE COMPANY's corporate social media accounts are as follows:

• • FACEBOOK: https://www.facebook.com/vinyaelsvilars/

  • TWITTER: https://x.com/VinyaelsVilars/

  • INSTAGRAM: https://www.instagram.com/vinyaelsvilars/

  • TIKTOK: https://www.tiktok.com/@vinyaelsvilars

  • Collected data: First name, last name, ID number, contact address, home address, email, phone number, and other data provided by the respective social network.

  • Purpose: Social media monitoring and establishment/maintenance of business relationships.

  • Legal Basis: The user’s consent and legitimate interest in developing business relationships.

  • Retention Period: Data will be kept for as long as necessary for processing purposes. Once completed, they will remain available to public administration, judges, and courts for the legally established periods to handle and defend any liabilities arising from processing.

Clients/Suppliers: professional personal data provided by clients/suppliers for service provision and management of the legal or contractual relationship.

• • Collected data: First name, last name, ID number, professional contact address, email, phone number.
  • Purpose: Management of the contractual service relationship.
  • Legal Basis: Existing legal or contractual relationship necessary for service provision.
  • Retention Period: Data will be kept for as long as necessary for processing or until deleted. Once completed or deleted, they may be retained for six years, available to public administration, judges, and courts for handling and defending any liabilities arising from processing.

Access Control and Security: data collected by video surveillance cameras or provided for access control to THE COMPANY's buildings.

• • Collected data: First name, last name, ID number, and images.
  • Purpose: To control access and manage internal security within THE COMPANY's facilities.
  • Legal Basis: Legitimate interest in ensuring security within the facilities by the owner, which justifies the recording of data for access control and the capture of images upon entering these premises.
  • Retention Period: Data will be kept for a maximum of one month, unless it is necessary to retain them for a longer period to clarify any detected violation or unlawful act.

Data may be shared with third-party service providers acting as data processors, with whom THE COMPANY has signed the necessary agreements. These providers have been verified to ensure they meet adequate security measures, ensuring compliance with the GDPR and the protection of the data subject’s rights.

• The data subject is entitled to exercise their rights of access, rectification, deletion, restriction, opposition, and data portability. Additionally, they have the right to withdraw their consent for the processing of their data by THE COMPANY. They are also entitled to file a complaint with the supervisory authority.

  At any time, the data subject may exercise their rights by sending a request, including a document that verifies their identity and clearly stating the right they wish to exercise, to THE COMPANY at the address indicated above or via email at vinyaelsvilars@vinyaelsvilars.com.

THE COMPANY has implemented the necessary technical and organizational measures to ensure the security and integrity of the data, as well as to prevent its alteration, loss, processing, or unauthorized access.

The data collected through the various authorized channels is strictly necessary to process the request, and it is provided voluntarily by the data subject. Refusal to provide the required data will result in the inability to access or receive the requested service. Additionally, optional data may be provided to improve the quality of the services offered.

Likewise, in cases where third-party data is provided, the data subject agrees to inform them of the contents of this privacy policy.

The data subject agrees to notify THE COMPANY as soon as possible of any modifications or corrections to their personal data to ensure that the information contained in THE COMPANY's Activity Records is always up to date.

Based on THE COMPANY's legitimate interest, the data subject's personal data may be used to establish or maintain business relationships through any means, including electronic communication, providing information of interest regarding THE COMPANY's products and services. At any time, the data subject may object to this processing for commercial purposes by sending a postal communication to the indicated address or an email to vinyaelsvilars@vinyaelsvilars.com.