PRIVACY AND DATA PROTECTION POLICY

Controller: Who is the data controller?

• Identity: GRANITOS DEL LOURO, S.A. – NIF: A-36.057.305
• Address: CERQUIDO, 37A – SAN ESTEBAN DE BUDIÑO, 36.475 SALCEDA DE CASELAS (PONTEVEDRA)
• Telephone: 986 34 34 08 – Email: dpo@granilouro.com

Purpose: What is the purpose of the data processing?

At GRANITOS DEL LOURO, S.A. we process the information provided to us by interested parties for the following purposes:

To present budgets with information on our products and services

• To provide the requested service, carry out invoicing of the same.
• To send advertising related to our products and services.

Storage period limitation: How long will we store your data?

The data provided will be kept as long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.

Legitimation: What is the legitimation for the processing of your data?

The legal basis for the processing of data is the consent obtained from the interested party, in addition to the contracting of the services.

Recipients: Who will receive your data?

Your data will be notified to:

• The Spanish Tax Authority
• Banks and Financial Entities
• Management

Rights: What are your rights when facilitating your data to us?

Any party has the right to obtain confirmation as to whether at GRANITOS DEL LOURO, S.A., we are processing personal data that concerns them.

Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, as relevant, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, interested parties may request the restriction of the processing of their data, in which case we will only keep them for the exercise or defence of claims.

Under certain circumstances and in specific situations, interested parties may object to the processing of their data. GRANITOS DEL LOURO, S.A. will stop processing the data, unless there are compelling legitimate reasons to do so, or if necessary to exercise or defend against possible claims.

The interested party has the right to withdraw his/her consent at any time, without this affecting the legality of the processing based on consent prior to its withdrawal.

For additional information on your rights, visit the website of the Spanish Data Protection Agency (https://www.agdp.es/)

To exercise your rights, send an email to info@granilouro.com identifying yourself, attaching a copy of your ID and indicating the right you wish to exercise and the reason for the same.

Source: How did we obtain your data?

• The personal data that we process at GRANITOS DEL LOURO, S.A. comes from the interested party.

The data categories processed are:

• Identification data.
• Postal or email addresses.
• Economic data.
• Specially protected data will not be processed.