PRIVACY POLICY

COSENTINO is aware that, as a USER, you are interested in knowing how your personal data is used and shared by us, and therefore we set out below our Privacy Policy so that you can understand the purposes we pursue.

1. IDENTITY OF THE DATA CONTROLLER

The personal data provided by the USER through any of the web forms will be processed by COSENTINO GLOBAL, S.L.U. (hereinafter referred to as ‘COSENTINO’), with registered office at Ctra. Baza a Huércal-Overa, km  59 – 04860 Cantoria (Almería), as the Data Controller.

2. PURPOSES OF THE DATA PROCESSING AND LEGAL BASIS

COSENTINO will process the information provided by the USER for different purposes, depending on how the data is collected and the specific reason for the request made by the USER.

The processing carried out to meet the USER’s requests is based on the consent given by the USER by entering their personal data in the various web forms for requesting information or by ticking the appropriate boxes for requesting consent. The purposes of this processing are as follows:

• To provide the services requested by the USER.
• To send information required by the USER.
• To inform on the benefits, promotions, events and other products offered by the COSENTINO GROUP companies.
• To apply for a job in one of the COSENTINO GROUP companies.

Please note that, as a USER, you may withdraw your consent at any time by following the procedure for exercising your rights set out below.

COSENTINO will process the USER’s data, based on the execution of the agreement between the USER and COSENTINO, for the following purposes:

• To manage the contractual or commercial relationship established between COSENTINO and the USER.
• To process, manage, provide, expand, and improve the services the USER has decided to subscribe to or register for.
• To send information about changes in the products or services purchased by the USER.

In addition to the above processing, COSENTINO will carry out other processing for legitimate interests, to which the USER may object by following the procedure for exercising rights set out below. The purposes of this processing are as follows:

• To adapt the services in order to improve their quality for the USER.
• To design new services in relation to existing ones.
• To perform statistical studies allowing for the design of improvements in the services provided.
• To send information regarding new or similar services to those originally purchased.

The USER is thus informed and unequivocally and expressly consents to their personal data being processed by COSENTINO via online tools for sending electronic notifications provided by companies such as SalesForce, based in the United States of America. To ensure an equivalent level of data protection, COSENTINO will use the standard contractual data protection clauses adopted by the European Commission, together with the necessary technical and organisational measures to guarantee your right to data protection.

These tools use pixels (tiny transparent electronic images linked to your address) to collect information that allows us to know who is accessing our campaign and when. The USER can prevent such use in the settings of their email management system in order to stop the automatic downloading of images.

3. RECIPIENTS OF PERSONAL DATA

We inform you that your data will not be communicated to third parties, unless:

• The transfer is authorised by law.
• The transfer is to a company of the COSENTINO GROUP and is necessary for the correct development of the relationship with the USER, or because the USER has requested a specific product or service that requires it, or for internal administrative purposes, as described above for each of these cases. You can consult the list of companies by clicking on the following link: https://forms.cosentino.com/cosentino-group-subsidiaries/. Your data will not be passed on to any other third party, unless we are required to do so by applicable law.
• The data processing is the result of your free and lawful acceptance of a legal relationship, the development, execution and control of which therefore involve a link between said data processing and the files of third parties, such as: shops where you may collect samples or where you may have requested an appointment; banks, for the invoicing of products and services purchased; or delivery companies, for the shipment of products purchased.
• The data may be requested by the Ombudsman, Public Prosecutor’s Office, Judges, Courts, or the Spanish Court of Auditors in the exercise of the powers conferred on them.
• The data may also be sent to those suppliers who provide a service to COSENTINO and who need access to your personal data to do so.
4. DATA RETENTION PERIOD

In cases where there is a commercial relationship between COSENTINO and the USER, your data will be stored for the duration of the commercial relationship and then be blocked for the time necessary to fulfil legal obligations.

In all other cases, your data will be kept for five years in order to process the various requests that you may make through the forms that we make available to you on the WEBSITE. After this period, the data will be kept for the period required by law to fulfil any obligations arising from the processing and/or the existing relationship.

5. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION REQUESTED

Mandatory information in each form will be indicated as such with an asterisk. Refusal to provide this information will prevent the provision of the service requested by the USER.

6. EXERCISE OF RIGHTS

As a USER, you may exercise your rights of access, correction, deletion, objection, limitation of processing, transfer of data or withdrawal of consent, by means of a written communication addressed to Ctra. Baza a Huércal-Overa, km 59 – 04860 Cantoria (Almería), or by sending an e-mail to our Data Protection Officer at gdpr@cosentino.com, providing proof of your identity and stating the rights you wish to exercise.

