In accordance with applicable legislation, the Quinua Real website (hereinafter, also Website) undertakes to adopt the necessary technical and organisational measures, according to the appropriate level of security based on the risk of the data collected.
Organic Law 3/2018, of 5 December, on Personal Data Protection and the guarantee of digital rights.
Regulation (EU) 2016/679, of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
Royal Decree 1720/2007, of 21 December, approving the Regulation for the development of Organic Law 15/1999, of 13 December, on Personal Data Protection (RDLOPD).
Law 34/2002, of 11 July, on Information Society and E-Commerce Services (LSSI-CE).
Identity of the personal data controller
The data controller responsible for processing the personal data collected on the Quinua Real website is: Biotobio Ibérica, S.A. , holder of Tax Identity Number (NIF): A63221998 and registered in: Commercial Register of Madrid with the following registration details: sheet 35, volume 36614, page number M-656965, entry 5, whose representative is: Miguel Angel Montesinos (hereinafter, Data Controller). His contact details are as follows:
Passeig del Riu Besòs 1 - 08160 - Montmeló - Barcelona - España
Telephone number: 917870131, 931316673
Registration of Personal Data
The personal data collected on the Quinua Real website, through the forms available thereon, will be incorporated into an automated file under the responsibility of the Data Controller, and duly declared and registered in the General Register of the Data Protection Agency, which can be viewed on the website of the Spanish Data Protection Agency (http://www.agpd.es), in order to facilitate, streamline and comply with the commitments established between the Quinua Real website and the User, or to maintain the relationship established in the forms filled out by the latter, or to accommodate any requests or queries made.
Principles that apply to the processing of personal data
The processing of the User's personal data will be subject to the following principles, outlined in article 5 of the GDPR and in article 4 and following articles of Organic Law 3/2018, of 5 December, on Personal Data Protection and the guarantee of digital rights:
Principle of legality, loyalty and transparency: the User's consent will be required at all times, after providing them with completely transparent information about the purposes for which the personal data are collected.
Principle of purpose limitation: the personal data will be collected with specific, explicit and legitimate purposes.
Principle of data minimisation: only personal data that are strictly necessary for the purposes for which they are processed will be collected.
Principle of accuracy: the personal data must be accurate and always up-to-date.
Principle of limitation of the storage period: the personal data will only be stored in a manner that enables the identification of the User for the time necessary for their processing.
Principle of integrity and confidentiality: the personal data will be processed in a manner that guarantees their security and confidentiality.
Principle of proactive responsibility: the Data Controller will be responsible for ensuring compliance with the aforementioned principles.
Categories of personal data
The categories of data processed on Biotobio Ibérica, S.A's website are both identification data and special categories of personal data within the meaning of article 9 of the GDPR and article 9 of Organic Law 3/2018, of 5 December, on Personal Data Protection and the guarantee of digital rights.
Special categories of personal data are understood as those that reveal a person's ethnic or racial origin, political opinions, religious or philosophical beliefs, or trade union membership, along with the processing of genetic and biometric data used to unequivocally identify a natural person, data related to health or data related to the sexual life or sexual orientation of a natural person.
The explicit consent of the User will be necessary in all cases to process special categories of personal data for one or several specific purposes.
Legal basis for the processing of personal data
The legal basis for the processing of personal data is consent. Quinua Real undertakes to obtain the User's express and verifiable consent for the processing of their personal data for one or several specific purposes.
The User will have the right to withdraw their consent at any time. It will be as easy to withdraw consent as to give it. As a general rule, the withdrawal of consent will not restrict the use of the Website.
In cases in which the User must or can provide data through forms to submit queries, request information or for reasons related to the content of the Website, they will be informed when it is compulsory to include certain data due to the fact that they are essential for the correct development of the operation carried out.
Purposes of the processing for which the personal data are intended
The personal data are collected and managed by Quinua Real in order to facilitate, streamline and comply with the commitments established between the Website and the User, or to maintain the relationship established in the forms filled out by the latter, or to accommodate any requests or queries made.
