Privacy Policy

Privacy Policy.

Below is our privacy policy (hereinafter, “online privacy policy” o “policy”) which governs the web platform https://bertollioliveoil.co.uk/ (hereinafter, “the Platform”), under the ownership of DEOLEO GLOBAL, S.A.U. (hereinafter, “DEOLEO” or “we”), with  headquarters in Rivas-Vaciamadrid (Madrid), calle Marie Curie, 7, Edificio Beta (Parque Empresarial Rivas Futura), with Tax Identification Number A-88465802, registered in the Business Registry of Cordoba Tome 2702, sheet 81, page CO-40600.

 

PLEASE DEVOTE A FEW MINUTES TO READING OUR PRIVACY POLICY; IT SHALL NOT TAKE MUCH TIME TO DO SO. WITH THE AFORESAID PRIVACY POLICY, WE WISH TO EXPLAIN SIMPLY, CLEARLY AND TRANSPARENTLY HOW WE PROCESS AND PROTECT YOUR PERSONAL INFORMATION AND RIGHTS. YOUR SECURITY AND THAT OF YOUR PERSONAL DATA ARE OF PARAMOUNT IMPORTANCE TO DEOLEO AND WE TAKE THEIR PROTECTION MOST SERIOUSLY.

 

  1. TO WHOM DOES THIS POLICY APPLY TO?

 

This policy is applicable to all platform users, regardless of whether they are DEOLEO customers or not, (hereinafter, and indiscriminately, “user” or “users“) who are considered natural persons. As such, when referring to personal data, we refer to all types of information concerning an identified or identifiable natural person.

If you are already a DEOLEO customer, and have signed a contract with us, you must also refer to the information regarding our specific Terms of Privacy contained therein.

 

  1. IF YOU NAVEGATE OR USE OUR WEB PLATFORM, WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

 

We are your personal data processing controllers, namely:

 

Full name of the Company: DEOLEO GLOBAL, S.A.U.

Registered Office: Ctra. N-IV, Km 388, Alcolea (Cordoba)

Physical location/headquaters: Rivas-Vaciamadrid (Madrid), Calle Marie Curie 7, Edificio Beta (Parque Empresarial Rivas Futura), Spain

Email address: rgpd@deoleo.com

Please send any issue relating to the protection of your personal information to the following email address: rgpd@deoleo.com

  1. WHO IS THE DATA PROTECTION OFFICER?

 

CARAPELLI has appointed a Data Protection Officer (DPO) in charge of personal data protection. Users may contact our DPO via the following contact details:

 

Postal address: C/ Marie Curie, 7, Edificio Beta (Parque Empresarial Rivas Futura), 28521, Rivas-Vaciamadrid (Madrid)

Email address: rgpd@deoleo.com

 

  1. WHAT TYPE OF DATA DO WE PROCESS?

 

The processing of your data is necessary as it enables you to have access to the contents and/or features of the Platform or to be sent information or to be provided with the services arranged therein, should you so require it. In this regard, we maintain a firm commitment to processing your personal data in a legitimate and consistent manner, pursuant to the principles and legal obligations outlined in current Personal Data Protection Provisions.

 

When you browse our Platform you should be aware of the cookies that are installed on your data terminal or device, since this involves the processing of your personal data, pursuant to the classification of cookies reported and their specific purposes (see our Cookies Policy). When you enter on our Platform for the first time, a Cookies acceptance banner appears with two different options to select one. These options consist on (1) accepting the use of all cookies used on our Platform or on (2) selecting the cookies you would like to be installed on your Browser by clicking on “Configure” and to manually select and accept them. By selecting one of the options of the Cookies acceptance banner, you give your explicit consent on the use of the cookies you have selected. Additionally, the banner includes a link to this Policy and to our Cookies Policy, where you can find full information on Cookies used on our Platform and how to configure or delete the use of those Cookies on your browser.

