Who is responsible for the processing?

FAMILIA OSORIO SL (hereinafter, interchangeably, “FAMILIA OSORIO COFFEE” or “the Controller”) located at PASSATGE DE PADRÓ 13, 08242 Manresa complies with the requirements established in current legislation on the Protection of Personal Data and its implementing regulations and is the Controller of the processing of personal data that users may provide us through the website www.familiaosorio.com.

The purpose of this privacy policy is to inform you about the Data Controller's personal data protection policy in relation to the data provided by users through the website www.familiaosorio.com (hereinafter, "Website") so that you can freely and voluntarily decide whether you wish to provide FAMILIA OSORIO COFFEE with the personal data that we may request or obtain from you in connection with your access to and use of the Website.

From which groups of interested parties is personal data collected?

Data is collected through the Website from the following groups of interested parties:

• Recipients of the newsletter and other commercial communications: Through the Website, users can subscribe to our newsletter, as well as request to receive information about news and promotions.

• Interested parties : The Website has a contact form as well as an email address through which anyone interested in making a request, inquiry or complaint can send us a message.

• Online store customers : Through the Website you can access an online sales platform for our products aimed at all potential customers.

Users are obliged to ensure that the data provided is true, accurate, and lawful. FAMILIA OSORIO COFFEE reserves the right to exclude from its services those users who have provided false data, without prejudice to any legal action that may be taken. You agree to inform FAMILIA OSORIO COFFEE of any changes to your personal data so that it can keep it updated at all times.

MINORS

Access to the website and, especially, the use of the online store, is prohibited to minors and FAMILIA OSORIO COFFEE will not collect or process personal data of minors under eighteen (18) years of age.

FAMILIA OSORIO COFFEE reserves the right to verify, by any means it deems appropriate, the actual age of any user who has provided data through the Website and, if necessary, deny said user access to the services offered and proceed with their cancellation and deletion. However, as it is extremely difficult to determine the actual age of individuals who provide data on the Website, if you discover that one of your children has done so, please contact FAMILIA OSORIO COFFEE at the following email address: hola@familiaosorio.com

What personal data is collected?

By subscribing to the newsletter and other informational communications, the email address is necessarily collected.

From those interested in contacting us, we collect the email address and any other information that the interested party may provide on their own initiative in the text of their inquiry.

From online store customers we collect the following data: indispensably the name and surname, postal and email address, telephone number and bank details according to the chosen payment method.

Users are hereby informed that access to certain services offered through this website will require the provision of the personal data previously indicated as essential. Failure to provide this data will prevent access to and use of said services and content.

For what purpose and under what legal basis are personal data processed?

The data provided when subscribing to the newsletter and/or other informational communications is processed for the sole purpose of sending you the aforementioned information and its processing is based on the explicit consent given by the interested party when registering for the service.

The data provided through the contact form is processed for the purpose of attending to and responding to the request, query or complaint made by the interested party and its processing is also based on the explicit consent given by the interested party in the process of using the contact form.

The data provided through the online sales platform is processed for the purpose of managing the sale and shipment of our products commercially, administratively, accounting, and tax-related aspects. This processing is based on the necessity of implementing pre-contractual measures at the request of the data subject and formalizing and executing the subsequent sales contract. The accounting and tax management is based on the legal obligations imposed on FAMILIA OSORIO COFFEE by current regulations, and in particular, the General Tax Law.

Is personal data shared with third parties?

Personal data relating to the services of sending informational communications and use of the contact form are not transferred to third parties, except where legally required.

Conversely, the data provided through the online sales platform may be shared with courier companies, insurance companies, or intermediary agents involved in the delivery of the products purchased by the customer, as well as with banks or payment platforms involved in processing payments. Likewise, the data may be shared with the tax authorities in legally established cases.

For how long will the data be kept?

The data provided when subscribing to the newsletter and/or other informational communications will be kept until the interested party expresses their wish to unsubscribe from the service.

FAMILIA OSORIO COFFEE will retain the data provided through the contact form until one year has elapsed since the final resolution of the request, query or claim made by the interested party or, if necessary, the longer period required for the exercise or defense of legal actions or other types of claims against FAMILIA OSORIO COFFEE.

Data provided through the online sales channel will be kept until the interested party expresses their wish to unsubscribe their profile as a customer and, in any case, for a period of 6 years after the last purchase made or a longer legally established period.

What rights do the interested parties have?

The law recognizes the following rights:

• Right of access : by virtue of which the interested party can know if his personal data is being processed, obtain information relating to the characteristics and scope of the processing carried out and receive a copy of the data processed.
• Right of rectification : under which the interested party may request the correction of errors and modify or supplement data that turns out to be inaccurate or incomplete.
• Right to erasure : under which the interested party may request that the data be erased, among other cases, when they are inadequate or excessive for the purpose for which they were collected, the consent given is revoked in the case that this is the legal basis of the processing or there is an unlawful processing of the data, and provided that none of the cases of necessity of the processing legally provided as exceptions to the right to erasure occur.
• Right to object : under which the interested party, in certain circumstances and for reasons related to his particular situation, may prevent the processing of his personal data.
• Right to restriction of processing : under which the interested party may require, in certain cases, that the processing of data be limited to the operations of data storage and those processings consented to by him or that are necessary for the formulation, exercise or defense of claims, the protection of the interests of other persons or in the case of the existence of certain reasons of public interest.
• Right to data portability : under which the interested party can request that the data processed automatically and based on their consent be delivered to them in digital format or directly sent to a third Data Controller.
• Right to withdraw consent : under which the interested party may withdraw at any time and without need of justification the consent given for the processing, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

You are hereby informed that you may exercise your rights of access, rectification, erasure, objection, limitation and portability, under the terms indicated in the data protection regulations, by contacting FAMILIA OSORIO COFFEE at Passat 108A, 08242 Manresa or by email at hola@familiaosorio.com

You can obtain sample exercises on the website of the Spanish Data Protection Agency www.aepd.es.

Finally, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency or another supervisory authority that you consider competent.

The Spanish Data Protection Agency is located in Madrid, at number six Jorge Juan street, and has an online complaint submission service on its electronic headquarters, accessible from the internet address www.aepd.es.