Privacy policy

At UNIÓN DE COOPERATIVAS ASOCIACIÓN GALEGA DE COOPERATIVAS AGRARIAS AGACA we understand that it is essential to maintain a transparent relationship with you; therefore, below, we present our Privacy Policy so that at all times, you are adequately informed about how we collect and securely treat any data you provide us with.

Your data will be processed under current legislation and, in particular, following the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on protecting natural persons about the processing of personal data and on the free movement of such data.

A careful reading of our Privacy Policy will provide you with the information you need to understand how we will use the data you provide.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

Suppose you, or an authorised person, have provided us with your data. In that case, we inform you that as it is a data processing within a collaboration project, all the participating entities assume the role of PROCESSING CORRESPONSIBILITIES, each making use of the data according to the needs derived from their tasks within the project.

This data will be processed following the provisions of current legislation on the protection of personal data.

You can consult the complete list, with their identification details in the “members” section of the Website.

All of them undertake to comply with the obligation of personal data secrecy and their duty to protect them. To this end, we adopt the necessary measures to prevent their alteration, loss, processing, or unauthorised access according to the Regulation provisions.

WHERE DO WE REPORT?

We provide information through the website www.agrosmartglobal.eu in the section corresponding to the privacy policy. More information in “Legal Notices” and other means of communication that we consider necessary and appropriate to provide you with all the information that affects your data processing.

WHAT PERSONAL DATA DO WE PROCESS?

The personal data we process are:

• Those that you choose to provide us with voluntarily;
• Data derived from your communications with us;
• The information corresponding to your browsing in the case of Online Services (IP address or information derived from cookies or similar devices (you can see our Cookies Policy on the Website);
• Information that is available in publicly accessible sources, to which we can legitimately have access;
• The data arising from your relationship with us, including your image, always informing you in this case of capturing your image possibility;
• Those provided to us by third parties about you, where there is a legitimate basis for it, or we have obtained your consent to do so;
• The data of third parties that you provide to us, subject to the consent of the third party in question;

HOW DO WE PROCESS THE DATA?

All of us responsible for your personal data are always in strict compliance with current legislation. Furthermore, we inform you that we have the appropriate technical and organisational measures in place to guarantee an optimum level of security, thereby ensuring that only authorised persons have access, that we will keep them intact, preventing any intentional or accidental loss, and that we have reinforced our data processing systems and services.

The operations, management, and technical procedures that we carry out in an automated or non-automated way and that make possible the collection, storage, modification, transfer, and other personal data actions are considered to be the processing of personal data.

WHAT IS THE LEGITIMACY OF THE PROCESSING?

The basis for the legitimisation of personal data processing will result from participating in this project and expressing consent in the necessary cases.

HOW LONG DO WE KEEP YOUR DATA?

Personal data relating to natural persons that we collect by any means will be kept for as long as the data subject does not request their deletion. Likewise, they will be kept as long as the relationship that gave rise to the data processing is maintained, respecting the legal retention periods. At the end of this period, the personal data will be deleted from all the data controllers’ systems indicated in section 1 of this document.

WILL YOUR DATA BE COMMUNICATED TO THIRD PARTIES?

There will be no assignment, transmission or transfer of personal data, except those already reported, which are not the result of a legal obligation. If we are requested by public administrations or European institutions, within the scope of the functions expressly attributed to them by law, your data will be transmitted.

Each co-responsible party will report data according to the requirements of each country.

If there is an assignment, transmission or transfer of personal data outside of the aforementioned cases, you will be previously informed so that, if necessary, you can give us your consent.

To organise ourselves properly, to have good operations and procedures to ensure good management, perhaps it may be necessary to hire consultants, professionals, or other service companies to process data under our instructions.

This processing on behalf of third parties is regulated by a contract in writing or in some other legally admissible form that allows proof of conclusion and content, expressly specifying that the processor will process the data following our instructions and will not apply or use them for a purpose other than that stated in the contract, nor will it communicate them, not even for storage, to other persons.

WHAT ARE YOUR RIGHTS?

Data protection regulations give you the following rights:

• The right to revoke any consent previously given.
• Right of access: To know what type of data is being processed and the processing characteristics carried out.
• Right of rectification: To be able to request the modification of data that are inaccurate or untrue.
• Right of portability: To obtain a copy in an interoperable format of the data being processed.
• Right to restriction of processing in cases where it is not considered necessary.
• Right of cancellation: To request the cessation of data processing and their deletion when their storage is no longer necessary.

If you would like more information regarding your data processing, rectify any inaccuracy, oppose and/or limit unnecessary processing, or request processing cancellation when data is no longer necessary, you may write to UNIÓN DE COOPERATIVAS ASOCIACIÓN GALEGA DE COOPERATIVAS AGRARIAS AGACA at 22 Ent. TOMIÑO St.- 15703 – SANTIAGO DE COMPOSTELA (A Coruña) or e-mail to derechoslopd@agaca.coop.

• This communication must contain the following information: the name and surname of the User, the request, the address and supporting data.
• The User must carry out the exercise of rights. However, they may be exercised by a person authorised as the User’s legal representative. In this case, documentation must be provided to accredit this representation of the interested party.

Likewise, we would like to inform you that you can withdraw the consent given without affecting the lawfulness of the processing already carried out by sending your request to the same address indicated in the previous paragraph. In this case, you must accompany your request with a copy of your ID card or document proving your identity.

We would also like to remind you that you have the right to complain with the Spanish Data Protection Agency (AEPD) if you consider your rights have been infringed: Data Protection 6 Jorge Juan St.- 28001 Madrid – FAX: +34914483680- TELF: +34901100099- E-mail: ciudadano@agpd.es

WHAT IS THE PURPOSE AND BASIS OF LEGITIMACY FOR THE DATA PROCESSING AND HOW LONG WILL THE DATA BE KEPT?

Data processing purposes carried out by any or all of the Controllers listed above are set out below.