Privacy
policy

Through this Privacy Policy, IDILIA FOODS, S. L. (hereinafter, (“IDILIA”) informs users of websites owned by IDILIA about the processing of personal data during their browsing, or when interacting with us through the various channels offered on the following websites:

We ask you to read carefully review this Policy, in which we explain what data we collect, how we obtain it, what we use it for, who may be the recipient, for how long we will retain it, among other important aspects, in guarantee of your right to the protection of personal data.

By browsing the IDILIA websites, you acknowledge that you have read this Policy and agree to its content.

1.- Who is responsible for your personal data?

• Name: IDILIA FOODS, S. L.
• Address: C/ Lepanto 410-414, 08025, Barcelona.
• NIF: B-08100380
• Phone: 900 10 10 48
• Contact email: dpo@idilia.es
• Data contact details of the Data Protection Officer: UNIVER IURIS S.L., dpo@idilia.es.

2.- DATA COLLECTION FORM

All information provided by the User through the forms available on the websites must be accurate. For these purposes, the User guarantees the authenticity of all data communicated and will keep the information provided to IDILIA perfectly updated so that it reflects, always, the User's actual situation. In any case, the User shall be solely responsible for any false or inaccurate statements made and for any damage caused to IDILIA or third parties by the information provided.

Should the fields in the data collection forms made available to the User on this Website be mandatory, failure to provide such data could result in the inability to attend to their request, query, or service.

3.- What personal data do we process and how do we obtain it?

To browse the IDILIA websites, you do not need to provide any personal data. Nevertheless, to contact us through the different channels, we collect different types of data about you:

• Identifying and contact information: such as name, last name, email address, telephone, or postal address: This is information that you provide to us through various contact forms, email, or by telephone contact, to address any queries about the product. We may also obtain data that you provide us with your participation in promotions, contests or surveys that we carry out through social media.
• Data related to the query, request, or claim you direct to us and that you provide when completing forms, participating in promotions, contests, or contacting us.
• Navigation data: This is information about the computer system or other technological devices you use to access one of our websites. This includes the internet protocol (IP) address you use to connect your computer or device to the internet, the type of operating system, and the type and version of the web browser, access time, and referring URL.
• User registration data, if applicable, that you provide us with in the registration form for the management of factory visits, including data on the subject taught by the teaching professional concerned and the educational center to which they belong.
• COOKIES and/or similar Technologies: Website usage/connection information. Check here, the information in detail about cookies cookies policy.

When we request your personal data in the forms provided on our websites, we may mark some fields as mandatory, as this is the data we need in order to provide you with the service or respond to your request or query. Please note that if you decide not to provide us with any of the data marked as “mandatory fields,” we may not be able to respond to you adequately.

4.- For what purpose do we process your data and on what legal basis do we do so, and for how long will we retain the data?

Next, we explain what we use your data for and what the legal justification is that allows us to do so.

What do we use data for?	Basis of Legitimation
Customer service and complaints and claims management	We process your data to fulfill our legal obligations, such as those arising from the Consumer and User Law, to meet contractual obligations with our customers, and our legitimate interests in improving our products and services.
Address product inquiries and information requests or commercial information.	We process your data to respond to your request, based on the legitimate interest of IDILIA in serving users.
Manage visits to our Nocilla and Colacao factory: Access to the portal "!Visit us!” The great adventure of cocoa - Visit ColaCao and Nocilla	We process your data to organize the visit to our ColaCao and Nocilla factory facilities in Parets del Vallès (Barcelona), based on the pre-contractual relationship we maintain with you when requesting this service offered by IDILIA.
Management of employment requests through “Join the team” and the BKCAO program, access to LinkedIn profile	We collect the data you send us by email, through the contact form, or by accessing your LinkedIn profile, with the consent you give us when requesting your participation in IDILIA's personnel selection processes.
Third-party social media interaction	We collect your personal data when you interact with third-party social media features, such as “Like,” to provide you with advertisements and target you on third-party social media. We do this with the consent you provide to the social media owner to allow them to share your personal information with us. For more information on how this works, we recommend that you review the privacy notices of third-party social media.
Manage promotions, contests, or surveys through social media	We collect your data with the consent you provide to the social network owner, to allow us to collect your participation data in the contest or promotion.  You can consult the promotions tab for the legal terms and conditions of current active contests/promotions.
Allow web browsing and manage the activity and security of our web pages	We process your browsing data based on IDILIA's legitimate interest in ensuring access to the website and maintaining security against potential incidents.
Manage projects in the "Social Action" and "Planet and planets" section	This tab takes you to the Colacao Foundation's website. The personal data you provide in this section will be processed for the purpose of participation in corporate social responsibility initiatives and projects, communication of activities, collaboration and awareness-raising, and promotion of sustainability and social action.
Sending promotional communications, news, and events	Should you have given us your consent, we will use the data collected through subscriptions or contact forms to send you communications about news, press releases, and events related to IDILIA.
Data protection rights request management	We will address your requests related to the processing of your personal data, in compliance with IDILIA’s legal obligations.