 

  1. WHAT DO WE USE YOUR DATA FOR?

 

The personal data that you provide us with shall be processed for the specific means outlined within this Privacy Policy and, where appropriate, in the different data forms provided therein. In this regard, data collection serves the following processing purposes:

  • Making it possible for you to browse our Platform, thereby allowing you access to the information and content contained therein;
  • Addressing your requests or claims, according to the forms or claims you send to us;
  • Clarifying your doubts about our services in a streamlined and efficient way, via the different channels available for this purpose (email, telephone, chat, etc.);
  • Allowing and managing your user registration, should you so require it. You can unsubscribe from such registration, whenever you deem fit, by writing to rgpd@deoleo.com.
  • Allowing uses associated with the cookies of the Platform, as described in our Cookies Policy;
  • Should you accept the use of cookies on the Platform by accepting our Cookies acceptance banner, you thus accept that you are subject to the purposes associated with the different cookies accepted. You can configure the use of cookies at any time, should you so wish, as you hold the right to withdraw your consent regarding the purposes associated with cookies.
  • Establishing as many applicable protection measures as possible, pursuant to the legal provisions currently in force, including the potential anonymisation of your personal data, which is done by applying the appropriate techniques available to this end. Therefore, in the event, the anonymisation and pseudonymisation processes can also be carried out in order to provide the highest-level of personal data protection;
  • Applying the relevant security, technical and/or organisational measures to your personal data, with a view to prevent existing risks at any time, including the pseudonymisation or encryption of your personal data through our Platform.

 

  1. WHAT BASIS DO WE HAVE TO PROCESS YOUR PERSONAL DATA LEGITIMATELY?

 

Processing purposes Legitimate processing basis
Make it possible for you to browse our Platform, thereby allowing you access to the information and content contained therein. Your consent and, as the case may be,  satisfaction of a legitimate interest, be it our own or of third parties, associated with the adequate management, maintenance, carrying out and evolution of the platform, its tools, network and associated information systems, which enabling proper functioning thereof, as well as the features contained therein, access to its content and services, and the general security of all the aforesaid.
Address the requests or claims, according to the forms or claims you send to us;

 

 Your consent.
Solve your doubts about our services in a streamlined and efficient way Your consent and, as the case may be, the carrying out of pre-contractual measures at the request of the user/interested party.
Allow and manage your registration as a user, should you require it. Your consent.
Should you accept the use of cookies on our Platform by accepting our Cookies acceptance banner, you thus accept the processing procedures associated therewith to be carried out. Your consent.
Establish as many applicable protection measures as possible, pursuant to the legal provisions currently in force, including the pseudonymisation or anomysation of your personal data through our platform Compliance with the legal obligations set forth in REGULATION (EU) 2016/679, of the European Parliament and of the Council, of 27th  April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, “General Data Protection Regulation” or “GDPR“).

In the case of processing data designed to guarantee the protection of the platform, the web, and information systems associated therewith, where appropriate, this is done in order to satisfy the legitimate interests of DEOLEO or, where appropriate, of a third party (Recital 49 of the GDPR).
Apply the relevant security, technical and / or organisational measures on your personal data with a focus on the existing risk at each moment Compliance with the legal obligations set forth in REGULATION (EU) 2016/679, of the European Parliament and of the Council, of 27th  April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, “General Data Protection Regulation” or “GDPR“)

In the case of processing data to guarantee the protection of the platform, the web, and information systems associated therewith, where appropriate, this is done in order to satisfy the legitimate interests of DEOLEO or, where appropriate, of a third party (Recital 49 of the GDPR).

 

When you give consent for your personal data to be processed, with the aforesaid legitimate processing basis, we remind you that you have the right to revoke your consent at any time, free of charge, by simply sending an email to rgpd@deoleo.com.

