PRIVACY POLICY

1. USER INFORMATION

Who is responsible for processing your personal data?

MOLGRA, S.L. is the CONTROLLER responsible for processing the USER’S personal data and informs you that such data will be processed in accordance with Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 (LOPDGDD).

Why do we process your personal data and for what purpose?

Depending on the form through which we obtained your personal data, they will be processed confidentially in order to achieve the following purposes:

In the Contact form
 
• To respond to inquiries or any type of request made by the user through any of the contact methods made available on the controller’s website.
(for the legitimate interest of the controller, art. 6.1.f GDPR)
• To carry out statistical analysis and market research.
(for the legitimate interest of the controller, art. 6.1.f GDPR)

In the Ethics or Whistleblowing Channel form
 
• To properly manage the ethics channel, process the reported irregularities and decide whether to initiate an investigation in order to detect possible offenses and prevent any type of liability, as well as to avoid any conduct contrary to the entity’s internal or external regulations.
(for compliance with a legal obligation, art. 6.1.c GDPR)
• Additional relevant information: The Whistleblowing Channel allows anonymous reports to be submitted. In such cases, the system is designed so that no data allowing the identification of the informant is collected or retained, guaranteeing anonymity and confidentiality at all times.

In the User Registration form

• To manage the user account in order to provide personalized access to the website and the interactive services offered.
(by the data subject’s consent, art. 6.1.a GDPR)

In the Order form

• To manage your online order and proceed with its shipment based on pre-contractual conditions.
(for the performance of a contract or pre-contract, art. 6.1.b GDPR)
• To manage, maintain, improve or develop the services provided.
(for the performance of a contract or pre-contract, art. 6.1.b GDPR)
• To carry out satisfaction and quality surveys.
(for the legitimate interest of the controller, art. 6.1.f GDPR)

How long will we keep your personal data?

The data will be kept for no longer than necessary to maintain the purpose of the processing or while there are legal obligations requiring their retention. Once no longer necessary, they will be deleted with appropriate security measures to ensure data anonymization or complete destruction.

Whistleblowing Channel: Personal data processed through the Whistleblowing Channel will only be kept for the time strictly necessary to decide whether to initiate an investigation and, in any case, for a maximum period of three (3) months from receipt of the communication. After this period, the data will be deleted unless it is necessary to retain them for the processing of judicial, administrative or disciplinary proceedings, in which case they will be kept for the legally required period.

Who do we share your personal data with?

No communication of personal data to third parties is planned except, where necessary for the development and execution of the processing purposes, to our service providers related to communications, with whom the CONTROLLER has signed the confidentiality and data processing agreements required by current privacy regulations.
Whistleblowing Channel: Data may be processed by:
- The external provider of the Whistleblowing Channel, acting as data processor.
- The body responsible for the Internal Information System.
- Judicial, administrative or competent authorities, when legally required.

What are your rights?

The USER has the following rights:

• Right to withdraw consent at any time.
• Right of access, rectification, portability and deletion of their data, and the right to restrict or object to its processing.
• Right to file a complaint with the supervisory authority (www.aepd.es) if they consider that the processing does not comply with current regulations.
• Persons whose personal data are processed within the framework of the Whistleblowing Channel may exercise the rights recognized in Articles 15 to 22 of the GDPR. However, these rights may be limited or restricted under the terms provided in Article 31 of Law 2/2023 when their exercise could compromise the confidentiality of the informant, the proper conduct of the investigation or the prevention, detection and sanctioning of infringements.

Contact details to exercise your rights:
MOLGRA, S.L.. CL. BOSCARRO SUD, S/N - 25300 TARREGA (Lleida). E-mail: comercial@molgra.com

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

USERS, by checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly, freely and unequivocally accept that their data are necessary to process their request by the provider, while the inclusion of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the CONTROLLER are accurate and undertakes to communicate any changes thereto.

The CONTROLLER informs that all data requested through the website are mandatory, as they are necessary to provide an optimal service to the USER. If all data are not provided, it is not guaranteed that the information and services provided will fully meet the user’s needs.

3. CHILD PROTECTION POLICY

Anyone providing data through the forms on this Website and accepting its processing formally declares that they are over 18 years of age. Access to and use of the portal by persons under 18 years of age is prohibited. The CONTROLLER reminds adults who are responsible for minors that they will be solely responsible if a minor provides their data to request any product. They are also informed that software programs exist to restrict browsing through filtering or blocking certain content.

4. PROCESSING ARISING FROM THE USE OF SOCIAL NETWORKS

By following our profile on social networks, you expressly consent to the processing of your personal data in accordance with the privacy policy of the corresponding social network. Likewise, you expressly consent to the CONTROLLER accessing and processing the data contained in your profile and to news published about any product of the CONTROLLER appearing on your wall. Your request to connect necessarily implies your consent to the indicated processing activities, this being the legal basis for the processing. The data will be retained until the data subject requests opposition or withdraws consent, which may be withdrawn at any time. Comments and content published on social networks will become public information, so users should exercise special caution when deciding to share their personal information. The CONTROLLER is not responsible for the information users include on the page. However, persons whose personal data are published or included in comments may request the CONTROLLER to remove them.

5. SECURITY MEASURES

In accordance with current regulations on personal data protection, the CONTROLLER complies with all provisions of the GDPR and the LOPDGDD regarding the processing of personal data under its responsibility, and expressly with the principles described in Article 5 of the GDPR, according to which data are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organizational policies in order to apply the security measures established by the GDPR and the LOPDGDD to protect the rights and freedoms of USERS and has communicated the appropriate information so that they may exercise them.

For more information regarding privacy guarantees, you may contact the CONTROLLER at: MOLGRA, S.L.. CL. BOSCARRO SUD, S/N - 25300 TARREGA (Lleida). E-mail: comercial@molgra.com