PRIVACY POLICY

Who is QUANARIAN? QUANARIAN IS A TRADEMARK OF CETECAL SLU, which belongs to the Harinalia Group, a holding of companies in the food sector specialising in the bakery and patisserie sectors. Its production and distribution centres, located between Santa Cruz de Tenerife and La Laguna, are equipped with the latest technological advances, which has made it possible for this company to consolidate its position as a benchmark in the sector in the Canary Islands over the course of more than sixty years of experience.

What do we use your data for? We use the data you have provided online or by any other means to deal with your queries and suggestions, provide you with the services or supply you with the products requested, register you as a user, send you the personalised communications to which you have subscribed, monitor the comments made on our blog.

Why do we hold it? We are entitled to process your data for various reasons. When you fill in a form or send us an e-mail with a query or suggestion, we have a legitimate interest in dealing with it. When you register on our website. We are also legitimised by your consent when you give us permission to send you our newsletter and personalised offers.

With whom do we share your data? We will only share your data with those companies that collaborate with us to attend to the requests received and provide you with our services or products, banks and organisations obliged by law. Under no circumstances will we sell your data to third parties.

What rights do you have? You have the right to access, rectify or delete your personal data. You also have the right to object to our use of data that you have previously authorised us to use, to transfer it and not to be subject to automated individualised decisions.

In processing your personal data, we apply the following principles to ensure the greatest possible protection for you:

Principle of lawfulness, fairness and transparency: We will always require your consent to the processing of your personal data for one or more specific purposes that we will inform you of in advance with absolute transparency.

Principle of data minimisation: We will only request data that is strictly necessary in relation to the purposes for which we require it. As little as possible.

Principle of limitation of the storage period: the data will be kept for no longer than necessary for the purposes of processing, depending on the purpose, we will inform you of the corresponding storage period, in the case of subscriptions, we will periodically review our lists and delete those records inactive for a considerable time.

Principle of integrity and confidentiality: Your data will be treated in such a way as to ensure adequate security of personal data and to guarantee confidentiality. You should be aware that we take all necessary precautions to prevent unauthorised access to or misuse of our users' data by third parties.

In this privacy policy you will find more detailed information about the use we make of the personal data of our customers, suppliers and users, and in general of all the people who maintain contact with us, regardless of the means they have used to communicate with us (online form, by telephone or e-mail, in person).

We like to be transparent about what we do with your personal data, that you understand the implications of the uses we carry out, or the rights you have in relation to your data. That is why we keep our Privacy Policy, Legal Notice and Cookie Policy up to date, information that you can consult on this website.

If you have any questions or would like more information about the privacy policy, you can continue reading the document.

CETECAL SLU, undertakes to comply with the legislation in force at all times with regard to the processing of personal data. By means of the following privacy policy, CETECAL SLU, in accordance with the requirements of the RGPD and the LOPDGDD, informs users and persons whose data it processes of:

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The person responsible for processing your data is CETECA,L SLU:

Identity

CETECAL SLU. - B38435871

Address

C. Cigarrillos nº 10 Santa Cruz de Tenerife (38107), Santa Cruz de Tenerife, Spain

Telephone

+34 922 61 10 84

Web

WWW.QUANARIAN.COM

E-mail: info@quanarian.com

CETECAL SLU informs the user that the data provided through browsing our website, the different data collection forms or by sending e-mails will be processed by CETECAL SLU and that this processing is included in the Register of Processing Activities managed by CETECAL SLU in accordance with the provisions of the RGPD

WHAT IS YOUR PERSONAL DATA USED FOR?

At WWW.QUANARIAN.COM, we process data both from users of our website and from third parties who maintain relationships with us. In order to make it easier for you to know how we process your data, we have differentiated the purpose for which we use the data, the types of data and the basis of legitimacy according to the category of persons whose data we process. Below, we classify the people whose data we process according to the type of relationship they have with CETECAL SLU

Website users

What data do we collect from our website users?

Data of users who fill in any of the available forms: The personal data that CETECAL SLU requests includes:

Identification data: name and surname, telephone number, postal and e-mail address.
Data relating to the request
Data of users who subscribe to the newsletter/ wish to receive information, commercial communications and information:
Identifying data: name and surname, e-mail address.
Data of users who register on our platform:
Identifying data: Name and surname, postal and e-mail address, telephone number, billing address.
Data of users who browse our website: Data provided by cookies and Google Analytics.
Data of the users who make comments on our blog.

For what purposes will we process your personal data?

When you accept our privacy policy, you authorise us to use the personal data provided for the following purposes:

To send you the information and provide you with the service you request through the various forms available on our website.
Manage your comments on our blog.
To send you the newsletter when you are subscribed, with the events, activities and promotions of CETECA,L SLU. and the sector that may be of interest to you.
Send you commercial communications about offers, activities and promotions of CETECA,L SLU. and the sector that may be of interest to you by conventional or electronic means when you have ticked the box that you wish to receive information.

