In compliance with current legislation, VALTRUF (hereinafter also referred to as the Website) is committed to adopting the necessary technical and organizational measures, according to the appropriate level of security based on the risk of the collected data.

Laws incorporated into this privacy policy

This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the Internet. Specifically, it complies with the following laws:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
• Royal Decree 1720/2007, of December 21, approving the Regulation for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
• Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

AGRÍCOLA LAS BELLOTAS, S.L., a company registered at Calle Les Marines, 11, phase 2, Urbanización Play Puig, postal code 46540 – El Puig de Santa María, Valencia, Spain, with Tax ID B06774376.

Contact telephone: +34 644 837 516
Contact email: info@valtruf.com

Record of personal data

In compliance with the GDPR and the LOPD-GDD, VALTRUF informs users that personal data collected through forms on its pages will be incorporated and processed in a file for the purpose of facilitating, expediting, and fulfilling the commitments established between VALTRUF and the User, or maintaining the relationship established in such forms, or to respond to a request or inquiry. Likewise, in accordance with GDPR and LOPD-GDD provisions, unless the exception in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to their purposes, the processing operations carried out and other relevant circumstances.

Principles applicable to the processing of personal data

The processing of the User’s personal data shall be governed by the following principles established in Article 5 of the GDPR and Articles 4 and subsequent of Organic Law 3/2018:

• Principle of lawfulness, fairness, and transparency: User consent will always be required, following full transparency about the purposes for which personal data are collected.
• Purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
• Data minimization: Only data strictly necessary for each purpose will be collected.
• Accuracy: Personal data must be accurate and kept up to date.
• Storage limitation: Data will be kept only as long as necessary to fulfill the processing purposes.
• Integrity and confidentiality: Data shall be processed in a secure and confidential manner.
• Accountability: The controller shall be responsible for ensuring compliance with these principles.

Categories of Personal Data
Depending on the purpose, VALTRUF processes the following categories of data:

Identification data: name, surname, postal address, email address, image, postal code, telephone number, ID number, vehicle registration number.
Data related to customer reviews.
User identification codes or passwords.
Traffic and location data (IPs).
Commercial information data.
Economic, financial, or banking data.

The personal data requested are mandatory; thus, refusal to provide them will result in the impossibility of carrying out the contracted services.

In the event that the user provides third-party data, they declare that they have obtained the corresponding consent and undertake to communicate the information contained in this clause to them, releasing VALTRUF from any liability in this regard. However, VALTRUF may verify this fact by applying due diligence measures in accordance with data protection regulations.

Data fields marked with an asterisk (*) in VALTRUF’s forms on the Website are required to fulfill contractual or legal obligations.

Therefore, if the user does not provide them, registration on the Website or processing of their request will not be possible.

Legal Basis for the Processing of Personal Data

The legal basis for the processing of personal data is the User’s consent, requested for each specific case.

The User has the right to withdraw consent at any time. Withdrawing consent is as simple as granting it, and, as a general rule, withdrawal will not affect the lawful use of the Website.

When the User provides data through forms for inquiries, information requests, or matters related to the Website’s content, it will be indicated whether providing certain information is mandatory, as it may be essential for proper transaction processing.

Purposes of Data Processing

VALTRUF will process the User’s data, manually and/or automatically, for the following specific purposes:

• Manage the User’s registration on the Website.
• Facilitate, expedite, and fulfill commitments established between the Website and the User.
• Manage the purchase of products and/or services made through the Website, including invoice requests, collection, issuance, and transmission electronically when requested by the User.
• Send (by email, mail, and/or SMS) electronic communications containing offers, promotions, and news related to the Website, unless the User indicates otherwise or objects.
• Send commercial and/or promotional information, as well as satisfaction surveys related to products or services contracted through the Website, unless the User objects.
• Generate anonymous statistical reports about user access habits and activity on the Website.
• Create a commercial profile and carry out commercial actions based on it, using data derived from the management of purchased products (browsing data, access habits, traffic), unless the User objects or withdraws consent.
• Comply with legally established obligations and verify contractual obligations, including fraud prevention.