5.- For how long will we keep your data?

In general, we will only retain your personal data for as long as necessary to fulfill the purposes described in this policy. Specifically, we will retain data according to these criteria:

• Inquiries/requests regarding products and commercial information: Until the inquiry is resolved.
• Claims and complaints: Until resolved.
• Sending commercial communications: For the time you remain subscribed to receive them. You may withdraw your consent at any time by unsubscribing, requesting cancellation, or via email dpo@idilia.es
• Navigation data: Confirm if collected

We inform you that, once the purpose has been fulfilled, IDILIA may retain the data blocked, that is, without using it and properly protected, for the period in which responsibilities may arise in compliance with applicable regulations. Once the legally established deadlines expire, we will proceed with the definitive deletion of the personal data.  

6.- With whom do we share your data?

We inform you that your data will not be communicated to third parties, except where necessary to comply with a legal obligation, and we must communicate it to the competent administrative or judicial authorities.

Nevertheless, IDILIA has service providers who perform certain activities for which it may be necessary to access or process personal data, but in no case for their own purposes. These providers are:

• Technology service companies that provide us with data hosting, management, or maintenance services
• Marketing or advertising service companies.

IDILIA does not transfer data internationally outside the European Economic Area (EEA), and if the contracting of any of our services involves such transfers, IDILIA will ensure that they are carried out with the appropriate safeguards, in accordance with the GDPR, such as the signing of standard contractual clauses approved by the European Commission.  

7.- What security measures do we apply to protect your data?

The information received by IDILIA through the “websites” will be treated with the utmost confidentiality and discretion. To this end, we have adopted all technical and organizational measures within our reach to prevent loss, misuse, alteration, unauthorized access, and theft of personal data provided through our websites. In any case, it should be borne in mind that Internet security measures are not impenetrable. Therefore, we cannot guarantee that unlawful acts of third parties may occur outside the scope of IDILIA.

8.- What rights do I have and how can I exercise them?

As a user and holder of the personal data that IDILIA processes about you, you have the right to:

• Request access to the data we process and store about you.
• Request a correction regarding your personal data, in case it is inaccurate or incomplete.
• Request the suppression regarding your data, or part thereof, as well as unsubscribe from any commercial communication that you may receive from us.
• Request the limitation of treatment regarding your data, specifying which one(s), and in certain cases, provided for by regulations.
• Object to our processing of specific data under certain circumstances.
• Request the portability of all your data, in the cases provided by law.
• You also have the right not to be subject to automated decisions (made solely by machines) when they could affect you, according to the regulations.

You can exercise your rights by directing your request by postal mail to the Legal Department of IDILIA.in C/ 410-414 Lepanto, 08025, Barcelona. You can also contact our Data Protection Officer via email: dpo@idilia.es  

Your request must contain a detailed description of the data you want to access or your request. When we have doubts about your identity, we may request a copy of your ID card or similar as a means of authenticating your identity. In that case, unnecessary data from the document can be removed from the copy. The use of the information contained in the identification document will be strictly limited to verifying your identity and will not be retained for longer than necessary to fulfill that purpose.

You have the right to file a claim with the Spanish Data Protection Agency, if you believe that your rights have not been adequately addressed, through the electronic headquarters, available at the following link: Sede Electrónica - Agencia Española de Protección de Datos.

9.- Privacy Policy Updates

IDILIA reserves the right to modify the information contained in the Privacy Policy at any time, so we recommend that you review it periodically. The update date will be indicated at the top, indicating the latest version.