Likewise, the data may be used for the commercial purpose of personalisation, or for operational and statistical purposes, and for activities related to the purpose of the Quinua Real website, as well as for data extraction and storage and marketing surveys to adapt the Content offered to the User, and to improve the quality, performance and browsing of the Website.
At the time of obtaining the personal data, the User will be informed of the specific purpose or purposes of the processing for which the personal data are intended; that is, the use or uses that will be given to the information collected.
Periods for which personal data will be stored
The personal data will only be stored for the minimum time necessary for processing purposes and, in any event, only for the following term: the period during which the account is open on the website, or until the User requests its deletion.
At the time of obtaining the personal data, the User will be informed of the period during which their personal data will be stored or, when that is not possible, the criteria used to determine this term.
Recipients of the personal data
In the event that the Data Controller intends to transfer personal data to a third country or international organisation, at the time of obtaining the personal data, the User will be informed of the third country or international organisation to which the Controller intends to transfer the data, as well as of the existence or absence of any adequacy decision made by the Committee.
Personal data of minors
In accordance with the provisions of article 8 of the GDPR and article 7 of Organic Law 3/2018, of 5 December, on Personal Data Protection and the guarantee of digital rights, only individuals who are over the age of 14 may lawfully give their consent to the processing of their personal data by Biotobio Ibérica, S.A. . In the case of children under the age of 14, their parents or guardians must give their consent to the processing, which will only be considered lawful when authorised by the latter.
Confidentiality and security of the personal data
The Quinua Real website undertakes to adopt the necessary technical and organisational measures, according to the appropriate level of security based on the risk of the data collected, in a manner that guarantees the security of the personal data and prevents the destruction, loss or accidental or unlawful alteration of the personal data transmitted, stored or otherwise processed, or the non-authorised disclosure of or access to such data.
However, due to the fact thatBiotobio Ibérica, S.A. cannot guarantee the security of the internet or the total absence of hackers or others who may fraudulently access the personal data, the Data Controller undertakes to inform the User, without undue delay, in the event of a personal data security breach, when it is probable that said breach implies a high risk for the rights and liberties of natural persons. In accordance with the provisions of article 4 of the GDPR, a personal data security breach implies a breach of security leading to the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the non-authorised disclosure of or access to such data.
The personal data will be treated as confidential by the Data Controller, who undertakes to inform of and guarantee, through a legal or contractual obligation, that this confidentiality will be respected by employees, associates and all individuals with access to the information.
Rights deriving from the processing of personal data
In relation to the Quinua Real website, the User has, and may therefore exercise before the Data Controller, the following rights, outlined in the GDPR and in Organic Law 3/2018, of 5 December, on Personal Data Protection and the guarantee of digital rights:
Right of access: The User has the right to obtain from the Quinua Real website confirmation as to whether or not their personal data are being processed, and, where that is the case, information about the specific personal data concerned and the processing that has been or is being carried out by the Quinua Real website, as well as, among others, available information as to the origin of the data and the recipients to whom they have been or will be disclosed.
Right of rectification: The User has the right to request the rectification of personal data when they are inaccurate or, taking into account the purposes of the processing, incomplete.
Right of erasure ("the right to be forgotten"): Unless otherwise provided for in applicable legislation, the User has the right to obtain the erasure of their personal data when they are no longer necessary in relation to the purposes for which they were collected or processed; the User has withdrawn consent to the processing and there is no other legal basis for the processing; the User objects to the processing and there are no other legitimate grounds for the processing; the personal data have been unlawfully processed; the personal data have to be erased for compliance with a legal obligation; or the personal data have been collected in relation to the direct offer of information society services to a child under the age of 14. In addition to erasing the data, the Data Controller, taking into account the technology available and the cost of implementation, must take reasonable steps to inform controllers who are processing the personal data that the data subject has requested the erasure of any links to those personal data.
