PRIVACY POLICY — CNTA
1. DATA CONTROLLER
Identity: Centro Nacional de Tecnología y Seguridad Alimentaria, CNTA (hereinafter, the Controller of CNTA).
Address: Ctra. NA 134, km 53 · 31570 San Adrián (Navarra). Tax ID (N.I.F.): G31096928
Phone: +34 948 670 159 Email: cnta@cnta.es
Data Protection Officer (DPO): rgpd@cnta.es
2. DATA PROCESSING PURPOSES
Below we provide information on the data processing activities covered by this Privacy Policy, specifying both the legal basis under the General Data Protection Regulation (hereinafter, GDPR) and the specific retention period for such data. In addition, the data will be kept for the time necessary to comply with legal obligations and to address any potential liabilities that may arise for the Controller in connection with the fulfillment of the purpose for which the data was collected.
| Processing | Legal Basis (GDPR) | Retention Period |
|---|---|---|
| MEMBERS | ||
| Manage requests for information about Association membership, as well as, where applicable, the management of your admission and continued membership. | 6.1.b) Processing is necessary for the performance of a contract to which the data subject is party. | We will process your data for as long as necessary to handle and manage the request and, where applicable, for as long as you remain a member. |
| Manage the use of members’ images on the website. | 6.1.a) The data subject has given consent to the processing. | We will process your data until you object to the processing. |
| PROVISION OF SERVICES: IF YOU ARE A CNTA MEMBER/CLIENT, WE WILL USE YOUR DATA TO MONITOR AND EXECUTE THE CONTRACT, AS WELL AS TO MANAGE THE RELATIONSHIP BETWEEN THE PARTIES. | ||
| Management and processing of the services entrusted to us. | 6.1.b) Processing is necessary for the performance of a contract to which the data subject is party. | Your data will be retained for as long as the relationship and/or service continues. |
| Compliance with tax, administrative and legal obligations arising from the provision of services. | 6.1.c) Compliance with a legal obligation: commercial and tax regulations. | For as long as necessary to comply with the Controller’s legal obligations. |
| INFORMATION OR INQUIRY REQUESTS | ||
| Respond to information and/or inquiry requests received, with the management and scope required. If your request relates to the contracting of our services, your data will be used for preparing service and/or collaboration proposals. |
6.1.a) The data subject has given consent to the processing. 6.1.b) Processing is necessary for the performance of a contract to which the data subject is party. |
We will process your data for as long as necessary to handle and manage your request for information. Where applicable, we will process the data until the contract is signed. |
| COMMERCIAL COMMUNICATIONS AND NEWSLETTERS | ||
| Manage the sending of commercial communications by electronic means related to the organization’s activities and services. |
As applicable: 6.1.a) The data subject has given consent to the processing. 6.1.f) Legitimate interest. |
We will retain the data for as long as you wish to continue receiving this type of communication and do not object. |
| HR: JOB BANK AND RECRUITMENT PROCESSES > DATA PROVIDED WHEN APPLYING FOR A RECRUITMENT PROCESS OR REQUESTING INCLUSION IN THE JOB BANK WILL BE PROCESSED FOR THE FOLLOWING PURPOSES. | ||
| Management of the job bank and processing of candidate data included therein to cover possible vacancies, collaborations, internships, or scholarships. Processing involves sending your CV to CNTA’s associated entities to cover possible openings. | 6.1.a) The data subject has given consent to the processing. | We will retain job bank data for two years. |
| VIDEO SURVEILLANCE: OUR FACILITIES ARE EQUIPPED WITH A VIDEO SURVEILLANCE SYSTEM. | ||
| Ensure the safety of people, property, and facilities. | 6.1.e) Processing is necessary for the performance of a task carried out in the public interest. | Your data will be retained for 1 month from the time of recording. |
| TRAINING ACTIVITIES AND EVENTS: IF YOU CONTACT US TO REGISTER FOR ONE OF OUR COURSES, SEMINARS OR PRESENTATIONS, WE WILL USE YOUR DATA FOR THE FOLLOWING PURPOSES. | ||
| Process your registration and/or participation in the training activity for which you have registered, as well as to send you information about the course (materials, evaluation surveys, notifications or change notices, etc.). |
6.1.a) The data subject has given consent to the processing. 6.1.b) Processing is necessary for the performance of a contract to which the data subject is party. |
We will process the data for as long as necessary to manage the registration and development of the event. |
| PRODUCT TASTINGS: IF YOU CONTACTED US TO REGISTER AS A COLLABORATOR IN OUR PRODUCT TASTINGS. | ||
| Management and processing of your registration and subsequent collaborations as a product tasting collaborator. |
