The Data Controller and website owner www.alimentium.com RESTALERGIA, SL. with registered office at Paseo Serra dels brucs 39, 08230 Matadepera (Barcelona), with tax identification number B66320300, registered in the Barcelona Commercial Registry in Volume 44401, Folio 36, Section 8, Sheet B-455006, Entry 1ª, 14 July 2014 (hereinafter ALIMENTIUM or the Data Controller).
info@alimentium.com
a. Name, title, gender.
b. Your contact details, personal account, as well as the name of your company and business location, including address, telephone number, VAT number and your email address.
c. Information about your requests, contracts or purchases.
d. We may record your communications with us made by email or other means.
e. Information collected when you use our website and other digital media, where applicable.
When you visit our website, we may record your IP address, browser type, operating system, referring website and web browsing behaviour.
f. Information related to social media.
Depending on your social media settings, we may receive information from your social media provider. For example, when you log in using a social media account to use our services, we may receive your social media profile, including contact details, interests and contacts. For more information about the personal data we receive from your social media provider and how to change your settings, please consult the website and privacy policy of your social media provider.
g. Information you decide to share with us. You may choose to share information with us, for example, by leaving us a comment on Twitter, completing a customer survey or submitting data for an event.
h. Information you provide to us to initiate a staff recruitment process, including your CV and other personal or professional data.
a. To register your personal data in our database if you are a customer or prospective customer.
b. To carry out the necessary commercial and administrative procedures with website users and our customers.
c. To contact you for contractual negotiations and to process your enquiries.
d. In the event of entering into contracts or purchases, the data will be used to process the corresponding contracts. In this regard, your data may be shared with third parties as detailed in section 5.
e. To send commercial advertising communications by email, social media or any other electronic or physical means, where you have expressly consented to the sending of electronic commercial communications. If you are an ALIMENTIUM customer, we may send you commercial information related to your investments or the services you have contracted. To communicate with you in order to answer your questions and handle your complaints.
f. To communicate with you in order to obtain your opinion on the service provided or the quality of our products or services.
g. Likewise, data collected during browsing is processed in order to provide access to the website’s online content, as well as to respond to requests from website users, keep a record of visit statistics (IP addresses, browser data, country, page accessed, etc.) to help us develop better services and products, optimise our offering, provide more effective customer service, and improve the design and content of our websites.
h. Customer and/or Supplier data will be processed, within the contractual relationship that links them to the controller, in compliance with the administrative, tax, accounting and employment obligations required under current legislation.
The contact details of our customers’ contact persons and of our customers’ suppliers, provided through the Alimentium platform registration form, may be shared with Restalergia customers who are users of the Platform in order to better develop communications between customers and suppliers.
i. Objection or withdrawal. You may object to or withdraw your consent to receive marketing communications at any time by following the instructions in the relevant marketing communication or by contacting us at info@alimentium.com.
j. If you complete any of the forms provided on our website or in any other way, it will be necessary to provide certain personal data, which will be processed for the purpose for which it is requested.
k. The personal data of our employees will be used to comply with the relevant employment and contractual obligations.
l. The purpose of processing your personal data included in your CV or any other data you share with us during your participation in our recruitment process is to carry out that process, and we inform you that:
If you do not fit the profiles required by the Company, and in compliance with data protection regulations, your data will be deleted immediately and we will not keep a copy.
If we consider that your profile may match our needs, but there are currently no vacancies, we will keep it for a maximum of 1 year in case a vacancy arises during this period. After this period, it will be deleted if no vacancy arises or if it does not match any of the processes we initiate. We will not keep any copy, although, if your profile is of interest to us, we may ask you for an updated version.
If your profile matches a position that is currently vacant, we will contact you shortly to begin a recruitment process.
m. In accordance with the LSSICE, we inform you that ALIMENTIUM does not engage in spam practices and, therefore, does not send commercial emails unless it has the necessary legal basis. In any case, you will always have the option to withdraw your consent to receive our communications.
We will not process your personal data for any purpose other than those described, except where required by law or by a court order.
Your personal data will not be subject to decisions based on automated processing that produce effects concerning you.