How do we obtain your data?

We obtain your data by means of:

The form filled in by the web user for the purpose stated therein. The form is subject to the acceptance of this privacy policy by ticking the box indicated.

We obtain the browsing data from the different cookies that the user accepts when accessing www.quanarian.com for the first time.

What is the legitimacy for the processing of your data?

The express consent of the user (article 6.1.a. RGPD) expressed by filling in the different forms, ticking the box to send the newsletter and receiving commercial communications / information on offers, activities and promotions of CETECA,L SLU. and the sector that may be of interest and participation in our blog is what legitimises the processing by CETECA,L SLU. The user may revoke the consent given at any time, although if the consent is revoked, this does not affect the processing of data carried out prior to the revocation of consent.

Legitimate interest in drawing up browsing profiles and detecting preferences through the installation of cookies.

The execution of a contract or the adoption of pre-contractual measures when the customer makes a request through the different forms available to the user on our website or requests information about the services provided by CETECA,L SLU.

Suppliers

What data do we collect from our suppliers?

Supplier identification data: The personal data that CETECA,L SLU. requests includes:

Employment and professional data
Activities and business

How do we obtain your data?

We obtain your data by:

The signing of the contract that binds us, the acceptance of the quotation submitted, the receipt of invoices from the supplier and the signing of the Data Processor contract if applicable for the service provided.

For what purposes will we process your personal data?

To manage information relating to the data of our suppliers of goods and services, as well as their representatives.
Maintaining the contractual relationship with our suppliers.
Management of payments and collections relating to the contracts that bind us.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract in order to send you information and carry out the management of the service provided, otherwise it is not possible.

In the legitimate interest for the management of data relating to the representatives of the suppliers of CETECA,L SLU.

Customers

What data do we collect from our customers

Data of customers who fill in any of the forms available at www.quanarian.com as well as in the physical establishment of CETECA,L SLU.
Identification data: name and surname, telephone, postal and e-mail address.
Data relating to the application
Data of customers who register on our platform:
Identifying data: Name and surname, postal and e-mail address, telephone, billing address.
Details of customers who make a reservation or order in our establishment in person:
Identifying data: Name and surname, postal and e-mail address, telephone number, billing address.
Data of our customers obtained through our contracts and budgets.
Data of customers who make a purchase online or in person:
Identifying data: Title, name, first name, surname, postal and e-mail address, telephone, billing address.
Transaction data: Products purchased/services provided and means of payment, invoice or purchase receipt.

How do we obtain your data?

If you are an online customer, we obtain your data through:

The form that the user completes to request information and/or quote, order or to complete the online purchase in our e-commerce. The form is requested to accept this privacy policy through the indicated box.

We obtain the browsing data from the different cookies that the client accepts when accessing www.quanarian.com for the first time.

If you are a face-to-face customer, we obtain your data through:

The client registration form.

Acceptance of the budget presented.

The signed contract.

For what purposes are we going to process your personal data?

Generate and manage the documentation associated with your requests and purchases.

Provide you with information about offers, products and services related to your purchase.

Process your reservation or purchase online through our platform.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract to send you the information and carry out the proper management of the service provided or the product supplied, its execution not being possible otherwise.

In the user's consent to send the newsletter and commercial communications about the offers, activities and promotions of CETECA,L SLU. and the sector that may be of interest to you and the management of our blog. The user can revoke the consent given at any time.

In the legitimate interest to send information about exclusive promotions, latest news and personalized information adapted to the profile of the interested party and to send satisfaction surveys about the products or services purchased.

Job applicants and candidates.

What data do we collect from applicants?

Data of the candidates requested in the 'work with us' form by CETECA,L SLU.:
Identification data: name and surname, telephone number, postal and email address
Academic and employment data
Data that the candidate himself includes as attached document

How do we obtain your data?

We obtain your data through:

The delivery of a resume at our facilities or the completion of the 'Work with us' form on our website.

For what purposes are we going to process your personal data?

The personal data provided to us by candidates is used only for selection processes that are open or are going to be carried out in the event that the data provided is for our job board.

What is the legitimacy for the processing of your data?

In the user's consent by incorporating their data and their CV on the CETECA,L SLU website. to participate in the selection processes that are active as well as in future processes that may be carried out as long as you do not object to the processing of your data.

Social Network Contacts

What data do we collect?

Identification data on the Social Network: CETECA,L SLU. will not request data beyond what you have included in your user profile.

Answer and manage your queries, requests or requests.