Data Retention Periods

Personal data will only be retained for the minimum time necessary for their intended purpose and, in any case, for no longer than the following period: or until the User requests deletion.

When personal data are obtained, the User will be informed of the retention period or, when this is not possible, the criteria used to determine it.

Recipients of Personal Data

The User’s personal data will not be shared with third parties.

In any case, when personal data are obtained, the User will be informed about the recipients or categories of recipients.

Personal Data of Minors

In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights, only individuals aged 14 or older may lawfully consent to the processing of their personal data by VALTRUF. For minors under 14, parental or guardian consent is required, and processing will only be lawful to the extent such consent has been granted.

Confidentiality and Security of Personal Data

VALTRUF undertakes to adopt the necessary technical and organizational measures, appropriate to the level of risk, to ensure the security of personal data and prevent their accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access.

The Website has an SSL (Secure Socket Layer) certificate that ensures encrypted and confidential data transmission between the server and the User.

However, since VALTRUF cannot guarantee the absolute invulnerability of the Internet or the complete absence of hackers or fraudulent access, the Controller commits to notifying the User without undue delay of any personal data breach likely to result in a high risk to the rights and freedoms of individuals.

All personal data will be treated as confidential by the Controller, who shall ensure that confidentiality is respected by employees, partners, and any person with access to the information through legal or contractual obligation.

Rights Derived from the Processing of Personal Data

The User may exercise the following rights recognized by the GDPR and Organic Law 3/2018:

• Right of access: To obtain confirmation of whether VALTRUF processes personal data, and, if so, access to personal data and related information, including data origin and recipients.
• Right of rectification: To correct inaccurate or incomplete personal data.
• Right of erasure (“right to be forgotten”): To request deletion of personal data in circumstances established by law, such as when data are no longer needed, consent is withdrawn, processing is unlawful, or data were obtained from an online service offered to minors under 14.
• Right to restrict processing: To limit processing in certain cases (e.g., accuracy contested, unlawful processing, or pending legal claims).
• Right to data portability: When automated processing applies, the right to receive data in a structured, commonly used, and machine-readable format, and to transmit them to another controller.
• Right to object: To oppose or stop data processing.
• Right not to be subject to automated decisions, including profiling: To avoid being subject to a decision based solely on automated processing unless otherwise provided by law.

The User may exercise these rights through a written communication to the Controller, referencing “GDPR – https://valtruf.com/”, and including:

• Full name and copy of ID (or equivalent proof of identity).
• Specific reasons or information requested.
• Address for notifications.
• Date and signature of applicant.
• Supporting documents, if applicable.

Requests and related documentation may be sent to:

Postal address: Les Marines, 11, Phase 2, Urbanización Play Puig. El Puig de Santa María. CP 46540. Valencia. SPAIN
Email: info@valtruf.com

Links to Third-Party Websites

The Website may include hyperlinks allowing access to third-party websites not operated by VALTRUF. The owners of such sites are responsible for their own data protection policies and practices.

Complaints to the Supervisory Authority

If the User believes their data are being misused or unlawfully processed, they have the right to effective judicial protection and to file a complaint with a supervisory authority, particularly in their country of residence, workplace, or place of the alleged infringement. In Spain, this authority is the Spanish Data Protection Agency (http://www.agpd.es).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

Users must have read and agreed to the terms of this Privacy Policy and given consent for VALTRUF to process their data as described. Using the Website implies acceptance of this Policy.

VALTRUF reserves the right to modify this Privacy Policy at its discretion or due to legislative, jurisprudential, or regulatory updates. Changes or updates will not be explicitly notified to Users. It is recommended to review this page periodically to stay informed of updates.

This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 (GDPR) and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights.

This document was created using an online privacy policy generator on 01/07/2021.