6.1.a) The data subject has given consent to the processing. 6.1.b) Processing is necessary for the performance of a contract to which the data subject is party. |
We will process your data for as long as the relationship between the parties continues or until you withdraw your consent. |
| REPRESENTATIVES/NATURAL PERSONS PROVIDING SERVICES FOR A LEGAL ENTITY: IF YOU REPRESENT OR ACT ON BEHALF OF A THIRD PARTY. | ||
| Management of the relationship with the third party. | 6.1.f) Legitimate interest; based on Article 19 of the LOPD. | Your data will be retained for as long as the relationship lasts. |
| COOKIES: IF, WHEN VISITING THIS WEBSITE, YOU ACCEPTED TO RECEIVE COOKIES, THE WEBSITE’S COOKIE POLICY WILL APPLY, AVAILABLE AT THE FOLLOWING LINK: https://www.CNTA.es/cookies |
CONSEQUENCES OF WITHDRAWING CONSENT OR OBJECTING TO THE PROCESSING OF YOUR DATA. MANDATORY AND OPTIONAL FIELDS.
If, at any point, you are asked to authorize the processing of your data for a purpose that requires your consent, failure to provide such consent (or its subsequent withdrawal) will not have any consequences for you under any circumstances. Likewise, your objection to the processing of your data for purposes based on legitimate interest (for example, the use of your customer data to send commercial communications) will also have no effect.
In some data collection forms, you will clearly see that certain fields are marked as mandatory (with an asterisk), while the remaining fields are entirely optional. Accordingly, failure to complete the optional fields will have no consequences, and you may fill them in if you wish to do so.
TYPES OF DATA WE MAY COLLECT ABOUT YOU
Through the different channels of contact (email, telephone, fax, etc.) and the forms provided on our website, we may collect identifying and contact data, such as name, surname, email address, telephone number, etc. In some specific forms, you may provide us with additional information (e.g., reason for inquiry, CV, etc.).
Finally, depending on your cookie preferences, the configuration of your device when accessing the website, or the communications we send you, we may record your browsing activity on our website, obtaining information about your behavior and interests, and we may also track the opening of commercial communications.
RECIPIENTS
As a general rule, unless legally required, your data will not be communicated or transferred to any third party without your prior express consent. In any case, certain communications and/or data transfers to third parties may be imposed by specific regulations or may be necessary to comply with obligations towards Public Administrations in cases required by applicable legislation at any given time.
Other communications and/or transfers will be a necessary consequence of the provision of the requested service or the result of your express consent to such communication. Below, we set out the purposes for which it may be necessary to disclose your data to third parties:
- Job Bank: We inform you that your data may be shared with CNTA’s partner entities for the purpose of including your CV in their job bank, as well as to cover potential future hires and/or collaborations with the entity.
- Hosting: This website is hosted by the provider Tecnocrática Centro de Datos, S.L.
- Sending communications and newsletters, forms, and surveys: In this case, your data will be communicated to the company that owns the technological solution used for this purpose, so that it may carry out the sending and measurement functions entrusted to it.
RIGHTS
Regarding the personal data collected for processing, you have the right to exercise your rights of access, rectification, erasure, and portability. Likewise, in certain circumstances, you will have the right to request the restriction of or object to the processing of your data, in which case the Controller will cease processing and will only retain your data where required by law or until the statute of limitations for potential legal claims has expired. For any query or to exercise your rights, you may contact us by proving your identity via email at cnta@cnta.com, through our DPO at rgpd@cnta.com, or by any of the contact channels indicated in the heading of this privacy policy.
Finally, you may also contact the supervisory authority whenever you consider it appropriate to lodge a complaint (for example, in the country where you usually reside, your place of work, or where the alleged infringement occurred). For these purposes, we inform you that in Spain the Supervisory Authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos), and you can exercise your rights through the forms available on its electronic headquarters.
If you would like more information about these rights, we invite you to continue reading or to consult the infographic prepared by the Spanish Data Protection Agency.
You may submit your complaint or exercise your rights through any of the contact channels indicated in the section “Identity of the Controller” of this privacy policy.
Last updated: March 2023.