 

  1. HOW LONG ARE YOUR PERSONAL DATA STORED?

 

 

Personal data associated with the processing purposes reported Personal Data storage periods or criteria
Data associated with the user’s navigation through our platform -Generally, your data shall be kept, in this instance, for the amount of time necessary to enable you to correctly navigate, and make use of, our web platform and the contents laid out therein, which you have access to;

 

-With regard to the data associated with your browsing profile, and specifically to analytical cookies, whose use you have accepted and is outlined in the DEOLEO Cookie Policy, please refer to the section related to the permanence of these cookies (see our Cookies Policy).
Address requests or claims according to the forms or claims you send us. -The amount of time required to correctly respond to your requests and/or specific claims according to each case.
Solve your doubts about our services in a streamlined and efficient way -The amount of time that is strictly required to resolve or process the aforementioned requests and/or specific claims.
Receive information about activities, events, advantages, promotions or any other information that may be of interest to you, including advertising or promotional information associated with the activities carried out by the entities that make up the CARAPELLI Group.     Until such time as you exercise your right to revoke your consent to the processing of your data for advertising and/or promotional purposes or, as the case may be, you object to the processing for direct marketing purposes.
Allow and manage your registration as a user if you require it. -Until you request the effective withdrawal of your registration. If you are a DEOLEO customer, the personal data retention periods described in these cases may be applied as indicated below.
Establish as many measures of protection are applicable in accordance with current legal provisions. The user’s personal data are processed, including the storage of such data for the legal terms set out regardless of the legitimate processing basis for DEOLEO.
Apply relevant security, technical and/or organisational measures to your personal data, with a view to prevent existing risks at any time. The user’s personal data are processed, including the storage of such data during the legal terms outlined, regardless of the legitimate processing basis for DEOLEO uses.

 

In any case, and notwithstanding the foregoing, the user is also informed of the following:

  • Pursuant to current Personal Data Protection Legal Provisions, in any matter concerning the correct processing of personal information by DEOLEO, the Company may also securely store this information for three years from its collection (prescription period for breaches in this sphere);

 

  • Regarding the storage time of cookies, the user is advised to consult our Cookies Policy (see the section regarding the permanence of cookies);

 

  • In general, when the personal data are no longer necessary for the processing purposes that they were collected for, the aforesaid data shall be blocked, and shall only remain available to the competent authorities responsible for the possible determination of legal responsibilities during the processing thereof, always pursuant to the applicable legal provisions and the aforesaid data cannot be used for any other purposes. After the corresponding legal deadlines have elapsed, in case of data blockage, the relevant personal data shall be erased pursuant to the applicable legal provisions, and may also, if applicable, be securely anonymised by DEOLEO (anonymised/non-personal data).

 

 

  1. WHAT CONSEQUENCES SHALL ENSUE IF YOU DO NOT PROVIDE US WITH YOUR PERSONAL DATA?

 

We try to request or use the minimum amount of essential information when processing personal data, as may be necessary to carry out the purposes of our Corporate object and purposes. All this pursuant to the applicable legal provisions.

However, if you fail to provide your personal data this could lead to the impossibility to: 1) use our website properly (non-acceptance of technical or session cookies); 2) access certain content or services; 3) process your requests or specific claims (for example, due to the lack of information or insufficient completion of the corresponding form or application).

The information and personal data that you provide, according to each case, must be in any event:

  • Sufficient, although adjusted, limited and proportionate to the legitimate purposes of processing reported in each case, with the utmost respect for the principles of purpose limitations and of minimisation of personal data;
  • Accurate, up-to-date and truthful, in order to be able to adequately verify the identity, legal capacity and, where appropriate, representation, as well as being able to apart, in each case, the data processing tailoring it to your specific needs and your current situation. This is done pursuant to principles of personal data accuracy.

 

Users shall be fully responsible for all data and personal information that they provide to the Client, within the platform and, where appropriate, for demanded or contracted services.

 

  1. DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?

 

In general, we neither sell, offer nor share your data with third parties. Notwithstanding, your personal data may be shared with other companies in the Group of Companies (https://deoleo.com/liderazgo-global/) to which DEOLEO belongs for purely internal and administrative purposes in accordance with the provisions of Recital 48 of the RGPD.

