Web Privacy Policy

As required by the Personal Data Protection regulations and in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data (“GDPR”) and Spain’s Organic Law 3/2018 of 5 December on the protection of personal data and guarantee of digital rights (“LOPDGDD”), the Grupo Addvalora companies (hereinafter “GRUPO ADDVALORA”) set out below information for you to be aware of all the elements that are relevant to the processing of your data.

Who is the data controller?

Your personal data will be processed by the following data controllers acting as joint controllers in the terms of Article 26 of the GDPR:

Company name
Registered address: Calle Príncipe de Vergara 38, 4º Izq. 28001 Madrid, Spain

Calle General Concha, 12, 2º Dcha., 48008 Bilbao, Spain

Telephone / email
+34 915 723 060 / protecciondedatos@addvaloraglobal.com

What is the purpose of our processing your personal data?

We might process your personal data for any of the following purposes:

Your data will be processed to assist, manage and deal with your requests, comments and/or queries.

If you are our customer, supplier and/or collaborator, your data will be processed to perform, manage and maintain our contractual relationship.

We will process the information to comply with our legal obligations, any court orders and other decisions of the authorities.

Provided that we have the required lawful basis, we will process your data to keep you informed about services, promotions and products relating to our activity by the means you have indicated to us.

What is the lawful basis for processing your personal data?

The processing carried out has the following legal bases:

When your data is processed to assist, manage and respond to your requests, comments and/or queries, the processing is based on your consent given when you submit your query and/or request to us (article 6.1(a) GDPR).

When your information is processed to perform, manage and maintain our contractual relationship, the processing is based on the need to perform a contract to which you are a party (article 6.1(b) GDPR).

When it is necessary to process information in order to comply with our legal obligations, any court rulings and other decisions of the authorities (article 6.1(c) GDPR).

When the information is processed to keep you informed of services, special offers and products relating to our activity, the processing is based on your consent (article 21.1 of the law on Information Society Services and Electronic Commerce (LSSICE)) and/or the legal authorisation provided in article 21.2 of the LSSICE.

How long will we keep your personal data?

Your personal data will be processed for the period necessary to accomplish the purposes specified in this Privacy Policy and will be kept by us to comply with the requirements of the relevant laws and regulations, in particular with regard to statutory limitation periods and for the establishment, exercise or defence of claims.

The criteria we use for this depends on the purpose of the data collected and achievement of such purpose (e.g. in the cases of consent, you may revoke your consent at any time), and the mandatory storage periods required by contractual and regulatory obligations.

Please note that, in some cases, we may retain your data for the period that is necessary to establish, exercise or defend legal and/or contractual claims, demands, liabilities and obligations, during which they will be kept properly blocked.

To which recipients could your data be disclosed?

Depending on the purposes for which the personal information is collected, the following third parties may have access to your personal data:

Government bodies, competent agencies and/or authorities and the relevant law enforcement agencies, in cases of a formal request, a legal obligation or if we consider there are sufficient indications and/or suspicions of unlawful activity or a criminal offence.

Our associates and third party service providers who process information as data processors. All our suppliers have signed the corresponding data processing contract as laid down in the personal data protection regulations.

We inform you that GRUPO ADDVALORA does not transfer your personal data to a country outside the European Economic Area (EEA). However, if it were to happen, we will ensure that adequate personal data protection is in place, by using the safeguards permitted by law, particularly the use of the standard contractual clauses approved by the European Commission.

What are your rights when you provide us with personal data?

If we process your data, you should know that you have the following rights:

The right to request access to your personal data: you can ask us if we, at GRUPO ADDVALORA are processing your data, and if so, you can access it.

The right is to request rectification if the data we hold is inaccurate or to complete any incomplete data.

The right to request the erasure of your data.

The right to request the restriction of data processing: in this case, GRUPO ADDVALORA will only store them to exercise or defend claims.

The right to object to the processing: we will cease to process the personal data, except when such processing must continue for legitimate reasons or to exercise or defend possible claims.

The right to data portability: if you wish your data to be processed by another data controller, we will facilitate the transfer of your data to the new controller, provided it is technically feasible.

The right not to be subject to a decision based solely on the automated processing of your personal data.

If you have given us your consent for a specific purpose, you may withdraw the said consent at any time, and this shall not affect the lawfulness of processing that was based on your consent before the withdrawal.

You can exercise your rights by sending an email to protecciondedatos@addvaloraglobal.com or by addressing a letter to the postal address shown in numbered paragraph 1 of this policy. Alternatively, you can complete the forms that we provide for these purposes by clicking here.

Should you consider it necessary, you can always lodge a complaint with the competent authority, in this case, the Spanish Data Protection Agency (https://www.aepd.es).

Additional information

Policy regarding the use by children. Our services are intended only for persons of legal age. We do not, therefore, deliberately collect information on minors. If, however, you are a parent or legal guardian and believe that your child or ward has submitted personal data to us, please get in touch with us by sending an email to protecciondedatos@addvaloraglobal.com.

Personal data that is especially protected. GRUPO ADDVALORA does not collect or process personal data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or process genetic data, biometric data intended to identify a natural person uniquely, data relating to health or sex life or sexual orientation.

Personal data of third parties. If the personal data you provide belong to a third party, you undertake that you have informed said third party of the aspects of this Privacy Policy and have obtained their consent to provide us with their data for the specified purposes.

Links. GRUPO ADDVALORA website may contain links to other websites which we think you might find helpful and informative. However, please be aware that we do not endorse or recommend the contents or services of such websites and that we are not responsible for their privacy policies. We advise you to consider and read the privacy policy of every site you visit. Please note that this Privacy Policy applies solely to data that is collected and/or processed by GRUPO ADDVALORA.

Updates. We will only use your personal data in the manner set out in this document which is operative at the time we collect your information. You will be informed in due course if we, at GRUPO ADDVALORA , change the manner in which we process your data.

Contact us. If at any time you believe that we have not complied with the provisions set out in this Privacy Policy, please let us know by sending an email to protecciondedatos@addvaloraglobal.com. Please do not hesitate to contact us if you wish to escalate a data privacy issue or have any questions regarding this Privacy Policy. We will be glad to be of assistance.

Updated on: 01 February 2021