The legal basis for processing your personal data is:
Performance of a contract: this is when the processing of your personal information is necessary to fulfil our obligations under a contract.
Legal obligation: this is when we are required to process your personal information to comply with a legal obligation, such as keeping records for tax purposes or providing information to a public authority or law enforcement agency, or in relation to money laundering prevention systems.
Legitimate interests: we will process information about you where it is in our legitimate interest to do so in order to operate a legal business, provided that this does not override your interests.
Your express consent: in some cases, we will ask for your specific permission to process part of your personal information, and we will only process your personal information in this way if you agree. You may withdraw your consent at any time by contacting ALIMENTIUM at info@alimentium.com.
The legal basis for processing suppliers’ personal data is the contractual relationship created when entering into a contract with them. The legal basis for processing our employees’ data is the employment relationship.
Currículum Vitae (CV)
We inform you that, in accordance with the provisions of data protection regulations, if you send your CV to ALIMENTIUM, understood as any of the companies owned, managed or advised by ALIMENTIUM, it will be stored and processed for participation in the recruitment processes we carry out. The legal basis that legitimises our processing is your express consent when you voluntarily send us your CV.
Likewise, we inform you that your CV will be deleted and we will not keep any copies if your profile does not match any of the positions offered by the Company. If your profile could potentially be of interest to the Company, your CV will be kept for a maximum period of two years for future recruitment processes. After this period, if you have not been selected for any process, it will be deleted and we will not keep any copy or retain any of your personal data.
We will keep your personal data for the period necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
The personal data you provide to us will be kept for as long as necessary to manage the information you request, or while there are contractual obligations arising from services or content requested by users, and subsequently until the expiry of any legal, contractual or professional liabilities that require its retention.
The criteria used to determine our retention periods include:
The duration of our ongoing relationship with you and the provision of the Services, for example, for as long as you have an account with us or continue to use our Services.
If there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period before we can delete them).
Whether it is advisable to retain the data considering our legal position (such as for statutes of limitations, litigation or regulatory investigations).
Once the data has fulfilled the purposes for which it was collected, we will permanently delete it. However, we will retain your data for longer if necessary to comply with legal obligations. Likewise, it may be necessary to keep it for as long as required until the statute of limitations for any legal liabilities has expired.
If we hold your email address in our database for sending commercial information, it will be retained as long as the contractual relationship is maintained and until deletion is requested by the data subject.
Your Personal Data will be processed by duly authorised personnel and, if necessary or practical to fulfil the purposes indicated above, may be processed, in certain cases, by third parties.
The categories of recipients to whom your Personal Data may be disclosed are as follows:
a. Data processors, such as IT providers, consultants and other companies.
b. Public bodies and authorities, exclusively for the purpose of complying with legal and regulatory obligations, as well as requests from law enforcement authorities where applicable.
c. Other providers to whom, where appropriate, your personal data may be transferred, where necessary for our normal operations, such as financial institutions and insurers, among others.
d. Clients of Restalergia, users of the Alimentium platform.
All of them are bound by a duty of professional secrecy or act under a legal obligation.
What are your rights when you provide us with your data?
If you wish to exercise the rights granted to you under data protection regulations, please send an email to info@alimentium.com indicating in the subject line the right you wish to exercise and attaching a copy of your national identity document or passport.
The rights recognised under current regulations, which may, where applicable, be exercised, are as follows:
You have the right to be informed by the Data Controller as to whether or not your personal data is being processed, and if processing is confirmed, you may access it along with the following information:
The purposes of the processing.
The categories of data.
The period or criteria for data retention.
You shall have the right to request that the Data Controller rectifies your data where it is inaccurate or incomplete, by means of an additional rectifying statement.
The data subject shall have the right to request that the Data Controller deletes their data where:
The processing is unlawful.
The data subject has withdrawn their consent.
The data is no longer necessary in relation to the purposes for which it was collected or processed.
The data subject has exercised the right to object and there are no other overriding legitimate grounds for the processing.
The data must be deleted in order to comply with a legal obligation of the Data Controller.
The data subject shall not have the right to request that the Data Controller deletes their data where processing is necessary:
To exercise the right to freedom of expression and information.
To comply with a legal obligation of the Data Controller.
