Privacy policy

USERS REGISTERED ON CONSUM.ES WHO ARE NOT PARTNER-CUSTOMERS

1. Consum.es Privacy Policy

1. Who is the controller of the processing of your data?

Controller for the processing of personal data: CONSUM, S. COOP. V. (hereafter, CONSUM) with NIF F46078986. Postal Address: Avenida Alginet, No. 1, 46460 Silla (Valencia). Telephone numbers: 961974000/961974050. Customer Service Web Form: https://www.consum.es/atencion-al-cliente/

If you have any question, query or suggestion in relation to how we use your personal data, you can contact Consum's Data protection Officer using this email address: delegadoprotecciondatosconsum@consum.es

2. When do you provide us with your data and what personal data do we collect?

Your personal data that we use in order to manage your registration and your account as a registered user on consum.es is the data you have provided to us using the online registration form on our website, in addition to the data that, throughout the duration of your relationship with us as a registered customer, you provide to us or we infer from the information you provide to us, such as details of your lifestyle based on the recipes you like or share, and other sources, such as your social media, if you provide those to us, or interactions with us through social media.

The main data we use that belongs to you is as follows:

• Basic details (such as name or user alias)
• Contact details (such as your email address)
• Log in or identification credentials, such as your username and/or password.
• Profile picture.
• Profile data (such as your profile on social media or your tastes and preferences).
• Your IP address.

3. For what (purpose) and why (legal basis) do we process your data?

(1) To send you commercial communications: We will send commercial communications related to Consum’s products or actions, only if you give us your express consent. Remember that we are a supermarket; therefore, you will only receive communications related to the food sector, consumption, etc.

In each communication that you receive by electronic means, you will have the option of unsubscribing from Consum’s emails.

(2) To offer you a personalised experience when browsing our website, including the communications with you: We may also offer you products, offers or actions based on the data we have belonging to you or that you have received by other means, so they are as personalised as possible and, therefore, more interesting for you. To do so, we will also require your express consent, without which, your experience with us will be more generic.

(3) To form part of an online community and obtain points according to your activity on the website: With your voluntary registration as a user on consum.es, you shall form part of an online community in which you may read interesting articles, upload your own recipes and tips for other users to benefit from, and even comment on the web content that has this feature available, and share what interests you most on your social media. By creating your profile, you shall be able to upload a user photo and follow similar users with your culinary tastes.

With your activity as a user on consum.es, you will accumulate points that you are only able to redeem if you register on Mundo Consum as a partner-customer.

4. Who do we pass your data on to?

In general, Consum shall not share your personal data. However, if the administrative, tax or judicial authorities or Law Enforcement Bodies require us to provide them with information related to your personal data, we have a legal obligation to share that data with them.

Furthermore, Consum contracts extremal companies (data processors) to provide us with some services related to our activity (for example, printers, marketing agencies, web developers, logistics companies for home delivery, etc.). These companies shall have access to your data for the sole purpose of being able to provide us with the services we have contracted. We shall sign a service provision contract with them, in addition to another “data processing” contract, in which we establish that they are prohibited from using the data they have access to for their own purposes.

Given that our goal is to guarantee your privacy, we shall only contract companies that provide us with sufficient security guarantees.

CONSUM shall not make international transfers of your personal data. In other words, your data shall be stored and used exclusively within the European Economic Area (EEA), guaranteeing your privacy with increased protection.

However, if at any time, we need to communicate your data outside of the EEA, we would inform you so you are aware of it.

5. How long do we keep your data for?

We shall retain your data until you request the deletion of it, or otherwise, for a period of 2 years after the last time you log in to consum.es with your username and password, the time at which, ex oficio, we shall proceed to remove you from the system given that we shall deem you to have lost interest in the services for which you initially registered.

If, once registered on consum.es, you decide to register as a Mundo Consum customer, the data that we hold about you shall be recovered during the Mundo Consum registration process and, once your registration as a partner has been processed correctly, we shall also unsubscribe you, ex officio, as a registered user on consum.es, in order to prevent duplicates on our systems.

6. What are your rights regarding your data?

You can exercise your rights of access, rectification, deletion and opposition and the right to limitation of the processing and portability of your personal data. Here at Consum, we have the following mechanisms available for the exercising of these rights:

- Sending a request to CONSUM at the following address: Avenida Alginet No. 1, 46460 Silla (Valencia), or

- Sending an email to delegadoprotecciondatosconsum@consum.es, stating the right you wish to exercise and providing a photocopy of both sides of your DNI or legal identification document.

- Contacting our customer services department using the online form: https://ayuda.consum.es/hc/es/requests/new, or calling this telephone number: 900 500 126.

- If you prefer, you can also exercise certain rights yourself, such as those of access or rectification of some of your personal data, by logging into the consum.es website yourself using your username and password.

Given that personal data belongs to its owner, only you shall be able to exercise these rights. That’s why we make sure you are the petitioner of the right or an authorised legal representative of the owner.

7. How can you contact the AEPD?

In any case, you have the right the right to file a complaint with the Spanish Data Protection Agency (hereafter AEPD), in particular, when you are not satisfied with CONSUM regarding the exercising of your rights. You can contact the AEPD through their website, www.agpd.es, or at the following address: C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone 912 663 517.

8. How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed and strives to protect the security of your personal data. We use a wide range of technologies and security procedures to protect personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide us with on IT systems with limited access, located in controlled facilities.

9. Can we update this Policy?

Occasionally, CONSUM will update this Policy regarding privacy and the processing of personal data. The end of the policy will contain the date of the last update. We recommend you access the content of this Policy regularly so you are kept informed at all times of the use we make of your personal data. Don’t worry though, if we make any changes to our Policy that affect you significantly, we will inform you directly by email, through a pop-up or message on our website.

Last update: 28/01/2022.

ONLINE STORE

1. Privacy Policy of the Consum Online Store.

CUSTOMERS WHO ARE NOT PARTNERS

1. Who is the controller of the processing of your data?

Controller for the processing of personal data: CONSUM, S. COOP. V. (hereafter, CONSUM) with NIF F46078986. Postal Address: Avenida Alginet, No. 1, 46460 Silla (Valencia). Telephone numbers: 961974000/961974050. Customer Service Web Form: https://www.consum.es/atencion-al-cliente/

If you have any question, query or suggestion in relation to how we use your personal data, you can contact Consum's Data protection Officer using this email address: delegadoprotecciondatosconsum@consum.es

2. When do you provide us with your data and what personal data do we collect?

Your personal data that we use in order to manage your registration and your account as a customer in our online store is the data you have provided to us through the online registration form on our website.

The main data we use that belongs to you is as follows:

• Basic details, such as your name, surname and date of birth.
• Identification documents, such as your DNI, NIE or passport.
• Contact details, such as your telephone number, email address and postal address.
• Log in or identification credentials, such as your username and/or password.
• Economic or financial data, such as the creation of invoices or generation of electronic receipts. We do not store or access your bank details, because payments are made through a secure payment gateway.
• Profile data, such as your shopping profile based on your usual searches or your most-bought products.
• Your IP address, to prevent fraud when using our app and/or website.