Likewise, if you have previously accepted the communication of your personal data to other entities of the DEOLEO Group (https://deoleo.com/liderazgo-global/) to receive information about the activities, events, advantages, promotions or any other information that may be of interest to you, including advertising or promotional information associated with the activities carried out by such entities, such communications of your personal data will be made to them. You may withdraw your consent for this purpose at any time, but this will not affect the lawfulness of the processing prior to such withdrawal in accordance with the GDPR.

Similarly, it is possible that certain third parties can access your personal information when carrying out the services they provide to DEOLEO. For example, in the case of third party cookies that are applied in the platform (see our Cookies Policy).

DEOLEO has several personal data processors under its supervision, and, acting as trusted providers, they are allowed access to the aforesaid data only on strictly need- to know basis for the provision of the services contracted with them. Such data processors operate under a service contract that complies with the terms, conditions and guarantees set forth in Article 28 of the GDPR, with DEOLEO carrying out the controls, inspections and corresponding audits in this area to verify that the aforesaid processors strictly comply with the contracts signed to this end, and with the applicable legal provisions.

 

  1. ARE INTERNATIONAL TRANSFERS CARRIED OUT WITH YOUR PERSONAL DATA?

 

We inform you that, in general, international transfers of your personal data are not expected, and DEOLEO uses the necessary measures and guarantees in this area with pursuance to the current Personal Data Protection legal provisions.

Notwithstanding the foregoing, our Cookies Policy informs you of possible international transfers of personal data, pursuant to the services provided by certain companies (third-party cookies). All international transfers are fully guaranteed pursuant to the applicable legal provisions (see our Cookies Policy).

 

  1. WHAT RIGHTS DO YOU HAVE, WHAT DO THEY MEAN AND HOW CAN YOU EXERCISE THEM?

 

 

Your rights What does it mean? How can it be exercised?
Right of information

 

 

 The right to be provided by DEOLEO with appropriate information, both when your personal data have been collected (whether obtained from you or through a third party), or later regarding the processing of your personal data. You decide on your personal information. Refer to Articles 12 to 14 of the GDPR. DEOLEO seeks to provide you with all the necessary information regarding the processing of your personal data pursuant to Articles 12 to 14 of the GDPR. However, if you have any question or doubt about our privacy policies and cookies, please do not hesitate to write to us, via: rgpd@deoleo.com and we shall address your additional request for information.
Right of access The right to obtain from DEOLEO confirmation of whether or not your personal data are being processed, and basic information related to such processing (Article 15 of the GDPR), as well as to obtain a copy of the personal data that are being processed. Address a communication in writing via email to rgpd@deoleo.com with the Ref. “Exercising of Rights” accompanying the email your registration email and, if necessary, to prove your identity, including a copy of your national identity document or equivalent identification document (passport, NIE etc.).
Right of rectification Right to obtain the rectification of your personal data, without delay, by DEOLEO pursuant to Article 16 of the GDPR. Address a communication in writing via email rgpd@deoleo.com with the Ref. “Exercising of Rights” accompanying the email your registration email and, if necessary, to proving your identity, including a copy of your national identity document or equivalent identification document (passport, NIE, etc.).
Right of erasure Right to obtain the erasure of your personal data, without undue delay, by DEOLEO pursuant to the terms of Article 17 of the GDPR. Address a communication in writing via email rgpd@deoleo.com with the Ref. “Exercising of Rights” accompanying the email your registration email and, if necessary, to proving your identity, including a copy of your national identity document or equivalent identification document (passport, NIE, etc.).

 
Right to limitation of processing The right to secure the limitation of the processing of your data from DEOLEO, if:

– The accuracy of your personal data is affected, during a period that allows DEOLEO to verify their accuracy.

-The processing of your personal data is unlawful and you object to their suppression (and instead, request the limitation thereof).

 

-DEOLEO no longer needs your personal information, but you need it in order to formulate, carry out or defend a claim.