Right to restriction of the processing: The User has the right to request the restriction of processing of their personal data. The User has the right to request the restriction of the processing when they contest to the accuracy of their personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but they are required by the User to file claims; and when the User has objected to processing.
Right to data portability: When the processing is carried out by automated means, the User has the right to receive their personal data from the Data Controller in a structured, commonly used and machine-readable format and to transmit those data to another controller. Provided that it is technically feasible, the Data Controller will transmit the data directly to the other controller.
Right to object: The User has the right to object to the processing of their personal data or to request that their data are no longer processed byBiotobio Ibérica, S.A. 's website.
Right not to be subject to a decision based solely on automated processing, including profiling: The User has the right not to be subject to a decision based solely on the automated processing of their personal data, including profiling, unless otherwise provided for in applicable legislation.
The User may exercise their rights by writing to the Data Controller using the reference "RGPD-www.quinuareal.bio", specifying:
The User's name, surname(s) and a copy of their National Identity Document (DNI). In cases in which representation is admitted, the person representing the User must also be identified in the same manner, including the document certifying the representation. The photocopy of the National Identity Document (DNI) may be substituted by any other legally valid means to certify identity.
The specific grounds for the request or the information subject to access.
Address for the purposes of notifications.
Date and signature of the applicant.
Any documents to certify the request formulated.
The request and all adjoined documents may be sent to the following address and/or email address:
Passeig del Riu Besòs 1 - 08160 - Montmeló - Barcelona - España
Email address: firstname.lastname@example.org
Claims before the supervisory body
In the case that the User believes there is a problem or breach of applicable regulations in relation to the manner in which their personal data are being processed, they have the right to effective legal protection and to file a claim before a supervisory body, particularly in the State in which their habitual residence or workplace is located, or the location of the alleged breach. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (http://www.agpd.es).
Cookies are automatic processes for the collection of information related to the preferences determined by the User while visiting the Website, in order to recognise them as a User, and customise their experience and use of the Website. They may also be used, for example, to help to identify and resolve errors.
The information collected through cookies may include the date and time of the visits made to the Website, the pages viewed during the visit to the Website and the sites visited immediately before and after. However, no cookie enables contact with the User's telephone number or through any other means of personal contact. No cookie can extract information from the User's hard drive or steal personal information. The only way that the User's private information can form part of the Cookie file is for the User to personally give this information to the server.
They are cookies that are sent to the User's computer or device and managed exclusively by Biotobio Ibérica, S.A. for the optimal functioning of the Website. The information collected is used to improve the quality of the Website and its Content and your User experience. These cookies make it possible to recognise the User as a returning visitor to the Website and to adapt it so that the contents offered adapt to your preferences.
The company or companies responsible for supplying cookies may disclose this information to third parties, when required to do so by law or when a third party processes this information for the companies.
Social network cookies
The Quinua Real website includes social network plugins, enabling access thereto from the Website. For this reason, social network cookies may be stored on the User's browser. The owners of these social networks have their own data protection and cookies policies and, in any case, they are responsible for their own files and their own privacy practices. The User must refer to such policies for information about these cookies and, where applicable, about the processing of their personal data. For merely informative purposes, links to these privacy and/or cookies policies are included below:
Disabling, rejecting and deleting cookies
The User must read and agree to the terms and conditions on personal data protection contained in this Privacy and Cookies Policy, as well as accept the processing of their personal data so that the Data Controller may proceed to do so in the form and for the terms and purposes indicated. Use of the Website will imply acceptance of its Privacy and Cookies Policy.
The Quinua Real website reserves the right to modify its Privacy and Cookies Policy, based on its own criteria, or due to any legislative, jurisprudential or doctrinal change made by the Spanish Data Protection Agency. The User will be explicitly informed of any changes or updates to this Privacy and Cookies Policy.
This Privacy and Cookies Policy was updated on 1 June 2019, in line with Regulation (EU) 2016/679, of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018, of 5 December, on Personal Data Protection and the guarantee of digital rights.