You are responsible for providing true, accurate and up-to-date personal data, and for being over the age of 14 years. To this end, if the lack of veracity or accuracy of the personal data provided causes damage or harm, directly or indirectly, you shall be liable for that.

If you are already a Consum customer, your personal data for shopping in our Online Store shall be governed by the provisions of our Mundo Consum Privacy Policy.

3. For what (purpose) and why (legal basis) do we process your data?

(1) To send you commercial communications: If you have provided us with your express consent by marking a tick box during the registration process, or you give it to us at any other time through the Privacy section of the website, we shall send you commercial communications via any of the contact methods that we have for you.

These communications shall only be in relation to Consum’s products and services that are beneficial to you, and with relevant information so that you are always kept up to date with our activities and can benefit from them.

(2) To offer you a personalised experience when browsing our website, including the communications with you: If you have provided us with your express consent by marking a tick box during the registration process, or you give it to us at any other time through the Privacy section of the website, we may analyse your browsing habits on the website, your most frequent searches and the most frequently bought products, in order to personalise our website and communications for you, and to ensure you have a better experience with us.

(3) In order for our service to provide you with technical support when you need it: We may help you to use our Online Store and provide you with technical support when a problem arises and you contact our customer services department. To do so, we may monitor your session and help you remotely, provided you have given express consent, thereby resolving your query more quickly.

If you have given us consent to be able to carry out any of these actions, and you change your mind, you may withdraw consent at any time, quickly and simply. You will be able to access the Privacy section of the Online Store, or inform us via the contact methods indicated in the final section of this Policy on how to exercise your rights regarding data protection.

To unsubscribe from online communications, you may also do so through the link that will appear in each email you receive.

(4) To provide you with the online service in our online supermarket: We ask you for minimum amount and necessary data in order to manage the contractual relationship correctly.

Given that we are a supermarket, on this website you may purchase your usual products from Consum in our Online Store. In order to handle your orders and be able to offer you the best service so you enjoy the online experience of shopping in Consum supermarkets, we require the data that we mark with an asterisk on the registration form of this website, in addition to any other data that you provide to us throughout the duration of our relationship, such as invoice details or an alternative delivery address, which shall be required in order to meet your needs and comply with the contract.

We shall also use your data to send you an invoice or electronic receipt for the purchases you make.

4. Who do we pass your data on to?

In general, Consum shall not share your personal data. However, if the administrative, tax or judicial authorities or Law Enforcement Bodies require us to provide them with information related to your personal data, we have a legal obligation to share that data with them.

Furthermore, Consum contracts extremal companies (data processors) to provide us with some services related to our activity (for example, printers, marketing agencies, web developers, logistics companies for home delivery, etc.). These companies shall have access to your data for the sole purpose of being able to provide us with the services we have contracted. We shall sign a service provision contract with them, in addition to another “data processing” contract, in which we establish that they are prohibited from using the data they have access to for their own purposes.

CONSUM shall not make international transfers of your personal data. In other words, your data shall be stored and used exclusively within the European Economic Area (EEA), guaranteeing your privacy with increased protection.

However, if at any time, we need to communicate your data outside of the EEA, we would inform you so you are aware of it.

Given that our goal is to guarantee your privacy, we shall only contract companies that provide us with sufficient security guarantees.

5. How long do we keep your data for?

We shall keep the data provided by you, in addition to that generated by your purchases in our Online Store, for the duration of our contractual relationship, and unless you ask us to delete it. In this case, we shall delete it permanently.

Once a period of 3 years has elapsed without you making any purchases in our Online Store, we shall automatically delete your information, as we shall deem that you are no longer interested in our service, and in order to guarantee the accuracy of data available in our database.

For tax purposes, we must keep some data for a period of 10 years, during which time it shall remain blocked in our systems. After that time, we shall delete it permanently.

In the case of customers who do not make any purchases in our online supermarket for a consecutive period of 3 years, their data shall stop being processed for the Online Store. However, we shall keep it for the duration of your relationship as a partner of this Cooperative.

6. What are your rights regarding your data?

You can exercise your rights of access, rectification, deletion and opposition and the right to limitation of the processing and portability of your personal data. Here at Consum, we have the following mechanisms available for the exercising of these rights:

- Sending a request to CONSUM at the following address: Avenida Alginet No. 1, 46460 Silla (Valencia), or

- Sending an email to delegadoprotecciondatosconsum@consum.es, stating the right you wish to exercise and providing a photocopy of both sides of your DNI or legal identification document.

- Contacting our customer services department using the online form: https://ayuda.consum.es/hc/es/requests/new, or calling this telephone number: 900 500 126.

- If you prefer, you can also exercise certain rights yourself, such as those of access or rectification of some of your personal data, by logging into our Online Store yourself using your username and password.

Given that personal data belongs to its owner, only you will be able to exercise these rights. That’s why we make sure you are the petitioner of the right or an authorised legal representative of the owner.

7. How can you contact the AEPD?

In any case, you have the right the right to file a complaint with the Spanish Data Protection Agency (hereafter AEPD), in particular, when you are not satisfied with CONSUM regarding the exercising of your rights. You can contact the AEPD through their website, www.agpd.es, or at the following address: C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone 912 663 517.

8. How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed and strives to protect the security of your personal data. We use a wide range of technologies and security procedures to protect personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide us with on IT systems with limited access, located in controlled facilities.

9. Can we update this Policy?

Occasionally, CONSUM will update this Policy regarding privacy and the processing of personal data. The end of the policy will contain the date of the last update. We recommend you access the content of this Policy regularly so you are kept informed at all times of the use we make of your personal data. Don’t worry though, if we make any changes to our Policy that affect you significantly, we will inform you directly by email, through a pop-up or message on our website.

Last update: 28/01/2022.

PARTNER-CUSTOMERS:

If you are a partner-customer, data shall be incorporated into CONSUM's database, retaining the password generated for Mundo CONSUM if it has already been generated, and, otherwise, enabling it to be created for registration.

(The Privacy Policy for a partner-customer who shops in the Online Store is the same as the MUNDO CONSUM policy)

MUNDO CONSUM + ONLINE STORE IF YOU ARE A PARTNER-CUSTOMER + APP

1. Mundo Consum + Online Store + App Privacy Policy.

1. Who is the controller of the processing of your data?

Controller for the processing of personal data: CONSUM, S. COOP. V. (hereafter, CONSUM) with NIF F46078986. Postal Address: Avenida Alginet, No. 1, 46460 Silla (Valencia). Telephone numbers: 961974000/961974050. Customer Service Web Form: https://www.consum.es/atencion-al-cliente/

If you have any question, query or suggestion in relation to how we use your personal data, you can contact Consum's Data protection Officer using this email address: delegadoprotecciondatosconsum@consum.es

2. When do you provide us with your data and what personal data do we collect?

Your personal data that we use in order to manage your registration as a partner-customer of the Consum Cooperative and your Mundo Consum account is the data you have provided via the paper registration form which is available for our customers in our stores, or via the online registration form on our website. We also use the data that you provide to us or that we infer based on the information you provide to us throughout the duration of your relationship with us, in your capacity as a partner-customer, such as your tastes and preferences based on your shopping habits, or the geographical areas you usually shop in, in addition to other sources, such as your social media, if you provide us with that information or interactions with us through social media.

