Privacy Policy

Your personal data will be processed for the following purposes, as applicable:

• To manage your registration on the website and respond to queries or enquiries about our products.
• To manage any returns or claims once you have completed your purchase.
• Administrative management arising from the sale of products: issuing invoices and communications to confirm receipt, preparation and delivery of the order.
• To register and control access of visiting personnel to our facilities, ensuring communication of safety measures in the production area.
• To manage and monitor our social networks in order to establish and maintain commercial relations.
• To respond to the exercise of rights, queries and complaints.

Your personal data will be retained for as long as any contractual or business relationship exists between you and LA RENTILLA, S.L. and you do not request its deletion. Once the relationship has ended, the data will be kept duly blocked for the limitation periods established by applicable legislation:

• 6 years for commercial purposes (art. 30 of the Spanish Commercial Code): documentation, invoices and delivery notes.
• 1 year (LSSICE): traffic data relating to emails and data provided through the website.
• 3 years: data from the visiting personnel register and health questionnaires.

Once these periods have elapsed, personal data will be deleted using appropriate security measures to ensure their complete destruction.

LA RENTILLA, S.L. relies on the following legal bases for processing your personal data:

• Legal obligation (art. 6.1.c GDPR): management and issuance of receipts, delivery notes or invoices resulting from the sale of products.
• Contract performance (art. 6.1.b GDPR): processing of data for the sale of products and all derived processes.
• Legitimate interest (art. 6.1.f GDPR): registration and access control of visiting personnel to our facilities.
• Explicit consent (art. 9.2.a GDPR): processing of special category data provided in the health questionnaire.
• Express consent (art. 6.1.a GDPR): response to complaints, participation in contests and management of social networks.

Your personal data may be communicated, where necessary for the provision of the service, to the following recipients:

• Public authorities and bodies (Tax Authority, etc.) and law enforcement agencies, where required by law.
• IT service providers, external advisors and consultants, under the corresponding data processing agreements.
• Banking entities for the management of collections via card terminal or direct debit.
• Courier and postal companies for shipment management.
• Insurance companies for the management of non-payments.

You may exercise the following rights at any time by contacting administracion@larentilla.es or the postal address of the controller, providing proof of identity:

• Access: obtain information about what personal data we process concerning you.
• Rectification: request the correction of inaccurate data.
• Erasure: request the deletion of your data when it is no longer necessary.
• Restriction: request that we only retain your data for the exercise or defence of claims.
• Objection: object to processing on grounds relating to your particular situation.
• Portability: request the transfer of your data to another data controller.
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

If you are not satisfied with the exercise of your rights, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

LA RENTILLA, S.L. will maintain professional secrecy over all information affecting the data, storing it with due confidentiality and using it solely for the purposes for which it was provided. It will also adopt appropriate technical and organisational measures against unauthorised access or unlawful processing of personal data.

This policy may be subject to periodic reviews. Any relevant amendment will be communicated to you.