Engage with you while you are part of our community of followers.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract that links you with the corresponding social network and in accordance with its privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf
Instagram https://help.instagram.com/155833707900388
Twitter http://twitter.com/privacy
LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
Pinterest https://about.pinterest.com/es/privacy-policy
Youtube https://policies.google.com/privacy?hl=es&gl=es

www.quanarian.com will endeavor at all times to establish appropriate mechanisms to obtain the User's consent for the installation of cookies that require it. When a user accesses our website, a pop-up appears informing them of the existence of cookies and that if they continue browsing our page they give their consent for the installation of cookies. Acceptance of the installation of cookies entails acceptance of the conservation of the IP address in the records of www.quanarian.com, along with the date of acceptance, for a period of one year, in order to demonstrate the consent given. . You can obtain more information in our “Cookies Policy”.

HOW LONG DO WE KEEP YOUR DATA?

Web users

Those data that are processed based on the consent of the web user will be maintained as long as they are relevant for the purpose for which they were collected and the consent is not revoked.
Those data that are processed based on legitimate interest, the conservation time will be linked to the one that motivated the collection of the data, always ensuring adequate guarantees and respect for the rights and freedoms of the interested parties.
For data that are processed based on the execution of a contract or the adoption of pre-contractual measures, the conservation period will be that in which the contractual relationship remains in force as well as the subsequent time that they must be kept by legal obligation.
The IP address obtained through cookies will have a retention period of one year, in order to demonstrate the user's consent.
Regarding the storage period for cookies, you can obtain more information on our website in the “Cookie Policy” section.

Suppliers

Those data that are processed based on legitimate interest, the conservation time will be linked to the one that motivated the collection of the data, always ensuring adequate guarantees and respect for the rights and freedoms of the interested parties.
Those data that are processed based on a contract, as well as if part of the processing is legitimized by a legal obligation, the data will be maintained for as long as the contractual relationship is in force. The retention time of the data once it has ended, or in the event that the treatment is linked to a legal obligation, will be the one legally provided for, and the processing of the data by the interested party cannot be revoked except in the provisions of blocking of data. the same as legally provided.

Customers

Those data that are processed based on the client's consent will be maintained as long as they are relevant for the purpose for which they were collected and the consent is not revoked.
Those data that are processed based on legitimate interest, the conservation time will be linked to the one that motivated the collection of the data, always ensuring adequate guarantees and respect for the rights and freedoms of the interested parties.
Those data that are processed based on a contract, as well as if part of the processing is legitimized by a legal obligation, the data will be maintained for as long as the contractual relationship is in force. The storage time of the data once this has ended, in the event that the processing is linked to a legal obligation, will be the one provided for, and the processing of the data cannot be revoked by the interested party except in the provisions for blocking the data. same as legally provided.

Job applicants and candidates

Those data that are processed based on the consent of the job applicant and candidate will be maintained as long as the selection process to which they applied remains open. In the event that the application is not for a specific selection process and is for future applications, the retention period will be a maximum of one year, at which time the CV will be deleted and destroyed, unless the interested party express your desire for conservation and be updated.

Social Network Contacts

The processed data of Social Network contacts will be maintained for as long as the user and CETECA,L SLU. Maintain links on the social network. By not depending directly on CETECA,L SLU. When processing data, we will only be able to consult or delete your data in a restricted manner. We will process your data for as long as the social network user links with CETECA,L SLU. like 'friends', click 'like', 'follow' or similar buttons.

CETECA,L SLU will not be able to proceed with the rectification of your data, restriction of information or those publications you share. responsible for making said rectifications, but must be made by the user of the Social Network themselves through the configuration of their profile in accordance with the privacy policy of the Social Network itself.

Regardless of the legitimacy that supported the collection of the data, it may be processed for scientific, historical or statistical research purposes, always implementing appropriate guarantees and respecting the rights and freedoms of the interested parties.

ADDITIONAL INFORMATION ABOUT DATA PROCESSING

Only those over 14 years of age can provide data through our website and email. If you are under this age you must have the consent of your parents or legal guardians.

The User guarantees the authenticity and timeliness of all data communicated to CETECA,L SLU. and declares that he is over 14 years of age, and will be solely responsible for any false or inaccurate statements he makes.

In the case of making a reservation for a service or purchase online, the interested party must be over 18 years of age, the age legally established in the civil code to acquire the age of majority and capacity to act.

The personal data processed by CETECA,L SLU. They can be mandatory or voluntary. Through web forms you will not be asked for data from special categories to guarantee your privacy. If it is necessary to collect data from special categories to provide you with a service, it will be requested by another means. The data that will be requested in the forms are:

Identification data: name and surname, telephone number, postal and email address.
Data related to the request.
Data of users who subscribe to the newsletter/want to receive information, commercial communications and information.
Data of users who register on our platform.
Voluntary information is that which the user is not obliged to provide to contact us.

The fields marked with an asterisk (*) or with the word (required) in our forms are mandatory to complete; refusal to provide them will mean the impossibility of providing the service or responding to your request.