Primarily, the data we use that belongs to you as a partner-customer member of Mundo Consum is as follows:

• Basic details, such as your name, surname and date of birth.
• Identification documents, such as your DNI, NIE or passport.
• Contact details, such as your telephone number, email address and postal address.
• Location data, such as your geolocation when you search for your nearest store with our app.
• Log in or identification credentials, such as your Mundo Consum username and/or password.
• Image and/or audio.
• Economic or financial details, such as the creation of invoices or generation of electronic receipts, both for your purchases in physical supermarkets and in our Online Store. We do not store or access your bank details, because payments are made through a secure payment gateway.
• Profile data, specifically, shopping profiles and your profile on social media.
• Your IP address.

You are responsible for providing true, accurate and up-to-date personal data, and for being over the age of 14 years. To this end, if the lack of veracity or accuracy of the personal data provided causes damage or harm, directly or indirectly, you shall be liable for that.

3. For what (purpose) and why (legal basis) do we process your data?

Tasks related to your status as cooperative partner: In your capacity as a partner-customer of the Consum Cooperative, based on the corporate contract that binds us, your data shall be processed in order for us to be able to correctly manage your corporate relationship with this Cooperative.

These matters mainly consist of: assessing your joining of the Cooperative as a consumer-partner and, if you are ultimately accepted into the Cooperative: to inform you of your acceptance as a consumer-partner; manage the corporate legal relationship arising from your status as a consumer-partner, in accordance with the provisions of the articles of association, which includes the creation and delivery of the card that identifies you as a partner-consumer, accounting, tax and administrative management, the sending of circulars and communications related to the activity and management of the Cooperative and the management of the subscription of voluntary share capital participations through the payment methods that Consum establishes (you can find out more information via the link at the bottom of this website); to send you the monthly purchase statement; to send you the generic part of the “CONSUM gift voucher”, consisting of a monthly discount for all purchases or the purchase of products that have a discount (“Cheque crece”), and to guarantee your participation in the activities carried out by the Cooperative for increased information, education and defence of the legitimate interests of consumers and users.

Your registration as a consumer partner shall also entail your inclusion in our loyalty programme, through which you may benefit from discounts and offers on the purchase of products and other advantages, in addition to being a member of a large community of users and partner-customers, where you may obtain points according to your interaction in it, achieve a level of loyalty and redeem your points for gifts and experiences. To obtain more information about our loyalty programme, you can read our Mundo Consum terms and conditions.

To send you commercial communications and create commercial profiles to personalise your relationship with us: To send you “gift vouchers”, “savings coupons”, other offers and advertising communications related to products and services sold by CONSUM from the food sector, through the channels you prefer, in addition to information about the Consum Visa card belonging to BBVA. To be able to use your personal data for these purposes, we rely on the legitimate interest that CONSUM has for doing so. This consists of us fulfilling these purposes unless you inform us of your opposition to them. You may inform us of your opposition, either on the registration forms or throughout our relationship, at any time and easily and simply. In these cases, we shall send you the applicable monthly gift voucher with general discounts without using profiling, and without including Consum’s advertising offer, if applicable.

So, what is our interest and to what extent are your rights and freedoms affected in these cases? Our interest is to try to identify, based on your purchases, browsing habits and common characteristics with people of your age, geographical area, or gender, your tastes and preferences regarding the products and services we offer, with the statutory objective of procuring food items for our partners and those they live with, under the best economic conditions possible and, as a result, carry out the relevant prior and subsequent actions relating to this. In this way, we are able to make our relationship with you as personalised as possible and you may also benefit from it, such as with the monthly gift-vouchers or products on offer, since, the more you buy the products you normally purchase, the larger your monthly gift voucher will be.

To do so, the following logic shall apply: your purchase history will be analysed; in other words, the products you usually consume, using predictive marketing models.

We understand that sending you commercial communications and creating a commercial profile of you does not significantly affect your fundamental rights and public freedoms, does not lead to situations of social exclusion or discrimination, and that, by deciding to register as a partner of this Cooperative, you are a habitual customer of our supermarkets, who is aware of the benefits that this involves.

To shop in our online supermarket: Your data shall also be used for you to be able to shop online in our supermarket, without the need to provide your data again, and providing you with the feature of redeeming your gift vouchers and offers directly from the app/website. By offering you this service, we shall be bound by a sales contract for products and services.

To undertake research and satisfaction surveys: On the basis of our legitimate interest, we may contact you from time to time and intermittently, in order to conduct a survey or study with you regarding aspects that allow us to improve the performance of our services. Whenever we contact you in any way, you may oppose this processing in advance. We understand that this action does not involve a risk to your rights or freedoms, and you indirectly benefit from improvements we may carry out.

Geolocation on our app to offer you the nearest store: one of the services offered by our mobile app for the exclusive use of our partners is to provide you with the nearest store at the time you are consulting our app. In order to provide you with this service, we need you to give us your prior consent. You may do this when you download our app, or subsequently, by accessing your mobile settings. We do not store your location data on our systems, or use it for any other purpose.

Linking cards: So that people from the same home may benefit to a greater extent from all the advantages we offer, we offer the option of linking various partners’ cards to one card belonging to a member of the family unit, so that all the purchases made are added together for the month's gift voucher. If you provide us with express consent and you provide us with the partner-customer you wish to link your purchases to, we shall carry out this processing. You may subsequently remove the link at any time you wish.

To send you the EntreNosotros magazine: We are a Cooperative of consumers, and one of our missions is to provide you with interesting information about consumption in our sector, supermarkets. Hence, if you give us your express consent, we shall send you our informative EntreNosotros magazine, by post or via email.

To use your photos and videos at Consum’s events and activities: Whenever you attend one of Consum’s events or activities in your capacity as a cooperative partner, we may capture your image in photos and videos to promote this activity via any medium.

4. Who do we pass your data on to?

In general, Consum shall not share your personal data. However, if the administrative, tax or judicial authorities or Law Enforcement Bodies require us to provide them with information related to your personal data, we have a legal obligation to share that data with them.

Furthermore, Consum contracts extremal companies (data processors) to provide us with some services related to our activity (for example, printers, marketing agencies, web developers, logistics companies for home delivery, etc.). These companies shall have access to your data for the sole purpose of being able to provide us with the services we have contracted. We shall sign a service provision contract with them, in addition to another “data processing” contract, in which we establish that they are prohibited from using the data they have access to for their own purposes.

Given that our goal is to guarantee your privacy, we shall only contract companies that provide us with sufficient security guarantees.

