BALAM AGRICULTURE SL provides this privacy policy on the website www.balam.es to inform you in detail about how we process your personal data and protect your privacy and the information you provide to us. If we make any modifications to it in the future, we will inform you through the website or other means so that you can be aware of the new privacy conditions introduced.
In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, we inform you of the following:
Data Controller
Holder: BALAM AGRICULTURE SL
Tax ID (NIF): B14444046
Registered office: Autovía Madrid-Cádiz, km 378 – Aptdo Correos nº6 – 14420 Villafranca de Córdoba
Phone: +34 957813381
Email: rgpd@balam.es
Website: www.balam.es
For what purpose do we process your personal data?
We collect and process your personal information primarily to manage the relationship we have with you, with the main identified purposes being the following:
- Management and contracting of the products and services offered by our company
- Channelling requests for information, suggestions, and complaints that you may send us
- Keeping you informed about events, offers, products, and services that may be of interest to you through various communication channels, provided that you have given your consent
- Management of the employment relationship, in the case of our employees
- Management of the commercial relationship maintained with our suppliers
- Management of personnel selection
- Ensuring the security of people and facilities
How do we collect your information?
We collect your personal information through various means, but you will always be informed at the time of collection through informational clauses about the data controller, the purpose and legal basis for the processing, the recipients of the data, and the retention period of your information, as well as how you can exercise your data protection rights.
In general, the personal information we process is limited to identification data (name, surname, date of birth, address, ID number, phone number, and email), contracted services, and payment and billing information.
In cases of personnel management and selection, we collect academic and professional data to fulfill the obligations arising from maintaining the employment relationship or, if applicable, to consider you for a position on our team.
We use social media, and this is another way to reach you. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies that explain how they use and share your information, so we recommend that you review them before using these platforms to ensure that you agree with how your information is collected, processed, and shared.
Through our website, we collect personal information related to your browsing through the use of cookies. To clearly and precisely understand the cookies we use, their purposes, and how you can configure or disable them, please refer to our Cookie Policy.
Additionally, our facilities are equipped with a video surveillance system aimed at ensuring the safety of people and property, which means your image may be recorded simply by entering the premises. These recordings are stored for a maximum period of 1 month from the time they are captured and would only be shared with law enforcement authorities if necessary.
User responsibility
By providing us with your data through electronic channels, the user guarantees that they are over 14 years old and that the data provided is true, accurate, complete, and up-to-date. In this regard, the user confirms that they are responsible for the accuracy of the data communicated and will keep this information duly updated to reflect their actual situation, being responsible for any false or inaccurate data they may provide, as well as for any direct or indirect damages that may arise as a result.
How long do we retain your information?
We only retain your information for the period of time necessary to fulfill the purpose for which it was collected, to comply with the legal obligations imposed on us, and to address any potential liabilities that may arise from fulfilling the purpose for which the data was collected.
If you wish to join our team and apply for one of our job positions, the data provided will become part of our employment pool and will be retained for the duration of the selection process and for a maximum of two years, or until you exercise your right to deletion.
If at any time we have collected your data to contact you as a potential user of our services or to respond to an information request made by you, such data will be retained for a maximum of two years from the time of collection. After this period, the data will be deleted if no contractual relationship has been established or at the moment you request it.
In any case, and as a general rule, we will retain your personal information as long as there is a contractual relationship that binds us or until you exercise your right to deletion and/or restriction of processing. In such cases, the information will be blocked and not used beyond its retention, except when it may be necessary for the exercise or defense of legal claims or if any type of liability may arise that needs to be addressed.
Who do we share your data with?
In general, we do not share your personal information, except for those disclosures we are required to make based on imposed legal obligations.
Although it does not involve data sharing, in order to provide the requested service, third-party companies acting as our suppliers may access your information to carry out the service we have contracted them for. These processors access your data following our instructions and cannot use it for any other purpose, maintaining the strictest confidentiality.
If necessary, as a result of an incident recorded by our security cameras, your images may be communicated to law enforcement authorities, as established by law.
Similarly, your personal information will be made available to Public Administrations, Judges, and Courts to address any potential liabilities arising from the processing.
International Data Transfers
There are no international transfers of your data to countries outside the European Economic Area (EEA). We have agreed with our providers that, for the provision of the contracted service, they will use servers located within the EEA. If, in the future, we need to use servers located outside the EU, appropriate measures will be adopted, which will be incorporated into this Privacy Policy, ensuring that such providers are covered under the Privacy Shield agreement or that other adequate safeguards are in place.
What are your rights regarding the processing of your data, and how can you exercise them?
Data protection regulations allow you to exercise your rights of access, rectification, deletion, and data portability, as well as the right to object to and limit the processing of your data. You also have the right not to be subject to decisions based solely on the automated processing of your data, where applicable.
These rights are characterized by the following:
Their exercise is free of charge, unless the requests are manifestly unfounded or excessive (e.g., repetitive in nature), in which case we may charge a fee proportional to the administrative costs incurred or refuse to act.
You may exercise these rights either directly or through your legal or voluntary representative.
We are required to respond to your request within one month. However, if the request is complex or if there are numerous requests, this period may be extended by an additional two months.
We have the obligation to inform you about the means to exercise these rights, which must be accessible. We cannot deny you the exercise of your rights solely because you choose another method. If the request is submitted electronically, the information will be provided through electronic means whenever possible, unless you request otherwise.
If we do not act on your request, we will inform you within one month at the latest of the reasons for our inaction and your right to lodge a complaint with a Supervisory Authority.
To facilitate the exercise of your rights, we provide links to the request forms for each of these rights:
- Form for exercising the right of access
- Form for exercising the right of rectification
- Form for exercising the right of opposition
- Form for exercising the right of erasure (right to be forgotten)
- Form for exercising the right to restrict processing
- Form for exercising the right to data portability
- Form for exercising the right not to be subject to automated individual decision-making
To exercise your rights, we provide the following methods:
- By submitting a written and signed request addressed to the company, Ref. Exercise of Rights LOPD.
- By sending a scanned and signed form to the email address provided above, with the subject line “Exercise of Rights LOPD.”
In both cases, you must verify your identity by including a photocopy or, if applicable, a scanned copy of your ID or equivalent document to ensure that we only respond to the individual concerned or their legal representative. If a legal representative is involved, a document proving the representation must also be provided.
Additionally, and especially if you feel that your rights have not been fully satisfied, we inform you that you may file a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.
How do we protect your information?
We are committed to protecting your personal information.
We use reasonably reliable and effective physical, organizational, and technological measures, controls, and procedures aimed at preserving the integrity and security of your data and ensuring your privacy.
Additionally, all personnel with access to personal data have been trained and are aware of their obligations concerning the processing of your personal data.
In the contracts we sign with our suppliers, we include clauses that require them to maintain the duty of confidentiality regarding the personal data they have accessed as part of their engagement, as well as to implement the necessary technical and organizational security measures to ensure the ongoing confidentiality, integrity, availability, and resilience of the systems and services processing personal data.
All these security measures are regularly reviewed to ensure their adequacy and effectiveness.
However, absolute security cannot be guaranteed, and no security system is impenetrable. Therefore, if any information under our control is compromised due to a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority, and, if necessary, inform those users who may have been affected so they can take appropriate actions.
