Privacy policy

PRIVACY AND PERSONAL DATA PROCESSING POLICY

Scope

This policy applies to users of the Grupo Ángel Camacho, S.L. website (https://angelcamacho.com) and to all individuals who provide their data through the channels made available.

Identity of the Data Controller

The data controller is Grupo Ángel Camacho, S.L. (hereinafter, GAC), with Tax ID B41254137 and registered address at Avenida del Pilar, 6, 41530 Morón de la Frontera (Seville). Registered in the Mercantile Registry of Seville, Volume 4,467, Folio 29 verso, Sheet SE-11206, Entry 38.

Data Protection Officer

For any questions regarding data protection, you may contact our Data Protection Officer at: dpo@acamacho.com

Purposes, Legal Bases and Retention Periods

1. Information Requests — Contact Form

Purpose: To handle enquiries and information requests received through the contact form.

Legal basis: Consent of the data subject (Art. 6.1.a GDPR).

Retention: Up to 3 years from the last communication, after which they will be deleted.

2. Recruitment Processes — ‘Work with Us’ Form

Purpose: To receive and manage applications for active recruitment processes, and to maintain a talent pool for future processes.

Legal basis: Pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR) for the active process. Consent (Art. 6.1.a GDPR) for the talent pool.

Retention: Maximum 6 months from receipt of the application if not selected. With consent for talent pool: maximum 1 year.

3. Social Media Contests and Promotions

Purpose: To manage participation in contests or promotions organised by GAC on social media, including the publication of the name and image of winners.

Legal basis: Consent of the data subject (Art. 6.1.a GDPR).

Retention: Until the end of the contest and, for published winners’ data, for as long as the result remains published.

4. Management of Product Claims

Purpose: To manage claims relating to GAC products and to respond to the user.

Legal basis: Legitimate interest of GAC in quality management and compliance with customer service regulations (Art. 6.1.f GDPR).

Retention: 3 years from the resolution of the claim (limitation period for civil actions).

5. Sending the Corporate Newsletter

Purpose: To send commercial communications and corporate information from GAC.

Legal basis: Consent of the data subject (Art. 6.1.a GDPR and Art. 21 LSSI-CE).

Retention: Until the data subject requests to unsubscribe, which can be done at any time via the link provided in each email or by writing to dpo@acamacho.com.

6. Web Behaviour Analysis and Digital Advertising (Facebook Advanced Matching and Facebook CAPI)

ATTENTION: These processing activities involve the transfer of user data to Meta Platforms Ireland Ltd. and require explicit consent for marketing cookies.

Purpose A — Facebook Advanced Matching: To improve the accuracy of advertising tracking by sending Meta hashed contact data (name, email, phone, address) of users who have interacted with the website forms, in order to optimise advertising audience segmentation.

Purpose B — Facebook CAPI (Conversions API): To send website conversion events directly from GAC’s server to Meta’s servers, including hashed contact data, in order to measure the effectiveness of advertising campaigns on Facebook and Instagram.

Legal basis: Consent of the data subject (Art. 6.1.a GDPR), given by accepting the ‘Facebook Advanced Matching’ and ‘Facebook CAPI’ marketing cookies in the website’s consent panel. These processing activities will ONLY be activated if the user explicitly accepts these cookie categories.

Recipient: Meta Platforms Ireland Ltd. (Facebook), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta is certified under the EU-US Data Privacy Framework (European Commission Adequacy Decision of 10 July 2023). More information: https://www.facebook.com/privacy/policy/

Retention: Hashed data sent to Meta is retained in Meta’s systems in accordance with its privacy policy (normally up to 180 days for event data).

Recipients of Personal Data and International Transfers

Within the purposes indicated, GAC may disclose data to the following recipients:

  • • Technology service providers (email marketing platforms, hosting) as data processors (Art. 28 GDPR), under the corresponding data processing agreements.
  • • Meta Platforms Ireland Ltd. for the purposes of Facebook Advanced Matching and Facebook CAPI, solely with the user’s explicit consent (see point 6 above).
  • • Public authorities when required by legal obligation.

Your data may be subject to international transfer to countries outside the European Economic Area in the following cases:

  • • Newsletter and marketing: through email marketing platforms (such as Mailchimp / Intuit Inc.) and Meta Platforms, certified under the EU-US Data Privacy Framework (European Commission Adequacy Decision of 10 July 2023), which provides guarantees equivalent to the level of protection in the EEA.
  • • Social media contests: through social media platforms with their own privacy policies.

Exercise of Rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection, as well as withdraw your consent at any time, by contacting:

  • GRUPO ÁNGEL CAMACHO, S.L. — Attn: Legal Department
  • Av. del Pilar, 6 — 41530 Morón de la Frontera (Seville)
  • Email: dpo@acamacho.com

You may lodge a complaint with the Spanish Data Protection Agency at: https://www.aepd.es

Modifications

GAC may modify this policy to adapt it to legislative changes or changes in the criteria of the Spanish Data Protection Agency (AEPD). Current version: https://angelcamacho.com/politica-privacidad/