CONSUM shall not make international transfers of your personal data. In other words, your data shall be stored and used exclusively within the European Economic Area (EEA), guaranteeing your privacy with increased protection.

However, if at any time, we need to communicate your data outside of the EEA, we would inform you so you are aware of it.

5. How long do we keep your data for?

We shall only keep your personal data for as long as is necessary in order to fulfil the purpose for which it was collected; in this case, for being a partner-customer of the Consum Cooperative. Therefore, if you wish to leave the Cooperative, we shall comply with the legal obligations imposed on us and handle any potential liabilities that may arise from fulfilling the purpose for which the data was collected.

In all cases, and as a general rule, we shall keep your personal information for the duration of the contractual relationship that connects us or until you exercise your right of erasure and/or limitation of the processing, in which case the information shall be blocked and not used other than being preserved, while it may be required in order to exercise or defend any claims or in the event of any liability that may arise and need to be dealt with.

6. What are your rights regarding your data?

You can exercise your rights of access, rectification, deletion and opposition and the right to limitation of the processing and portability of your personal data. Here at Consum, we have the following mechanisms available for the exercising of these rights:

- Sending a request to CONSUM at the following address: Avenida Alginet No. 1, 46460 Silla (Valencia), or

- Sending an email to delegadoprotecciondatosconsum@consum.es, stating the right you wish to exercise and providing a photocopy of both sides of your DNI or legal identification document.

- Contacting our customer services department using the online form: https://ayuda.consum.es/hc/es/requests/new or calling this telephone number: 900 500 126.

- If you prefer, you can also exercise certain rights yourself, such as those of access or rectification of some of your personal data, by logging into the Mundo Consum website yourself using your username and password.

Given that personal data belongs to its owner, only you will be able to exercise these rights. That’s why we make sure you are the petitioner of the right or an authorised legal representative of the owner.

7. How can you contact the AEPD?

In any case, you have the right the right to file a complaint with the Spanish Data Protection Agency (hereafter AEPD), in particular, when you are not satisfied with CONSUM regarding the exercising of your rights. You can contact the AEPD through their website, www.agpd.es, or at the following address: C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone 912 663 517.

8. How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed and strives to protect the security of your personal data. We use a wide range of technologies and security procedures to protect personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide us with on IT systems with limited access, located in controlled facilities.

9. Can we update this Policy?

Occasionally, CONSUM will update this Policy regarding privacy and the processing of personal data. The end of the policy will contain the date of the last update. We recommend you access the content of this Policy regularly so you are kept informed at all times of the use we make of your personal data. Don’t worry though, if we make any changes to our Policy that affect you significantly, we will inform you directly by email, through a pop-up or message on our app or website.

Last update: 28/01/2022.

JOB PORTAL

1. Who is the controller of the processing of your data?

Controller for the processing of personal data: CONSUM, S. COOP. V. (hereafter, CONSUM) with NIF F46078986. Postal Address: Avenida Alginet, No. 1, 46460 Silla (Valencia). Telephone numbers: 961974000/961974050. Customer Service Web Form: https://www.consum.es/atencion-al-cliente/

If you have any question, query or suggestion in relation to how we use your personal data, you can contact Consum's Data protection Officer using this email address: delegadoprotecciondatosconsum@consum.es

2. When do you provide us with your data and what personal data do we collect?*

All the information we collect about you has been provided by you.

Given that this is our Job Portal, the data you must provide us with is your personal data, which will enable us to contact you and identify you, in addition to your education and professional experience.

Given that CONSUM encourages the labour integration of people with disabilities into its work centres, you may indicate whether you have a disability certificate with a degree equal to or exceeding 33%.

Optionally, you may attach supplementary information, such as your CV or a photograph.

3. For what (purpose) and why (legal basis) do we process your data?

We shall only use your personal data for the purpose of enabling you to take part in the recruitment processes that take place at CONSUM for which you are interested or you register, or for jobs which, despite not being registered, we believe your profile may match the job vacancy.

The legal basis that covers us to process your data on our job portal is your consent, given that, by registering voluntarily, you are expressly consenting to the processing of your data for the purpose of taking part in recruitment processes that take place within the Cooperative.

We don’t make automated decisions or carry out profiling to do this processing.

4. How long do we keep your data for?

Given that we are obliged to keep your personal data up to date, we shall keep it based on the following criteria:

- Until you request the deregistration of your account on the portal, the time at which we shall proceed to delete it automatically. - Or for two years, if during this time there is no activity or interaction by the user on Consum’s job portal; or for one month, for unfinished or incomplete applications. Once these periods have elapsed, we shall delete your personal data from our systems and deregister your account.

5. Who do we pass your data on to?

Your data shall not be communicated to third parties.

However, in order to properly manage our Job Portal, we contract other companies to provide us with a service and help us to achieve our aims. To do so, the companies we contract must have access to your personal data. These companies have limited access to your information, to the extent required in order to provide the contracted service, and they are obliged not to disclose or use it for other purposes based on the contract we sign with them. We also ensure that these companies meet the highest security standards.

The companies that have access to your data are:

• Deloitte technological division (DxD Applications & IT Solutions, S.L.U): consultancy services.
• Business Network Builders, S.L.: Technical developments.
• ITI: Incorporates technical developments.
• Lobo digital agency: Look & Feel of the application and user experience.

We do not make international transfers of your data to carry out this processing, your data shall always remain within the European Economic Area (EEA), consisting of companies that share the same Data Protection regulation, and therefore, the same obligations with regard to security and privacy.

6. What are your rights in relation to data protection?

By logging into your account with your username and password, you may exercise the following rights:

Access: by logging into your account, you will be able to view all the data that you have provided to us, and you can download it in PDF format.

Rectification of data: you will be able to correct and modify your data at any time.

Deletion: you have the option to ask to be removed from our Job Portal within your user account; this removal shall include the deletion of your data, since the purpose for which we collected it shall no longer apply.

However, you may exercise all these rights, in addition to the opposition, limitation of the processing or portability, in the event that the nature of the processing allows it, by writing a request to CONSUM at the following address: Avenida Alginet No. 1, 46460 Silla (Valencia), or via email to delegadoprotecciondatosconsum@consum.es, stating the right you wish to exercise and providing a photocopy of both sides of your DNI or legal identification document.

7. How can you contact the AEPD?

In any case, you have the right the right to file a complaint with the Spanish Data Protection Agency (hereafter AEPD), in particular, when you are not satisfied with CONSUM regarding the exercising of your rights. You can contact the AEPD through their website, www.agpd.es, or at the following address: C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone 912 663 517.

8. How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed and strives to protect the security of your personal data. We use a wide range of technologies and security procedures to protect personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide us with on IT systems with limited access, located in controlled facilities.

Last update: 28/01/2022.

PRIVACY POLICY FOR THE SENDING OF COMMUNICATIONS VIA WHATSAPP

1. Who is responsible for processing your data?

Controller for the processing of personal data: “CONSUM, S. COOP. V.” (hereafter CONSUM) with NIF F46078986. Postal Address: Avenida Alginet, No. 1, 46460 Silla (Valencia).