For the establishment, exercise or defence of legal claims.
For reasons of public interest based on current legislation for public health reasons or for historical, statistical or scientific research purposes.
You have the right to request that the Data Controller transfers your data to another Data Controller or to the data subject themselves, in a structured, commonly used and machine-readable format, where the processing is carried out by automated means and is based on:
The data subject's consent for specific purposes.
The performance of a contract or pre-contractual arrangements with the data subject.
The right to data portability shall not apply where:
Transmission is technically impossible.
It may adversely affect the rights and freedoms of third parties.
The processing is carried out in the public interest on the basis of current legislation.
1. The data subject shall have the right to obtain from the Data Controller the restriction of processing of their data where one of the following conditions applies:
The accuracy of the personal data is contested by the data subject, for a period enabling the Data Controller to verify the accuracy of the personal data.
The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of its use instead.
The Data Controller no longer needs the personal data for the purposes of processing, but it is required by the data subject for the establishment, exercise or defence of legal claims.
The data subject has objected to the processing, pending verification as to whether the Data Controller's legitimate grounds override those of the data subject.
2. Where processing has been restricted under paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.
3. A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the Data Controller before the restriction is lifted.
The data subject shall have the right to object, at any time, to the processing of their personal data on grounds relating to their particular situation. The Data Controller shall cease processing the personal data unless the Data Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning them for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, particularly where it relates to the following personal aspects:
Work performance.
Economic situation.
Health. Personal preferences or interests.
Reliability.
Behaviour.
Location or movements of the individual.
Where profiling is based solely on automated processing:
The data subject shall have the right to be informed if a decision that may be taken could have legal effects significantly affecting them.
The data subject shall have the right to obtain human intervention from the Data Controller in order to express their point of view and contest the decision, if the processing has been authorised on the basis of:
The explicit consent of the data subject.
A contract between the Controller and the data subject.
This right shall not apply where the decision:
Is necessary for entering into or performing a contract between the data subject and the Data Controller.
Is authorised by European Union or Member State legislation to which the Data Controller is subject, and which also lays down suitable measures to safeguard the data subject's rights, freedoms and legitimate interests.
Is based on the explicit consent of the data subject.
If you believe that ALIMENTIUM has infringed any of your rights protected under personal data protection regulations, or that it has breached any obligation in relation to the protection of Personal Data, you have the right to lodge a complaint with the competent Supervisory Authority, which in Spain is the Spanish Data Protection Agency (Agencia Española de Protección de Datos), located at Calle Jorge Juan, 6, 28001 - Madrid. Tel. 901 100 099 - 912 663 517.
This privacy policy is governed in all respects by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
It is also governed by Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights. Likewise, our website is governed by Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce.
Any dispute arising in connection with our website shall be subject exclusively to the jurisdiction of the courts of the city of Barcelona.
The data you provide us with will be treated confidentially. ALIMENTIUM has adopted all the technical and organisational measures and all the necessary levels of protection to guarantee the security of data processing and to prevent its alteration, loss, theft, unauthorised processing or access, in accordance with the state of the art and the nature of the data stored. It is likewise guaranteed that processing and recording in files, programmes, systems or equipment, premises and centres comply with the requirements and conditions of integrity and security established under current regulations.
We use reasonable safeguards to protect personal information against loss and theft, including encryption technology, restricted access, firewalls and Secure Sockets Layers (SSL). The SSL CERTIFICATE provides authentication, privacy and security of information between ALIMENTIUM and the user. ALIMENTIUM has an SSL security certificate that secures internet connections by encrypting data sent between your browser, our website and our website's server.
However, internet security cannot be guaranteed. Our Company assumes no liability for any damage, loss or harm you may experience or incur as a result of sending personal or confidential information over the internet, and you should take your own measures to protect your sensitive information. If you have any questions about the security of our Site, please contact us at info@alimentium.com
The language applicable to this Privacy Policy is Spanish (Castilian). Therefore, in the event of any discrepancy between this and any versions we may provide in other languages, the Spanish version shall prevail.
This Privacy Policy was last updated in September 2024, but may be updated at any time. We recommend that you review it each time you access our website in case it has undergone any changes.