In the event that you provide us with data from third parties, you declare that you have their consent and you undertake to transfer the information that we provide you in this clause, exempting CETECA,L SLU. of any type of obligation. However CETECA,L SLU. may carry out verifications to verify that the third party has been informed by adopting the diligence measures established in the data protection regulations.

TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

No data will be transferred to third parties except under legal obligation or in the event that it is necessary to respond to your request.

Among the recipients to whom your data may be communicated are:

Administrations and public organizations when required by tax, labor, Social Security or any other applicable regulations. Companies in charge of data processing (fraud detection and prevention providers, technological services, customer service services, advertising and marketing services, and, in general, third-party providers that are necessary for the provision of the services offered by CETECA,L SLU. as providers of courier and transport services, etc…

DO INTERNATIONAL DATA TRANSFERS OCCUR?

www.quanarian.com is hosted in the Netherlands, a country that is located in the European Union, in the territory of the European Economic Area or that complies with the guidelines established in articles 46 and 47 of the RGPD, therefore, no transfers will be made. international data provided by users on the web.

Our website only accesses user data using the following means:

Through the contact forms available to the user on the website.
Through the cookies that the user has previously accepted.
Through registration in the newsletters.
Through the comments made by the user on the website's blog.

International data transfers may also occur at the headquarters of the previous assignments/communications for which CETECA,L SLU. will use the tools provided in articles 46 and 49 of the GDPR as a guarantee for those transfers made to countries that do not have an adequacy decision from the European Commission.

In any case, the third parties with whom certain personal data are shared will have previously accredited the adoption of appropriate technical and organizational measures for the correct protection of these and will only be carried out with third countries when there is a binding legal instrument in accordance with Articles 46 et seq. of the GDPR. By accepting this privacy policy you accept that an international transfer of data may occur in accordance with the indicated guarantees.

If the requirements established in the GDPR are not met, the interested party may grant consent to the international transfer or a contract may be executed in the interest of the interested party. Otherwise, authorization must be requested from the Control Authority.

Likewise, we inform you that some services provided by and for CETECA,L SLU. may involve the transfer of personal data to a non-EU third country, on cloud services offered by some of the main international providers (e.g. Google, Microsoft). In these services, the aforementioned compliance will be confirmed.

CETECA,L SLU. Under no circumstances does it sell its users' data to third parties.

WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

The user can exercise the following rights before CETECA,L SLU.:
Access your personal data
Rectify them when they are inaccurate or incomplete
Request the deletion or cancellation of data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
Oppose your treatment
Request the limitation of the processing of your data when any of the conditions provided for in the regulations are met
Request the portability of your data in the cases provided for in the regulations
Prevent being subject to automated decisions
Revoke the consents granted

The user, to exercise their rights, must send a writing in which they indicate the right they wish to exercise and accompany a document proving their identity and postal or electronic address for notification purposes. You can make this request either by postal mail to: CETECA,L SLU. Carretera De Hoya Fria, 6, Nave 1 – Poligono Industrial El Mayorazgo, 38110 – EL MAYORAZGO (Santa Cruz de Tenerife), or at the following email address: info@quanarian.com.

CETECA,L SLU. You must respond to the request for the exercise of rights within a period of one month from receipt of the request. This period may be extended for another two months if necessary, taking into account the complexity and number of applications. We will inform you of any extension within one month of receipt of the request, indicating the reasons for the delay.

Likewise, interested parties have the right to complain to the competent Control Authority (Spanish Data Protection Agency) when they consider that CETECA,L SLU. has violated the rights that the data protection regulations recognize in www.aepd.es

IS MY DATA SECURE?

CETECA,L SLU. You have a current contract with the Hosting company

Google LLC for hosting your website. It is a European company and has the latest systems in security measures.

In any case, CETECA,L SLU. guarantees the adoption of the appropriate measures to ensure the confidential treatment of your data taking into account its confidential nature and undertakes that said data remain secret, treating it with the utmost confidentiality, and declares that it has implemented in its information system, the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 regarding the protection of natural persons with regard to data processing personal data and the free circulation of these data (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that allows an encrypted connection to be established when a user visits our website and exchanges information with us.

DO YOU NEED AN ACCOUNT AND/OR PASSWORD?

The user can register on our website, for this it is essential to create an account. It is the user's responsibility to maintain the confidentiality of the account information, including the password, as well as each and every activity that occurs therein.

The user has the obligation to inform CETECA,L SLU. immediately in the event of unlawful use of your account or password, or if any security issue occurs, by sending an email to info@quanarian.com.

LINKS TO OTHER WEBSITES

If you choose to leave our website through links to other websites not belonging to our entity, CETECA,L SLU. will not be responsible for the privacy policies of said websites or the cookies that they may store on the user's computer.