1. IDENTIFICATION OF THE DATA CONTROLLER

Data controller: QUESOS DEL CASAR S.L.

Tax ID number: B10145720

Registered address: Crta. Casar-Arroyo, s/n, Postcode 10190, Casar de Cáceres, Cáceres, Spain.

Registration details: Registered with the Mercantile Registry of Cáceres, Folio 27, Volume 240, Sheet CC-1165.

General contact email: atencionalcliente@quesosdelcasar.es

Data protection contact: informatica@quesosdelcasar.es

2. GENERAL INFORMATION ON DATA PROCESSING

This Privacy Policy informs the user about the manner in which QUESOS DEL CASAR S.L. collects, uses, stores and protects the personal data provided through the website www.quesosdelcasar.es (hereinafter, the “Website”), as well as any data that may be generated as a result of browsing, using the services available on it, making online purchases or contacting the company by any other means.

The user must read this Privacy Policy carefully. It has been drafted in a clear and understandable manner in order to help the user decide freely and voluntarily whether to provide their personal data.

3. MANDATORY NATURE OF THE REQUESTED DATA

The data requested in the Website forms and during the purchase process are generally necessary to process the user’s request, manage the order or provide the corresponding service, unless otherwise expressly stated in the relevant form.

Failure to complete the mandatory fields may prevent the proper processing of the request, the creation of the user account, the completion of the order or the provision of the requested service.

4. PURPOSES OF THE PROCESSING AND DATA RETENTION PERIODS

The user’s personal data may be processed by QUESOS DEL CASAR S.L. for the following purposes:

• To manage the registration and maintenance of the user account, where this functionality is available.
• To manage the online purchase of products, including order processing, payment, invoicing, preparation, shipping, delivery, after-sales service and the handling of any incidents, returns or complaints.
• To respond to queries, requests for information or communications sent through forms, by email or by any other available contact channel.
• To comply with applicable legal, tax, accounting, administrative and consumer protection obligations.
• To send commercial communications about products, promotions, news or content related to QUESOS DEL CASAR, where the user has requested them or expressly consented to receive them.
• Where applicable, to send commercial communications relating to QUESOS DEL CASAR S.L.’s own products or services similar to those previously purchased by its customers, in accordance with applicable law, always providing a simple and free means of objection.
• To manage Website security, prevent misuse, fraud or unauthorised access, and protect the rights and interests of QUESOS DEL CASAR S.L.

The data will be retained for as long as necessary to fulfil the purpose for which they were collected and, thereafter, for the legally required retention periods and limitation periods for liabilities.

In particular:

• Data relating to purchases, invoicing and the contractual relationship will be retained for as long as necessary to manage the commercial relationship and, afterwards, for the applicable legal periods.
• Data processed in order to respond to queries or requests will be retained for as long as necessary to manage them and, where appropriate, for the period required to deal with any liabilities arising from such response.
• Data processed for commercial communications will be retained until the user withdraws consent, unsubscribes or objects to the processing.

5. CATEGORIES OF DATA PROCESSED

Depending on how the user uses the Website and the services contracted, QUESOS DEL CASAR S.L. may process the following categories of data:

• Identification data: first name, surname(s) and, where necessary, tax identification number or identification document when required for invoicing or administrative management.
• Contact details: postal address, email address and telephone number.
• Transaction and purchase data: products purchased, amount, payment method, order history, incidents, returns and data associated with the commercial relationship.
• Billing and payment data: data necessary to manage collection, invoicing and, where applicable, payments and refunds.
• Website browsing and usage data: IP address, online identifiers, technical information about the device or browser and data derived from the use of the Website, under the terms set out in the Cookies Policy.
• Data arising from communications: information provided by the user when contacting QUESOS DEL CASAR S.L. by email, forms or any other available channel.

If the user provides third-party data, the user declares that they have sufficient legal basis to do so and undertakes to inform such third parties of the information contained in this Privacy Policy. QUESOS DEL CASAR S.L. may adopt appropriate measures to verify this where necessary.