Telephone numbers: 961974000/961974050.

Customer Service Web Form: https://www.consum.es/atencion-al-cliente/

If you have any question, query or suggestion in relation to how we use your personal data, you can contact Consum's Data protection Officer using this email address: delegadoprotecciondatosconsum@consum.es

2. When do you provide us with your data and what personal data do we collect?

We have access to your data, that you have provided to us through the partner-customer registration form (online or paper form), on this channel the new data we may use about you is the data you provide to us because it is missing from the application or the data is incorrect, this would be basic identification data.

3. For what (purpose) and why (legal basis) do we process your data?

(1) To send you commercial communications: We will send commercial communications related to Consum’s products or actions, only if you give us your express consent. Remember that we are a supermarket; therefore, you will only receive communications related to the food sector, consumption, etc.

In each communication that you receive by electronic means, you will have the option of unsubscribing from Consum’s emails.

(2) To complete or rectify data that is missing or incorrect in your application to become a partner-customer of the Cooperative.

4. Who do we pass your data on to?

In general, Consum shall not share your personal data. However, if the administrative, tax or judicial authorities or Law Enforcement Bodies require us to provide them with information related to your personal data, we have a legal obligation to share that data with them.

Furthermore, Consum contracts extremal companies (data processors) to provide us with some services related to our activity (for example, printers, marketing agencies, web developers, logistics companies for home delivery, etc….) These companies shall have access to your data for the sole purpose of being able to provide us with the services we have contracted. We shall sign a service provision contract with them, in addition to another “Data Processing” contract, in which we establish that they are prohibited from using the data they have access to for their own purposes.

Given that our goal is to guarantee your privacy, we shall only contract companies that provide us with sufficient security guarantees. When communicating with your via WhatsApp, your data may leave the European Economic Area (EEA), see WhatsApp’s privacy policy, it would be responsible if international transfers are made.

5. How long do we keep your data for?

We will retain your data until you request the deletion of it.

6. What are your rights regarding your data?

You can exercise your rights of access, rectification, deletion and opposition and the right to limitation of the processing and portability of your personal data. Here at Consum, we have the following mechanisms available for the exercising of these rights:

By writing to CONSUM with your request at the following address: Avenida Alginet No. 1, 46460 Silla (Valencia), or by sending an email to delegadoprotecciondatosconsum@consum.es, stating the right you wish to exercise and providing a photocopy of both sides of your DNI or legal identification document.

Contacting our customer service department using the online form below: https://ayuda.consum.es/hc/es/requests/new or by calling this telephone number: 900 500 126.

If you prefer, you can also exercise certain rights yourself, such as those of access or rectification of some of your personal data, by logging into the Consum.es website yourself using your username and password.

Given that this personal data belongs to its owner, you are the only person that shall be able to exercise these rights, which is why we ensure that you are the petitioner of the right or an authorised legal representative of the owner.

7. How can you contact the AEPD?

In any case, you have the right the right to file a complaint with the Spanish Data Protection Agency (hereafter AEPD), in particular, when you are not satisfied with CONSUM regarding the exercising of your rights. You can contact the AEPD through their website, www.agpd.es, or at the following address: C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone 912 663 517.

8. How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed and strives to protect the security of your personal data. We use a wide range of technologies and security procedures to protect personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide us with on IT systems with limited access, located in controlled facilities.

9. Can we update this Policy?

Occasionally, CONSUM will update this Policy regarding privacy and the processing of personal data. The end of the policy will contain the date of the last update. We recommend you access the content of this Policy regularly so you are kept informed at all times of the use we make of your personal data. Don’t worry though, if we make any changes to our Policy that affect you significantly, we will inform you directly by email, through a pop-up or message on our website.

Last update: 16/06/2022.

WIFI

1. Privacy Policy for the use of Wi-Fi in CONSUM establishments

1. Who is the controller of the processing of your data?

Controller for the processing of personal data: CONSUM, S. COOP. V. (hereafter, CONSUM) with NIF F46078986. Postal Address: Avenida Alginet, No. 1, 46460 Silla (Valencia). Telephone numbers: 961974000/961974050. Customer Service Web Form: https://www.consum.es/atencion-al-cliente/

If you have any question, query or suggestion in relation to how we use your personal data, you can contact Consum's Data protection Officer using this email address: delegadoprotecciondatosconsum@consum.es

2. When do you provide us with your data and what personal data do we collect?

Your personal data that we use in order to manage your use of the Wi-Fi network when you enter a CONSUM establishment shall be limited to the MAC address, which is a unique identifier of the Wi-Fi card of the device (smartphone, tablet, etc.).

3. For what (purpose) and why (legal basis) do we process your data?

In order to correctly manage your use of the Wi-Fi network, because you have given us express consent via the text displayed on your device when you enter a CONSUM establishment.

4. Who do we pass your data on to?

In general, Consum shall not share your personal data. However, if the administrative, tax or judicial authorities or Law Enforcement Bodies require us to provide them with information related to your personal data, we have a legal obligation to share that data with them.

Furthermore, Consum contracts extremal companies (data processors) to provide us with some services related to our activity (for example, printers, marketing agencies, web developers, logistics companies for home delivery, etc.). These companies shall have access to your data for the sole purpose of being able to provide us with the services we have contracted. We shall sign a service provision contract with them, in addition to another “data processing” contract, in which we establish that they are prohibited from using the data they have access to for their own purposes.

CONSUM shall not make international transfers of your personal data. In other words, your data shall be stored and used exclusively within the European Economic Area (EEA), guaranteeing your privacy with increased protection.

However, if at any time, we need to communicate your data outside of the EEA, we would inform you so you are aware of it.

Given that our goal is to guarantee your privacy, we shall only contract companies that provide us with sufficient security guarantees.

5. How long do we keep your data for?

We shall keep your data for one year, after that period, it shall be deleted.

6. What are your rights regarding your data?

You can exercise your rights of access, rectification, deletion and opposition and the right to limitation of the processing and portability of your personal data. Here at Consum, we have the following mechanisms available for the exercising of these rights:

- Sending a request to CONSUM at the following address: Avenida Alginet No. 1, 46460 Silla (Valencia), or

- Sending an email to delegadoprotecciondatosconsum@consum.es, stating the right you wish to exercise and providing a photocopy of both sides of your DNI or legal identification document.

- Contacting our customer services department using the online form: https://ayuda.consum.es/hc/es/requests/new, or calling this telephone number: 900 500 126.

- If you prefer, you can also exercise certain rights yourself, such as those of access or rectification of some of your personal data, by logging into our Online Store yourself using your username and password.

Given that personal data belongs to its owner, only you will be able to exercise these rights. That’s why we make sure you are the petitioner of the right or an authorised legal representative of the owner.

