WEBSITE CONTROLLER

This website is the responsibility of CALVO DISTRIBUCIÓN ALIMENTARIA S.L.U., with Tax ID No. B15812142, a company with registered address at CARRETERA CORUÑA – FINISTERRE KM. 34.5 / 15106 CARBALLO (LA CORUÑA), registered with the Commercial Registry of La Coruña, Volume 2528, General Section, Folio 45, Sheet C-27796, 1st Entry (hereinafter, CALVO).

PURPOSE

The entity respects the privacy rights of its Users and recognizes the importance of protecting the personal data it collects about its Users. The purpose of this document is to inform Users of the website about the processing of personal data carried out through this website.

PERSONAL DATA PROCESSED BY THE MERE ACCESS TO THE WEBSITE

By merely accessing the website, the entity collects the IP address and other data relating to the connection and its origin. The IP address is a code that identifies the User’s internet connection at a specific moment in time. Only the User’s internet access provider can identify the subscriber who was assigned a specific IP address at a particular time. Due to the very nature of the server supporting the website, the User’s IP address is automatically logged together with the date and time of access. This data is used solely to manage the normal use of the website and to carry out statistical analysis regarding the use of the website. The entity does not disclose this information to any third party, unless required to do so under applicable legislation (for example, an official request within the framework of a police investigation). The legal basis that legitimizes the processing of the IP address is the technological necessity to enable the provision of the website. IP addresses will be retained for a period of 1 month.

OTHER PROCESSING OF PERSONAL DATA

Cookies and similar technologies

The entity uses cookies and other similar mechanisms for storing and retrieving data on terminal equipment (hereinafter, cookies). Cookies are files that are downloaded to the User’s browser and may subsequently be read by the entity. In this way, cookies enable various functionalities, such as recognizing a User who has previously accessed the website and carrying out analysis of the use of the web service in order to improve it. However, it is not possible to determine the identity of the User from the cookies used by the entity, unless the User provides additional information through other means and this information can be linked to the cookies downloaded. For further information, please consult the Cookie Policy.

Contact form:

CALVO will process the data provided through the contact form for the purpose of handling contact requests, requests for information and/or complaints. • Legal basis: The legal basis that legitimizes the processing is the user’s consent given at the time of submitting their request. • Retention period: The data will be processed for the time necessary to resolve the user’s contact request. Thereafter, they will be blocked and retained for 3 years for the purpose of addressing any potential liabilities arising from the processing. You may withdraw the consent given and exercise your rights at any time, as indicated in the section on data subject rights in this Privacy Policy.

Traceability Form

CALVO will process the data provided through the traceability form for the purpose of handling requests for information regarding the origin of the products we consume, with the aim of enabling responsible and informed purchasing. • Legal basis: The legal basis that legitimizes the processing is the user’s consent given at the time of submitting their traceability request. • Retention period: The data will be processed for the time necessary to resolve the information request. Thereafter, they will be blocked and retained for 3 years for the purpose of addressing any potential liabilities arising from the processing. You may withdraw the consent given and exercise your rights at any time, as indicated in the section on data subject rights in this Privacy Policy.

Request for information and/or handling of complaints via WhatsApp

If you so request, we may contact you via WhatsApp to request the necessary information to process your request for information and/or complaint. • Legal basis: The legal basis that legitimizes this processing is your consent given at the time of requesting contact through this channel and voluntarily providing data and documentation. • Retention period: The data will be processed for the time necessary to resolve the request for information and/or complaint. Thereafter, they will be blocked and retained for 3 years for the purpose of addressing any potential liabilities arising from the processing. We also inform you that if you submit your complaint, claim and/or request for information via WhatsApp, this application belongs to Meta Platforms, Inc. (Meta), a company located in the United States, a country that has an Adequacy Decision issued on 10 July 2023 by the European Commission. Furthermore, Meta adheres to the EU–USA Data Privacy Framework. You may withdraw the consent given and exercise your rights at any time, as indicated in the section on data subject rights in this Privacy Policy.

Call recording

If you call CALVO’s telephone number, the call may be recorded for quality purposes and for the proper management of the service provided. • Legal basis: The legal basis that legitimizes this processing is CALVO’s legitimate interest in evaluating the quality of the service provided. • Retention period: Recordings will be retained for 1 month and thereafter will be duly blocked and stored for the period necessary to address any potential legal liabilities arising from the processing. You may withdraw the consent given and exercise your rights at any time, as indicated in the section on data subject rights in this Privacy Policy.

DATA RECIPIENTS

CALVO does not disclose this information to any third party, unless required to do so under applicable legislation (for example, an official request within the framework of a police investigation).

WHAT RIGHTS DOES THE USER HAVE AND HOW TO EXERCISE THEM

Data protection regulations guarantee Users the following rights: • Access: Allows the User to know what information is held, where it was obtained from, to whom it has been disclosed and for what purposes it has been processed. • Rectification: Allows the User to correct any inaccurate or outdated data. • Erasure: Allows the User to request that their data no longer be processed. • Objection: Allows the User to request that their data no longer be used for a specific purpose. • Restriction: Allows the User to restrict the processing of their data, while ensuring that it is retained for a specific purpose. • Portability: Allows the User to obtain a copy of their data in electronic format and, in certain circumstances, to request that it be communicated to another service provider. It is only applicable to automated processing carried out on the basis of the User’s consent or for the performance of a contract. • Withdrawal of consent: Allows the User to withdraw the consent that may have been given for the processing of their data. These rights require the possibility of identifying the User making the request and linking their identity to the data processed by the entity. However, the entity cannot establish this link with any of the data processed solely by accessing the website, unless the User is able to provide certain documentation that enables their identification (for example, a certificate from their internet access provider indicating the IP address assigned to the User on a specific date and time). Users are informed that they may exercise the aforementioned rights before the entity, as well as withdraw their consent for processing where it has been given, by postal mail to the address indicated above or by email to dpo@nauterra.com. If Users require further information in this regard or consider that their right to data protection has been infringed, they may contact the Spanish Data Protection Agency (www.aepd.es).

FURTHER INFORMATION

If the user has any questions regarding the information contained in our Privacy Policy, they may send an email to dpo@nauterra.com.