6. LEGAL BASES FOR PROCESSING

QUESOS DEL CASAR S.L. will process the user’s personal data on the basis of the following legal grounds:

• Performance of a contract or implementation of pre-contractual measures: to manage registration, process purchases, provide the requested service, handle incidents or respond to requests related to the contractual relationship.
• Compliance with legal obligations: to comply with tax, accounting, administrative, consumer protection and any other obligations required by applicable law.
• The data subject’s consent: for sending electronic commercial communications when the user has ticked the relevant box or has expressly requested to receive them.
• Legitimate interest of the data controller: to ensure Website security, prevent fraud or misuse, manage complaints and defend the rights and interests of QUESOS DEL CASAR S.L.
• Prior contractual relationship, where applicable: for sending commercial communications about QUESOS DEL CASAR S.L.’s own products or services similar to those previously purchased, in the cases permitted by the applicable regulations on information society services and electronic commerce, always with a simple and free option to object.

Where processing is based on consent, the user may withdraw it at any time, without this affecting the lawfulness of the processing carried out before its withdrawal.

To withdraw consent or exercise any data protection right, the user may write to informatica@quesosdelcasar.es with the subject line “Data Protection”.

7. DATA RECIPIENTS

The user’s personal data may be disclosed or made accessible to the following categories of recipients, insofar as this is necessary for the fulfilment of the purposes indicated:

• Technology service providers, web hosting, maintenance, IT support and Website development providers.
• E-commerce, business management, invoicing or ERP service providers.
• Financial institutions, payment gateways and providers involved in the management of collections, payments or refunds.
• Transport, courier and logistics companies responsible for the preparation, dispatch and delivery of orders.
• Electronic communications and marketing service providers, where the user has subscribed or there is a valid legal basis for sending commercial communications.
• Advisers, managers, auditors, consultants, lawyers or professional providers involved in compliance with legal obligations or in the defence of the interests of QUESOS DEL CASAR S.L.
• Public authorities, competent bodies, courts and tribunals, where disclosure is required by law or is necessary for the formulation, exercise or defence of claims.

QUESOS DEL CASAR S.L. does not sell or transfer personal data to third parties for their own commercial purposes unrelated to the user relationship.

Some providers may be located outside the European Economic Area. In such cases, international data transfers will only take place where there is a valid legal basis and with the appropriate safeguards required by data protection law.

8. USER RESPONSIBILITY

The user guarantees that the data provided to QUESOS DEL CASAR S.L. are true, accurate, complete and up to date.

• The user shall be responsible for the truthfulness of the data provided and must keep them properly updated.
• If the user provides third-party data, the user declares that they have sufficient legal basis to do so and that they have previously informed such third parties of the content of this Privacy Policy.
• The user shall be liable for any direct or indirect damage or loss that may be caused to QUESOS DEL CASAR S.L. or to third parties as a consequence of failing to comply with this obligation.

9. COMMERCIAL COMMUNICATIONS

QUESOS DEL CASAR S.L. may send commercial communications by electronic means relating to its own products, promotions, news or content related to its activity in the following cases:

• Where the user has given express consent by means of a specific tick box, a voluntary request or any other valid subscription mechanism.
• Where there is a prior contractual relationship and the communication refers to QUESOS DEL CASAR S.L.’s own products or services similar to those previously purchased, in accordance with the terms permitted by applicable law.

In all cases, the user may object or unsubscribe in a simple and free manner, either through the link included in each commercial communication or by writing to informatica@quesosdelcasar.es

Unsubscribing from commercial communications will not affect communications that are strictly necessary for order management, the contractual relationship or compliance with legal obligations.

10. USER RIGHTS

The user may exercise, at any time and free of charge, their rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw any consent given where processing is based on consent.

Likewise, where applicable, the user may object to processing based on the legitimate interest of the data controller and to the receipt of commercial communications.

For this purpose, the user may send a request to QUESOS DEL CASAR S.L. by post to the registered address indicated above or by email to informatica@quesosdelcasar.es, with the subject line “Data Protection”. Where there are reasonable doubts as to the identity of the requester, additional information may be requested in order to verify it.

The user also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their data does not comply with the applicable regulations. Further information is available at www.aepd.es

QUESOS DEL CASAR S.L. will process personal data confidentially and will apply the appropriate technical and organisational measures to ensure a level of security appropriate to the risk, preventing their alteration, loss, unauthorised processing or access.