7. How can you contact the AEPD?

In any case, you have the right the right to file a complaint with the Spanish Data Protection Agency (hereafter AEPD), in particular, when you are not satisfied with CONSUM regarding the exercising of your rights. You can contact the AEPD through their website, www.agpd.es, or at the following address: C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone 912 663 517.

8. How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed and strives to protect the security of your personal data. We use a wide range of technologies and security procedures to protect personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide us with on IT systems with limited access, located in controlled facilities.

9. Can we update this Policy?

Occasionally, CONSUM will update this Policy regarding privacy and the processing of personal data. The end of the policy will contain the date of the last update. We recommend you access the content of this Policy regularly so you are kept informed at all times of the use we make of your personal data. Don’t worry though, if we make any changes to our Policy that affect you significantly, we will inform you directly by email, through a pop-up or message on our website.

Last update: 28/01/2022.

VIDEO SURVEILLANCE

Who is the data controller for your data?

Controller for the processing of personal data: CONSUM, S. COOP. V. (hereafter, CONSUM) with NIF F46078986.

Postal Address: Avenida Alginet, No. 1, 46460 Silla (Valencia)

Telephone numbers: 961974000 / 961974050.

Customer Service Web Form: https://www.consum.es/atencion-al-cliente/

How can you contact our Data Protection Officer?

The email contact details of CONSUM's Data Protection Officer are delegadoprotecciondatosconsum@consum.es.

What information do we collect about you?

Your image, in your capacity as customer, supplier, or a third party, when you access any of our facilities, or in your capacity as partner/worker/employee of CONSUM while performing your day-to-day work (entrance, development and end).

For what purpose and how long do we keep it for? Images are processed (captured, recorded and played) for security purposes, aiming to safeguard the goods and people in our facilities, and more specifically for: (i) surveillance of Consum’s premises, and access to them, in order to fulfil security operations; (ii) prevention of risks and accidents that affect the security and protection of people, premises and goods; (iii) checking the company’s premises; (iv) verification of compliance with employment obligations and duties of the worker where required within the framework of power of the Cooperative’s management.

We don’t make automated decisions or carry out profiling to do this processing.

Your personal data obtained via the video surveillance system shall be kept by CONSUM for a period of 30 days after its capture, unless there is a report of crimes or offences and the data is required by the Law Enforcement Authorities or courts, which enables us to retain it for a longer period in order to provide it to these bodies together with the corresponding report. After that period has elapsed, it shall be deleted automatically from our systems.

What is the legal basis that allows us to use your data for this specific purpose?

The legal basis that covers us for processing your data for video surveillance purposes is CONSUM's legitimate interest in safeguarding the security of people and premises, and in relation to the purpose of checking compliance with the obligations and duties of the worker, the legal basis is the employment or corporate contract.

For processing carried out for business control purposes, workers’ right to privacy and protection of self-image shall be taken into account.

The processing of your image for the video surveillance recording is obligatory in order for you to access the Cooperative’s premises; if you do not wish to be recorded, you shall not be able to enter the premises.

Who might be the recipients of your data?

Personal data shall be communicated to third parties (law enforcement agencies, courts, lawyers, public prosecutors, notaries, insurance companies and competent bodies of the competent public administration in the matter) in the following cases: (i) to exercise the legal actions that correspond to the company in order to file a claim or defend against third parties, (ii) where there is a legal obligation to communicate data to the competent public authorities with powers in this area and /or to meet the requirements made by the, (iii) to prove work-related breaches.

However, in order to manage video surveillance properly, we contract other companies to provide us with a service and help us to achieve our aims. To do so, the companies we contract must have access to your personal data. The companies that, according to the security services they provide to us, access your data are: (i) AGPAR SEGURIDAD S.L., (ii) SECURITAS SEGURIDAD ESPAÑA, S.A. and (iii) ALERT SYSTEM, S.L. These companies have limited access to your information, to the extent required in order to provide the contracted service, and they are obliged not to disclose or use it for other purposes.

We do not make international transfers of your data to carry out this processing, your data shall always remain within the European Economic Area (EEA), consisting of companies that share the same Data Protection regulation, and therefore, the same obligations with regard to security and privacy.

What are your rights in relation to data protection?

You can exercise your rights of access, rectification, deletion and opposition, rights of limitation of the processing and portability of your personal data, by sending a request to CONSUM at the following address: Avenida Alginet No. 1, 46460 Silla (Valencia), or via email to delegadoprotecciondatosconsum@consum.es, stating the right you wish to exercise and providing a photocopy of both sides of your DNI or legal identification document.

Given the nature of the processing, and the specific characteristics of each right, dealing with your request will not always be possible; however, we will analyse each case individually and always give you a response.

How can you contact the AEPD?

In any case, you have the right the right to file a complaint with the Spanish Data Protection Agency (hereafter AEPD), in particular, when you are not satisfied with CONSUM regarding the exercising of your rights. You can contact the AEPD through their website, www.agpd.es, or at the following address: C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone 912 663 517.

How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed and strives to protect the security of your personal data. We use a wide range of technologies and security procedures to protect personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide us with on IT systems with limited access, located in controlled facilities.

Last update: 28/01/2022.

COMPLAINTS CHANNEL AND INTERNAL INFORMATION SYSTEM

Who is responsible for your data?

Data controller: "CONSUM, S. COOP. V." (hereinafter, CONSUM), with tax identification number F46078986.

Postal address: Avenida Alginet, n9 1, 46460, Silla (Valencia).

Telephone: +34 961974000 / +34 961974050.

How can you contact our Data Protection Officer?

The contact email address of CONSUM's Data Protection Officer is: delegadoprotecciondatosconsum@consum.es.

What information do we collect from you and from the persons involved in the reported event?

The complaint can be anonymous: if it is not, we ask you to provide the following information in the e-mail:

• First name
• Surname.
• Position.
• Telephone number.
• ID card number
• Address.
• City.

In any case, in the "persons involved in the event" section, you may indicate:

• First name
• Surname
• Position.
• E-mail.
• Telephone.
• Address.
• And in "Events" the details you wish to indicate.

For what purpose and for how long will we keep them? The data are processed for the correct management of the Complaints Channel and for the correct management of the system for dealing with workplace, sexual and gender-based harassment and any type of discrimination (hereinafter referred to as "The System"), and, where appropriate, for processing the corresponding procedure based on the complaint lodged.

We do not make automated decisions or profiling to carry out this processing.

Your personal data and those of the persons involved obtained through the system will be kept for the time necessary to decide whether to initiate an investigation into the reported events, in any case for a maximum of three (3) months from the time the data is entered. After this period, they will be automatically deleted from our systems, unless the purpose of their conservation is to leave evidence of the operation of the system, in which case the content of the communications will be recorded anonymously.

The personal data of the complaints that have given rise to the opening of proceedings will be kept for the time required to process the case, in a different system from the main system (where appropriate according to the type of case, in the Personnel Department, for example) and, after the corresponding period, will be blocked and will be available to the authorities if requested. The data will be deleted definitively after ten (10) years from the day following the lodging of the complaint.