 

The carrying out thereof shall be limited to what is outlined in Article 18 of the GDPR.

 Address a communication in writing via email rgpd@deoleo.com with the Ref. “Exercising of Rights” accompanying the email your registration email and, if necessary, to proving your identity, including a copy of your national identity document or equivalent identification document (passport, NIE, etc.).

 
Right to data portability Right to receive any personal data referring to you and which you have provided us in a structured format, for common use and systematic reading, or to transmit them to another controller when technically possible pursuant to the provisions of Article 20 of the GDPR. Address a communication in writing via email rgpd@deoleo.com with the Ref. “Exercising of Rights” accompanying the email your registration email and, if necessary, to proving your identity, including a copy of your national identity document or equivalent identification document (passport, NIE, etc.).

 
Right of objection Right to object to, at any time, the processing of your personal data, including profiling, if this is based on the satisfaction of the legitimate interest of DEOLEO or a third party as described under Article 21 of the GDPR. Address a communication in writing via email rgpd@deoleo.com with the Ref. “Exercising of Rights” accompanying the email your registration email and, if necessary, to proving your identity, including a copy of your national identity document or equivalent identification document (passport, NIE, etc.).

 
Right not to be the subject of a decision based solely on automated processing (including profiling) The right not to be the subject of a decision based solely on automated processing, including profiling, that produces legal effects or significantly affects you in a similar way, pursuant to the provisions of Article 22 of the GDPR. Address a communication in writing via email rgpd@deoleo.com with the Ref. “Exercising of Rights” accompanying the email your registration email and, if necessary, to proving your identity, including a copy of your national identity document or equivalent identification document (passport, NIE, etc.).
Right to revoke the consent granted You shall have the right to withdraw your consent at any time. Revocation of consent shall not affect the lawfulness of the processing performed by the Client based on your consent prior to the withdrawal thereof. You communicate this by sending an email to: rgpd@deoleo.com so that your right can be duly implemented, as laid out in the applicable legal provisions.
Right to file a claim with the competent supervisory authority It implies the possibility of recourse to the control authority in case you believe of your rights to the protection of personal data have been breached (Articles 13 and 14 of the GDPR) We recommend that before submitting any complaint or claim to the competent supervisory authority, you kindly contact our Data Protection Officer to analyse the specific situation and try, if necessary, to find an effective and amicable solution.

 

  1. ARE MEASURES FOR THE SECURITY AND PROTECTION OF YOUR PERSONAL DATA IMPLEMENTED?

 

Taking into account the nature, scope, context and the purposes indicated of the data processing, as well as the wide variety and gravity of the possible risks that might affect your rights and freedoms, DEOLEO applies (and shall apply) the appropriate technical and organisational measures in order to guarantee the due security and protection of your personal data, pursuant to privacy criteria imbedded in the design and by default, as well as by applying a system to approach concurrent risks, which shall be reviewed and updated by DEOLEO if and when necessary.

The use of the Hyper-Text Transfer Protocol (HTTPS) in our platform is a reinforced guarantee for the security of your personal data.

 

  1. VALIDITY & AMENDMENT OF THE PRIVACY POLICY

 

This policy is effective as of 19TH April 2021.

DEOLEO reserves the right to amend this policy and to adapt it to future legislative, doctrinal or case law developments that are applicable thereto, or for technical, operational, commercial, corporate and business reasons. DEOLEO shall inform you beforehand of any changes therein whenever possible and reasonable. In any case, it is recommended that you read this Privacy Policy in detail every time you access the Platform, since any amendment shall be published therein.

Likewise, DEOLEO may personally inform you of the changes projected in this Policy, before the aforesaid changes come into force, provided that this is technically and reasonably possible, particularly when you are a registered user or a DEOLEO customer.

 

  1. DO YOU NEED TO CONTACT US?

 

Should you have any questions or suggestions about this Privacy Policy that you would like to convey to us, please do not hesitate to contact us at rgpd@deoleo.com