Privacy Policy
On this website, we process users’ personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD). No personal data are collected without the user’s knowledge, nor are they disclosed to third parties without an appropriate legal basis.
Data Controller
RETECORK, European Network of Cork-Producing Territories | Tax Identification Number (NIF/CIF): G17994765
Registered Office: Calle Irene Rocas 1, 17124 Llofriu, Girona, Spain
Telephone: +34 972 199 546
Email: retecork@retecork.org
What Data We Process
- Identification and contact details (e.g. name, email address and telephone number), where voluntarily provided by the user.
- Transaction and billing data (where purchases or services are requested), required to manage the provision of services.
- Technical and browsing data (e.g. IP address, device information and identifiers), collected mainly through cookies, depending on the user’s preferences and the website configuration.
Purposes of the Processing
- To respond to enquiries received through contact forms, telephone or email.
- To manage orders, invoicing, payments and deliveries where the website allows online purchases or the provision of services.
- To send communications only where the user has given consent or where another lawful basis applies.
Legal Basis for Processing
- Performance of a contract or the implementation of pre-contractual measures (e.g. processing orders or requests).
- Compliance with applicable legal obligations (e.g. tax and accounting requirements).
- The data subject’s consent for specific purposes (e.g. marketing communications).
Data Retention
Personal data will be retained for as long as necessary to fulfil the purposes described above and, subsequently, for the periods required under the applicable legislation.
Recipients
Personal data will not be disclosed to third parties unless required by law or where necessary for the provision of services by suppliers acting as data processors (for example, hosting providers, email service providers, logistics providers or payment gateway providers). In such cases, the corresponding data processing agreements will be concluded in accordance with Article 28 of the GDPR.
- Personal data will not be disclosed to third parties except where required by law or where necessary for the provision of the service by data processors.
International Data Transfers
International transfers of personal data are not envisaged. Should service providers located outside the European Economic Area (EEA) be used, appropriate safeguards will be implemented in accordance with the GDPR (for example, the European Commission’s Standard Contractual Clauses).
Users’ Rights
Users may exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability by sending a request to retecork@retecork.org. Proof of identity may be requested in order to prevent unauthorised access.
Where processing is based on consent, users may withdraw that consent at any time without affecting the lawfulness of any processing carried out before its withdrawal.
If users consider that their personal data have not been processed correctly, they may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
Security Measures
The Data Controller implements appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, misuse, unauthorised access, disclosure or alteration, taking into account the state of the art, implementation costs, and the nature of the data processed.