What is the legal basis that allows us to use your data for this specific purpose?

As regards the basis of legitimacy of the processing of personal data in the cases subject to this regulation, the existence of an internal and/or external information system responds to an obligation in accordance with the provisions of this regulation, and the lawfulness of this processing is based on the fulfilment of a legal obligation [Article 6.1.c) General Data Protection Regulation]; however, where the processing of this personal data is voluntary or is carried out in the context of public disclosure, this processing shall be regarded as lawful on the ground that it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller [Article 6.1.c) General Data Protection Regulation].

Who may receive your data?

Personal data will be disclosed to third parties (law enforcement agencies, courts, tribunals, lawyers, solicitors, notaries, insurers and competent bodies of the public administration with competence in the matter) in the following cases: (i) for the taking of legal action by the company for the complaint or defence against third parties, (ii) when there is a legal obligation to communicate the data to the competent public authorities on the basis of the subject matter and/or for the fulfilment of the requests made by these authorities; (iii) to accredit breaches of labour law.

We do not transfer your data internationally in order to carry out this processing, and your data will always remain within the European Economic Area (EEA) which is made up of countries that share the same data protection regulations, and therefore the same obligations in terms of security and privacy.

Furthermore, the communication of data relating to the informant may only be communicated to certain entities, such as the Judicial Authority, the Public Prosecutor's Office or the Administrative Authority with the corresponding competence, and always on the basis of the confidentiality regime for communications regulated in the General Data Protection Regulation and the Organic Law on Protection of Personal Data and Guarantee of Digital Rights. Notwithstanding the foregoing, the processing of the data by other persons, or even their communication to third parties, shall be lawful when it is necessary for the processing of any sanctioning or criminal proceedings that may be applicable.

The System shall have a register-book of the communications received and the corresponding internal investigations, which shall remain confidential and access to their content shall only be granted at the reasoned request of the competent judicial authority, by means of an order, and within the framework of a judicial procedure and under the supervision of the latter.

Who is authorised to access personal data?

In relation to the persons authorised to access the personal data contained in the internal information systems, this access is limited to the following authorised persons:

a) The bodies involved in the Protocol for action against workplace harassment, sexual and gender-based harassment and any type of discrimination:

- Committee for the Prevention of Harassment and Discrimination

- Investigation Group appointed to this case by the Prevention Committee

- Analysis Group

b) Person responsible for the system and whoever manages it directly;

c) The responsible person or public body in charge of human resources management in relation to a disciplinary procedure;

d) The person in charge of the legal services of the entity, in the case of the initiation of appropriate legal action;

e) The data processors designated for this purpose and More Actions

f) The data protection officer.

What are your data protection rights?

You can exercise your rights of access, rectification, deletion and opposition, rights to limit the processing and portability of your personal data by sending a request to CONSUM at the following address: Avenida Alginet nº 1, 46460 Silla (Valencia), or by e-mail to delegadoprotecciondatosconsum@consum.es, indicating the right you are exercising and providing a photocopy of both sides of your ID card or legal identification document.

Given the nature of the processing, and the specific characteristics of each right, it may not always be possible for us to comply with your request; however, we will analyse each case and will always provide you with a response.

In particular, with regard to the right of access, it shall be limited and the personal data of the informant shall not be subject to the right of access, in order to ensure the protection of the informant against possible retaliation by the persons under investigation for the information provided.

How can you contact the Spanish Data Protection Agency (AEPD)?

In any case, you have the right to file a complaint with the Spanish Data Protection Agency (hereinafter AEPD), in particular, when you consider that you have not obtained satisfaction from CONSUM, in the exercising of your rights. You can contact the AEPD through its website, www.agpd.es, or at the following address C/ Jorge Juan, 6, 28001 — Madrid, telephone +34 912 663 517.

How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed to and makes every effort to protect the security of your personal data. We use a variety of security technologies and procedures to protect personal information from unauthorised access, use or disclosure. For example, we store the personal information you provide to us on computer systems with limited access, located in controlled facilities

CUSTOMER SERVICE

1. Who is the controller of the processing of your data?

Controller for the processing of personal data: CONSUM, S. COOP. V. (hereafter, CONSUM) with NIF F46078986. Postal Address: Avenida Alginet, No. 1, 46460 Silla (Valencia) Telephone numbers: 961974000/961974050. Customer Service Web Form: https://www.consum.es/atencion-al-cliente/

If you have any question, query or suggestion in relation to how we use your personal data, you can contact Consum's Data protection Officer using this email address: delegadoprotecciondatosconsum@consum.es

2 When do you provide us with your data and what personal data do we collect?

In order to handle your queries, suggestions, complaints, claims, we shall use your data that you provided to us through our online form or when you phone our customer service department by telephone.

The main data we use that belongs to you for this purpose is as follows:

• Basic details, such as your name and surname(s).
• Identification documents, such as your DNI, NIE or passport, and your membership number, if applicable.
• Contact details, such as your telephone number, email address and postal address.
• Any other data you wish to provide us with and that you deem to be appropriate in order for us to handle your request.

We inform you that CONSUM shall never ask you for bank details, such as your card number or bank log in details. Never enter these details in our online contact form, or any other sensitive information about you, such as medical details or information about minors.

3. For what (purpose) and why (legal basis) do we process your data?

We shall only use the data you provide to us when you contact our customer services department for the following purposes: to manage and respond to queries, requests, complaints or suggestions to our Customer Services department, and to conduct, where applicable, satisfaction surveys for the customer services department.

We base both types of processing on our legitimate interest of helping you with your requests.

4. Who do we pass your data on to?

In general, Consum shall not share your personal data. However, if the administrative, tax or judicial authorities or Law Enforcement Bodies require us to provide them with information related to your personal data, we have a legal obligation to share that data with them.

Furthermore, Consum contracts extremal companies (data processors) to provide us with some services related to our activity (for example, printers, marketing agencies, web developers, logistics companies for home delivery, etc.). These companies shall have access to your data for the sole purpose of being able to provide us with the services we have contracted. We shall sign a service provision contract with them, in addition to another “data processing” contract, in which we establish that they are prohibited from using the data they have access to for their own purposes.

CONSUM shall not make international transfers of your personal data for this purpose. In other words, your data shall be stored and used exclusively within the European Economic Area (EEA), guaranteeing your privacy with increased protection.

However, if at any time, we need to communicate your data outside of the EEA, we would inform you so you are aware of it.

Given that our goal is to guarantee your privacy, we shall only contract companies that provide us with sufficient security guarantees.

5. How long do we keep your data for?

We keep the data provided by you when you contact our customer services department for a period of 5 years after your request or complaint has been dealt with, since, in general, this is the limitation period for private civil actions. Once that period has elapsed, we shall delete your personal information from our data base.