In addition, should you deem that your right to the protection of the personal data has been violated, please note that you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

USER COMMITMENTS

The USER warrants that they are of legal age and that the information provided is accurate and truthful.

The USER also undertakes to inform COSENTINO of any changes to the information provided by emailing our Data Protection Officer at gdpr@cosentino.com, identifying themselves as a USER of the WEBSITE and specifying the information to be changed.

7. THIRD-PARTY DATA PROVIDED BY THE USER

Should the USER provide any personal data of third parties for any purpose, they guarantee that they informed the data subjects in advance and obtained their consent to their data being communicated to COSENTINO.

The USER guarantees that the data subjects are of legal age and that the information provided is accurate and truthful.

COSENTINO shall verify the consent of the said data subjects through an initial non-business related email in which the verification of the consent given on their behalf by the USER shall be requested.

In the event of any liability arising from a breach of these terms and conditions by the USER, the USER shall be liable for the consequences of such breach.

8. PROCESSING OF FACEBOOK DATA

Access to the Content provided by COSENTINO via Facebook is voluntary and free of charge for Facebook users and implies the formal acceptance by users of this Privacy Policy and any other general or specific regulation set by Facebook for privacy purposes (Facebook Privacy Policy).

COSENTINO guarantees the confidentiality of the personal data provided by the USER, as well as its correct processing, in accordance with current legislation on the protection of Personal Data and with this Privacy Policy.

In compliance with the aforementioned legislation, COSENTINO informs you that access to the Content requires the USER to provide certain personal data, which must be provided in order to access the Content, unless expressly stated otherwise.

Prior to the collection of Personal Data, COSENTINO will provide the User with a link to this Privacy Policy in order to allow the User to give their prior, informed, specific and unequivocal consent to the processing of their Personal Data by COSENTINO.

Likewise, if the USER expressly consents by ticking the appropriate box in the Form, the USER authorises COSENTINO to send business notifications on products, services, events, and other relevant business information relating to the companies of the COSENTINO GROUP.

The USER must be over 16 years of age to access COSENTINO content.

It is the USER’s responsibility to ensure that all the information provided is truthful and up to date. COSENTINO informs the USER that they must provide only Personal Data that is appropriate, relevant, up to date, accurate and truthful. To this end, the USER shall be solely liable for any direct and/or indirect damage that may be caused to third parties or to COSENTINO by the use of another person’s Personal Data or the USER’s own Personal Data if it is false, inaccurate, not up to date, inappropriate or not relevant.

By accepting this Privacy Policy, the USER accepts that COSENTINO may access: (i) information (including Personal Data) provided by the USER through any existing registration forms; (ii) their Facebook profile data (including their profile picture).

Any personal data provided will be processed by COSENTINO, as Data Controller, in accordance with the terms and conditions set out in this Privacy Policy. The identity of the Data Controller, as well as the purposes, recipients and other information regarding the data processed, can be found at the beginning of this Privacy Policy. Furthermore, as indicated in the ‘Exercise of Rights’ section of this Privacy Policy, the USER may exercise their rights of access, correction, deletion, objection, limitation of processing, transfer of data or withdrawal of consent by sending an e-mail to our Data Protection Officer at gdpr@cosentino.com or by post to the address indicated above, identifying themselves as a FACEBOOK USER, providing proof of identity and, in both cases, specifying the request.

In addition, should you, as a USER, deem that your right to the protection of your personal data has been violated, please note that you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. COOKIES AND TRACKING FILES

The USER accepts the use of cookies and IP address tracking files whose use allows COSENTINO to collect data for statistical purposes such as: date of the first visit, number of times visited, date of the last visit, URL and domain from which they originate, browser used, and resolution of the screen.

The USER may choose to prevent cookies from being installed by selecting the appropriate option in their browser software. However, COSENTINO shall not be liable for the fact that the deactivation of such cookies prevents the proper functioning of the WEBSITE.

Further details about Cookies are available in our COOKIES POLICY.

10. SECURITY MEASURES

COSENTINO has implemented the necessary technical and organisational measures to ensure the security of personal data and to prevent their alteration, loss, unauthorised access or processing of the said data, taking into account the state of the art, the nature of the data stored and the risks they are exposed to, whether from human action or from the physical or natural environment.

Cosentino Group – Subsidiaries