1.Who will process your data?

2.What will your data be used for?

• In the case of business or administrative relations: to maintain our administrative and economic relationship.
• If you sign up for our newsletter or web forms: to receive publications or information. 
• If you send us your Curriculum Vitae: for the selection of personnel and provision of jobs.
• If you exercise a right related to data protection: to manage the obligations of attention to the exercise of rights related to data protection of individuals.
• If you are notified of a security breach: to manage and evaluate security breaches that occur.

3.Retention periods or criteria. How long will we keep your data?

• In the case of a business or administrative relationship: for five years from the date of termination of our relationship: Article 1964 of the Civil Code, as amended by Law 42/2015 of October 5, 2015, reforming the LEC.
• If you subscribe to our newsletter or on our web forms: as long as you do not withdraw your consent, or do not exercise your right of deletion.
• If you send us your Curriculum Vitae: For the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities and to attend the processes of claim that can be presented in the future against the entity and in the case of conserving your data for successive processes of selection as long as you do not request its suppression.
• If you exercise a right related to data protection: for the time necessary to resolve the exercise of your right (General Data Protection Regulation (EU) 2016/679 and Organic Law on Data Protection).
• If you are notified of a security breach during the time necessary to resolve the security breach and to determine any potential liabilities that may arise from such purpose (General Data Protection Regulation (EU) 2016/679 and Organic Law on Data Protection).

4.Legitimation Why are we entitled to process your personal data?

• In the case of business or administrative relationship: because the processing necessary for the performance of a contract (Article 6.1.b) of the General Data Protection Regulation (EU) 2016/679).
• If you sign up for our newsletter or on our web forms: the legitimacy to process your data is based on the consent with the sending of the data by the data subject (Article 6.1.a) of the General Data Protection Regulation (EU) 2016/679.
• If you send us your Curriculum Vitae: because the processing necessary for the implementation of pre-contractual measures (Article 6.1.b) of the General Data Protection Regulation (EU) 2016/679).
• If you exercise a right related to data protection: because the processing is necessary for compliance with a legal obligation (Article 6(1)(c) of the General Data Protection Regulation (EU) 2016/679).
• If you are notified of a security breach: GDPR: 6.1(c): because processing necessary for compliance with a legal obligation (Article 6.1(c) of the General Data Protection Regulation (EU) 2016/679).

5.Obligation to provide your data Why are you or are you not obliged to provide your data?

If you have a business or administrative relationship with us as a supplier and must enter into a contract: You are obliged to provide us with your data because they are necessary to carry out the contract, therefore the refusal to provide them prevents us from entering into the contract.

6.To which recipients will your data be communicated or transferred?

• In the case of business or administrative relations with us in your capacity as a company or individual entrepreneur: if you are a party to a contract and are an individual entrepreneur or a natural person, the data will be sent to banks, savings banks and rural banks for payment and collection of invoices and expenses for the fulfillment of contractual obligations, and will be submitted to the tax office on the prepared declaration forms (Law 58/2003 of 17 December, General Tax Law). If you are intervening in a contract as a representative of a legal entity or you are a contact person of such legal entity, the communication of your data to third parties is not foreseen, except in cases where it is necessary for the fulfillment of legal obligations.
• If you sign up for our newsletter or our web forms: no communication of your data to third parties is foreseen, except in cases where it is necessary for the fulfillment of legal obligations.
• If you send us your Curriculum Vitae: it is not foreseen the communication of your data to third parties, except in cases where it is necessary for the fulfillment of legal obligations.
• If you exercise a right related to data protection: no communication of your data to third parties is foreseen, except in cases where it is necessary for the fulfillment of legal obligations.
• If you are notified of a security breach: your data will be communicated to the Spanish Data Protection Agency and other supervisory authorities belonging to the European Union and may be communicated to the State Security Forces and Corps.

We will not make any international transfer of data to third countries or international organizations.

7.What are your rights when you provide us with your data and how can you exercise them?

• Right of access: The right to obtain confirmation as to whether or not Mercado de Fuencarral, S.A. is processing personal data concerning you.
• Right of rectification: The right to request the modification or rectification of your data in the event that it is inaccurate.
• Right of erasure: The right to request that your data be erased or deleted due to unlawful data processing, due to the disappearance of the purpose for which the data was processed or collected, or when you revoke your consent or object to the processing of your data.
• Right to restrict processing If you contest the accuracy of the data, pending verification of the accuracy of the data by us or if you have exercised your right to object to the processing of the data, pending verification of whether the legitimate reasons of the controller outweigh your rights.
• Right to the conservation of your data - If the processing is unlawful and we oppose the deletion of the data by requesting the limitation of its use - If the data is needed for the formulation, exercise or defense of claims.
• Right to data portability: In a structured, commonly used, machine-readable format, provided that it is technically possible for portability and where they have been used/processed with your consent or because of a contract.

You can exercise these rights, together with a copy of a document proving your identity, at Mercado de Fuencarral, S.A.

In addition, you have the right to

• To revoke the consent given: In the event that the treatment has its legitimacy in the consent, you have the right to revoke it.
• To file a complaint: You can in any case go to the Data Protection Delegate, you also have the right to file a complaint with the Spanish Data Protection Agency.