KORK VALUE, S.L. as owner of the website elgalayo.com is aware of the value of your personal information, so it is concerned and constantly strives to protect the privacy of its users. This document has been prepared in accordance with art. 13 of the EU Regulation 2016/679 (hereinafter the “GDPR”) in order to allow you to know our privacy policy, to understand how your personal information is treated when you browse our website and, where appropriate, to give your consent to the processing of your personal data in an express and informed manner. The information and data provided by you will be treated in accordance with the provisions of the RGPD and the confidentiality obligations that inspire the activity of KORK VALUE, S.L.

In accordance with the rules of the GDPR, the processing carried out by KORK VALUE, S.L. will be based on the principles of legality, fairness, transparency, purpose limitation, data minimization, accuracy, completeness and confidentiality.

1. Data Controller

The person responsible for the processing of your data is KORK VALUE, S.L. with C.I.F. B88583422, registered office at Carretera Ávila-Toledo, s/n – 05260 Cebreros (Ávila) and contact e-mail address admin@kork.es.

2. Personal data subject to processing

We inform you that KORK VALUE, S.L. will only process the personal data that are strictly necessary for the correct navigation through the Portals and for the purposes described in the following point 3 “Purposes of processing” (hereinafter, “Personal Data”).

The Personal Data processed through the Web are the following:

a. Navigation data

The computer systems and software procedures used for the operation of the Portals acquire, during their normal operation, some Personal Data whose transmission is implicit in the Internet communication protocols. This information is not collected to be associated with identified users. However, by its very nature it could, through processing and association with data held by third parties, allow the identification of such users. This category of data includes the IP addresses or domain names of the computers used by users connecting to the Portals, the URI (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.) and other parameters relating to the operating system and the computing environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Portals and to check their correct functioning, to identify anomalies and/or abuses, and are deleted immediately after processing. The data could be used to determine responsibility in case of hypothetical computer crimes against the Portals or third parties.

b. Data provided voluntarily by the data subject

If you are a registered user (“Customer”), you will be asked for: name and surname, email, postal address, telephone, billing information, date of birth, gender. In the case of customers who are legal entities, their corporate name, mailing address, billing information, name and surname, email, telephone number of the representative will be required.

c. Cookies

The Portals use third-party analytics cookies to provide you with services that are tailored to the preferences you have expressed while browsing the web. You can find specific information about this section by accessing the Cookies Policy link.

3. Purposes of treatment

The processing that we intend to carry out, with your express consent where necessary, has the following purposes:

4. Legal basis and compulsory or optional nature of the treatment

5. Recipients of personal data

Your Personal Data may be shared, for the purposes set forth in Section 3 above, with:

a. subjects that typically act as data processors, i.e: i) persons, companies or professional firms that provide assistance and advice to KORK VALUE, S.L. in accounting, administrative, legal, tax, financial and credit collection matters; ii) subjects with whom it is necessary to interact for the provision of services (e.g. hosting providers, order shipment company); iii) subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks) (hereinafter, collectively, the “Recipients”);

b. persons, entities or authorities to whom it is mandatory to communicate your personal data, by virtue of legal provisions or orders of the authorities;

Some of your Personal Data is shared with Recipients that may be located outside the European Economic Area. In this regard, KORK VALUE, S.L. ensures that the processing of your Personal Data by these Recipients is carried out in accordance with the GDPR. In fact, transfers may be based on an adequacy decision, on contractual clauses approved by the European Commission or on another appropriate legal basis.

Further information can be obtained by contacting us directly (see contact details given in paragraph 7. Rights of data subjects).

6. Data Retention

KORK VALUE, S.L. only stores your personal information to the extent that we need it in order to use it for the purposes for which they were collected, and according to the legal basis for the processing thereof in accordance with applicable law. Your personal information will be kept as long as there is a contractual and/or commercial relationship or as long as you do not exercise your right of deletion, cancellation and/or limitation of the processing of your data.

Once the relationship with you has ended for any of the reasons mentioned above, the information will be kept properly blocked, without giving any use, while it may be necessary for the exercise or defense of claims or may derive some kind of judicial, legal or contractual liability of its treatment, which must be addressed and for which its recovery is necessary.

7. Rights of the interested parties

At any time, you may exercise your rights of access, rectification, deletion, limitation, cancellation, portability and opposition regarding your personal data by communicating with KORK VALUE, S.L. whose contact details are indicated below:

• Registered office: Ctra. Ávila-Toledo, s/n – 05260 Cebreros (Ávila)
• E-mail address: admin@kork.es
• Phone: +34 911 595 725 (Monday to Friday from 10:00 a.m. to 7:00 p.m.)

You may also contact our Data Protection Officer (“DPO”) at the following email address: admin@kork.es

Said communication must include name and surname, request, address for notification purposes, date, signature and a photocopy of the ID card or other valid document that identifies him/her. The exercise of these rights is free of charge.

In case you have any dispute regarding the protection of your personal data, you may file a complaint with the AEPD (www.aepd.es).

8. Modifications

KORK VALUE, S.L. reserves the right to modify or simply update the content, in part or in whole, also due to changes in the applicable legislation. Consequently, we invite you to regularly visit this section to know the latest and most updated version of the privacy policy in order to be always updated on the data collected and the use made by KORK VALUE, S.L.

In any case, when significant changes occur, the user will be notified through a notice on the Web to offer the possibility of reviewing the changes before they become effective.

More information about the treatment of your data

It is possible that through the Web the redirection or access by the Users to third party web pages (service providers or distributors, among others) may be allowed. In any case, if you choose to leave our Web through links to websites not belonging to our entity, neither the Web nor its legal representatives are responsible for the content or the veracity of the privacy policies that such third parties may have, nor for the cookies that they may store in the user’s computer.

Last update: November 10, 2023