CONTROLLER DETAILS

ECOVITIS, S.L.
VAT Number: B96936471
El Romeral Industrial Estate, Transporte Street, C2
46340 Requena (Valencia), Spain

CONTACT DETAILS

Controller: Jaime Gil Pérez
Telephone: +34 962 323 099
Email: info@ecovitis.com

DATA PROTECTION OFFICER

A Data Protection Officer is not required.

PROCESSING ACTIVITY: CUSTOMERS

TYPE

Private

DATA PROTECTION OFFICER

The appointment of a Data Protection Officer (DPO) is not required.

PURPOSE

Administrative, accounting and commercial management of customer relationships.

LEGAL BASIS

The legal basis for processing is the performance of a contract to which the data subject is a party, as well as compliance with a legal obligation applicable to the data controller.

RETENTION PERIOD

Data will be retained for six (6) years or, where applicable, for the period necessary for the limitation of liabilities in accordance with the applicable legal regulations, calculated from the termination of the legal relationship that legitimises the processing.

CATEGORIES OF DATA SUBJECTS

• Customers
• Contact persons
• Parents or legal guardians
• Legal representatives

CATEGORIES OF PERSONAL DATA

• Email address
• Postal address
• Handwritten signature
• Mobile phone number
• Tax Identification Number (NIF)
• First name and surname(s)
• Telephone number
• Bank account details
• Goods and services received
• Goods and services supplied
• Financial transactions

  As well as any other data necessary for maintaining the commercial relationship.

RECIPIENTS OF DATA DISCLOSURES

Personal data may be disclosed within the ECOVITIS corporate group, including ECOVITIS, S.L., Vinos Sierra Norte, S.L., and Bodegas Olcaviana, S.L.
No other disclosures are envisaged except those authorised by law, including disclosures to:

• Organisations or persons directly related to the controller
• Spanish Tax Agency
• Other Public Administration bodies
• Banks
• Savings banks
• Rural savings banks

INTERNATIONAL DATA TRANSFERS

International data transfers are envisaged due to the use of the following service providers:

• Cloud backup service, with servers located in France. The provider states its compliance with applicable data protection legislation on its website:
  http://www.tatayestudio.com/
• Hosting and corporate email services, with servers located in Ireland. The provider states its compliance with applicable data protection legislation at:
  https://www.nunsys.com/politica-de-privacidad/

DATA PROCESSORS

The following categories of service providers may process personal data on behalf of the controller:

• Advertising agency
• Marketing provider
• Website and social media management provider
• IT management and maintenance provider
• Consultancy and training company
• Certification and auditing companies
• Credit insurance provider
• Accounting and tax advisory firm
• ERP management software provider
• Hosting provider
• Corporate email domain provider
• Confidential document destruction company
• Legal advisor

AUTOMATED DECISION-MAKING AND PROFILING

No automated decision-making or profiling activities are carried out.