Privacy Policy and Data Protection

EL CASERIO SA (hereinafter, EL CASERIO), in accordance with Organic Law 3/2018, of December 5, Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and European Regulation 2016/679, of April 27 regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data (RGPD), informs the users of the website elcaserio@elcaserio.es. (hereinafter, the page web), the Privacy and Data Protection Policy that will apply in the processing of personal data that the User voluntarily provides when accessing its website or the corresponding mobile application.

The User, by providing EL CASERIO with their personal data through the electronic forms on the Web and, where appropriate, by marking the corresponding acceptance box, expressly consents that EL CASERIO may process such data in the terms of this Privacy Policy and Data Protection clause and for the purposes expressed herein.

EL CASERIO informs the users of the Website that their personal data may only be obtained for their treatment when they are adequate, pertinent and not excessive in relation to the scope and specific, explicit and legitimate purposes for which they are have obtained. They will be canceled when they are no longer necessary or pertinent for said purpose or when requested by the owner in the exercise of his right of cancellation, provided that they are not subject to compliance with legal conservation periods.

EL CASERIO expresses its commitment to comply with current legislation at all times regarding data protection.

The personal data provided will be processed by EL CASERIO and will be used in accordance with the following information.

What personal data do we collect through the website?

Data of customers and people interested in our products

We may collect or receive your data through your visit to the Website or derived from your interaction with us by filling in forms and questionnaires located in the different sections of the website in order to send us your requests for information, requests, register your discharge, process your curriculum, etc.

In some cases, the personal data is provided directly by the user when subscribing to our Newsletter or newsletter, when contacting us through the enabled channels, responding to surveys, subscribing to our social media profiles or interacting with us through said profiles through comments, opinions or sharing the content published in each profile. Likewise, for the participation of the labor offer of EL CASERIO.

In other cases, personal data is obtained indirectly from the user for purely statistical purposes to be able to analyze the use made of our Website through the use of or provide value-added products such as the location map of our offices ( Consult our Policy of ).

Below you will find more detailed information on the processing of your personal data, including the following headings:

  • Main purposes: Manage queries made by people interested in our products.
  • Legitimation: The consent of the clients.
  • Conservation periods: Personal data will be kept for the exclusive time to comply with the purpose for which they were collected and as long as the rights that can be exercised against the person in charge do not prescribe, except for regulations that provide for a longer period.
  • Recipients: customers
  • Rights of the interested parties: The interested parties may exercise the rights of access, rectification, cancellation, deletion, opposition, limitation and portability of their data, by writing to EL CASERIO SA in Polígono Industrial La Nava Ampliación, Parcela B4. Tafalla (Navarra) Likewise, you have the possibility of filing a claim with the Spanish Agency for Data Protection (AEPD) through its website www.aepd.es.

Visits to our factory

CARAMELOS EL CASERÍO DE TAFALLA informs you that personal data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (RGPD), regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data. Therefore, in accordance with the provisions of article 13 of the GDPR, we inform you of the following:

  • Data Controller: EL CASERÍO, S.A.
  • Legal basis that legitimizes the treatment: The express consent of the managers/directors of the schools.
  • Purpose of the treatment: The treatment of the name of the students will be carried out, data that will be transferred by the schools, to prepare the personalized candy tasting for each child and the delivery of a nominal gift. In this way, images/videos of the students could also be captured during the visit to the candy factory for future publications and in any type of support that EL CASERÍO, S.A., could publish on its website or on social networks, in audiovisual projects or in company annual reports.
  • Data conservation criteria: Personal data will be kept for the exclusive time to comply with the purpose for which they were collected and as long as the rights that can be exercised against the person in charge do not prescribe, except for regulations that provide for a longer term.
  • Data communication: No data transfers are made. In any case of any type of transfer of personal data, your express, informed and unequivocal consent will be requested in advance.
  • Exercise of rights: Interested parties may exercise their rights of access, rectification, cancellation, deletion, opposition, limitation and portability of their data, by writing to EL CASERÍO, S.A. in Polígono Industrial La Nava, plot B4, 31300 Tafalla (Navarra) or by email elcaserio@elcaserio.es. Likewise, you have the possibility of filing a claim with the Spanish Agency for Data Protection (AEPD) through its website www.aepd.es
  • International Data Transfer: International data transfers are not carried out.