6. What are your rights regarding your data?

You can exercise your rights of access, rectification, deletion, opposition and the right to the limitation of the processing and portability of your personal data; however, and depending on each case, it will not always be able to fulfil these rights, such as in the case of deletion, where we are processing a complaint. Here at Consum, we have the following mechanisms available for the exercising of these rights:

- Sending a request to CONSUM at the following address: Avenida Alginet No. 1, 46460 Silla (Valencia), or

- Sending an email to delegadoprotecciondatosconsum@consum.es, stating the right you wish to exercise and providing a photocopy of both sides of your DNI or legal identification document.

- Contacting our customer services department using the online form: https://ayuda.consum.es/hc/es/requests/new, or calling this telephone number: 900 500 126.

- If you prefer, you can also exercise certain rights yourself, such as those of access or rectification of some of your personal data, by logging into our Online Store yourself using your username and password.

Given that personal data belongs to its owner, only you will be able to exercise these rights. That’s why we make sure you are the petitioner of the right or an authorised legal representative of the owner.

7. How can you contact the AEPD?

In any case, you have the right the right to file a complaint with the Spanish Data Protection Agency (hereafter AEPD), in particular, when you are not satisfied with CONSUM regarding the exercising of your rights. You can contact the AEPD through their website, www.agpd.es, or at the following address: C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone 912 663 517.

8. How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed and strives to protect the security of your personal data. We use a wide range of technologies and security procedures to protect personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide us with on IT systems with limited access, located in controlled facilities.

9. Can we update this Policy?

Occasionally, CONSUM will update this Policy regarding privacy and the processing of personal data. The end of the policy will contain the date of the last update. We recommend you access the content of this Policy regularly so you are kept informed at all times of the use we make of your personal data. Don’t worry though, if we make any changes to our Policy that affect you significantly, we will inform you directly by email, or via any other method of contact that we have for you.

Last update: 01/02/2022.

HOME DELIVERY

Who is the data controller for your data?

Controller for the processing of personal data: CONSUM, S. COOP. V. (hereafter, CONSUM) with NIF F46078986.

Postal address: Avenida Alginet, No. 1, 46460 Silla (Valencia)

Telephone numbers: 961974000 / 961974050.

Customer Service Web Form: https://www.consum.es/atencion-al-cliente/

How can you contact our Data Protection Officer?

The email contact details of CONSUM's Data Protection Officer are delegadoprotecciondatosconsum@consum.es.

What information do we collect about you?

In order to provide you with the home delivery service for your shopping, we need to you provide us with the delivery address, your name and surname(s) and contact telephone number.

This data may be provided at our establishments, by requesting this service at the till, or when shopping in our Online Store.

For what purpose and how long do we keep this data for?

Your data shall be used exclusively to provide you with the home delivery service for the purchases you make in any of our establishments.

We don’t make automated decisions or carry out profiling to do this processing.

We keep your data for as long as you have a commercial relationship with us or until you unsubscribe from our database.

What is the legal basis that allows us to use your data for this specific purpose?

We need to use your personal data to be able to correctly provide you with the home delivery service for the purchases you have made. If you do not provide us with your data, we won’t be able to deliver your shopping to your home. For that reason, the legal basis for this processing shall be the contractual relationship between you and Consum.

Who might be the recipients of your data?

In this case, to correctly provide the home delivery service, we contract logistics companies to deliver our orders. Hence, the delivery companies and their delivery drivers need to access your personal data. These companies have limited access to your information, to the extent required in order to provide the contracted service, and they are obliged not to disclose or use it for other purposes.

Your personal data shall not be communicated to third parties, unless there is a legal obligation to do so.

We do not make international transfers of your data to carry out this processing, your data shall always remain within the European Economic Area (EEA), consisting of companies that share the same Data Protection regulation, and therefore, the same obligations with regard to security and privacy.

What are your rights in relation to data protection?

You can exercise your rights of access, rectification, cancellation and opposition, rights of limitation of the processing and portability of your personal data, by sending a request to CONSUM at the following address: Avenida Alginet No. 1, 46460 Silla (Valencia), or via email to delegadoprotecciondatosconsum@consum.es, stating the right you wish to exercise and providing a photocopy of both sides of your DNI or legal identification document.

Given the nature of the processing, and the specific characteristics of each right, dealing with your request will not always be possible; however, we will analyse each case individually and always give you a response.

How can you contact the AEPD?

In any case, you have the right the right to file a complaint with the Spanish Data Protection Agency (hereafter AEPD), in particular, when you are not satisfied with CONSUM regarding the exercising of your rights. You can contact the AEPD through their website, www.agpd.es, or at the following address: C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone 912 663 517.

How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed and strives to protect the security of your personal data. We use a wide range of technologies and security procedures to protect personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide us with on IT systems with limited access, located in controlled facilities.

Last update: 01/02/2022.

NEWSLETTERS

1. Who is the controller of the processing of your data?

 CONSUM, S.COOP.V., NIF: F46078986. Registered Office: Avda Alginet 1, Silla (Valencia) Telephone: 961974000/961974050. Customer Service: https://www.consum.es/atencion-al-cliente/

2. When do you provide us with your data and what personal data do we collect?

We shall only gather your email address that you provide for the purpose of regularly sending you our newsletter.

3 For what (purpose) and why (legal basis) do we process your data?

To send you our newsletter with information that is of interest to you regarding our products, services and actions, and always related to the food sector. We base this processing on the performance of a contract; in this instance, your subscription.

4. Who do we pass your data on to?

Consum contracts other external companies in order for them to provide certain services and enable us to provide our customers with different services. In this case, and from time to time, we contract a third party, data processor, to provide a tool to send emails, they may only use your address to provide us with these services, for which we have signed a contract obliging them to do so.

We do not make international transfers of data for this purpose, or sell, under any circumstances, your personal information.

5. How long do we keep your data for?

We shall send you our newsletter until you unsubscribe from it. When you ask to unsubscribe from the newsletter, we shall delete your email address from our data base as soon as possible. It is possible that, at the latest, within a maximum of one month, you may receive another communication from us which falls within the actions that were already scheduled to take place.

6. What are your rights regarding your data?

You can exercise the rights of access, rectification, opposition, deletion, portability, withdrawal of consent that has already been given, and limitation of the processing, where applicable, by sending an email to delegadoprotecciondatosconsum@consum.es or by contacting our customer services department.

In all communications that you receive from us, you will find the “unsubscribe” button, through which you may unsubscribe automatically. Unsubscribing or cancelling your subscription shall entail the deletion of your data, given that the purpose for which it was collected no longer applies.

7. How can you contact the AEPD?

In any case, you have the right the right to file a complaint with the Spanish Data Protection Agency (hereafter AEPD), in particular, when you are not satisfied with CONSUM regarding the exercising of your rights. You can contact the AEPD through their website, www.agpd.es, or at the following address: C/ Jorge Juan, 6. 28001 – Madrid, and/or contact telephone 912 663 517.

8. How do we protect your privacy?

We are committed to protecting your privacy and security. Consum is committed and strives to protect the security of your personal data. We use a wide range of technologies and security procedures to protect personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide us with on IT systems with limited access, located in controlled facilities.

Last update: 01/02/2022.