Other purposes

  • Administration and management of users of the Website.
  • Information to investors and shareholders. Management, where appropriate, of the Shareholders’ Forum.
  • Management of subscriptions to news and newsletters.
  • Respond to the request for information demanded through the means made available to users.
  • Interaction with customers through social networks identified on the Website.
  • Processing of claims, complaints and suggestions.
  • Maintain the registered user login, provide statistics associated with the use of the Website, location of our offices and antispam systems (captcha).
  • Sending communications or information expressly requested.
  • Carrying out satisfaction surveys on the products received for proper management of quality processes and their improvement.
  • Use for statistical purposes in order to analyze the behavior and trends of Users and analyze how to improve the products that we provide to Users. Detect and investigate fraud, as well as other illegal activities and potential breaches of our Privacy Policies, Legal Notice and/or Conditions of Use. If you do not provide the necessary data for these purposes, our products cannot be provided.

Legitination and conservation

  • The legal basis for the treatment of the data corresponds to the consent given by the User when filling in the data and marking the corresponding acceptance boxes, as well as sending the different forms, requests, questionnaires of the different products and registration. and registration.
  • By legal virtue for compliance with regulatory obligations applicable to each case, among others, the Capital Companies Law, approved by Royal Legislative Decree 1/2010, of July 2, consumer regulations, the Law on the Company of Products of the Information and applicable regulations on the protection of personal data reported here.
  • To maintain the relationships established between users, customers and suppliers of EL CASERIO.
  • Legitimate interest for the defense of EL CASERIO against possible legal actions.
  • The legal basis for the treatment of the data corresponds to the consent given by the User when filling in the data and marking the corresponding acceptance boxes, as well as sending the different forms, requests, questionnaires of the different products and registration. and registration.
  • By legal virtue for compliance with regulatory obligations applicable to each case, among others, the Information Products Society Law and applicable regulations on the protection of personal data reported herein.
  • To maintain the relationships established between users, customers and suppliers of EL CASERIO.
  • Legitimate interest for the defense of EL CASERIO against possible legal actions.
  • The fields of the forms marked with an asterisk (*) included in the Website are considered mandatory fields to be able to attend to your request or the evaluation of the information that you wish to provide us.
  • The retention periods are:
    • The data will be kept by virtue of compliance with legal deadlines according to commercial, sectoral regulations and in any case in compliance with legal deadlines for possible legal actions.
    • The contact data will be kept as long as the relationship is maintained and its deletion is not requested.
    • The data associated with your interaction in the corporate profiles of social networks will be kept during the period that you enable your publications in said social network.
    • Conservation data for commercial purposes will be kept indefinitely as long as its deletion is not requested.
    • The data in relation to the delivery of curricula and participation in the job market will be kept for 2 years.
    In any case, the data will be kept during legal periods of prescription of possible legal actions.

Recipients of international assignments and transfers

The following data transfers are planned:

  • To Public Administration Bodies with competence in matters of communications and provision of information products and Bodies with competence in consumer matters to deal with potential user claims.
  • Responsible for web analytics products: The Website has enabled the Google Analytics products provided by Google LLC. The interaction with users through the use of said tool implies the international transfer of analytical and technical data in relation to the Website.

Rights of interested parties

Interested parties may exercise their rights of access, rectification, deletion, portability and limitation or opposition by writing to EL CASERIO SA, with address at Polígono Industrial La Nava, Parcela B4. Tafalla (NAVARRA, providing a copy of ID or other identification document.

Interested parties have the right to withdraw the consent given.

Interested parties have the right to complain to the Control Authority (Spanish Agency for Data Protection www.agpd.es).

The user will be solely responsible for the veracity of the data provided to EL CASERIO.

EL CASERIO adopts the necessary technical and organizational measures to guarantee the security of the personal data contained therein and to prevent its alteration, loss, treatment or unauthorized access, taking into account the state of technology, the nature of the data and the risks to which they are exposed.

Finally, you can also verify the presence of the SSL certificate by checking the properties of the Website in your browser, for which you must consult its characteristics in the Legal Notice section.

Any change made in the Privacy Policy and in the information management practices will be reflected in a timely manner, and EL CASERIO may add, modify or eliminate said privacy policy when it deems necessary.

In no case will EL CASERIO modify the policies or practices to make them less effective in the protection of the personal data of our clients stored before.

Last updated: December 13, 2022.