Privacy policy

COSTA BRAVA MEDITERRANEAN FOODS USA, LLC is committed to protecting the privacy of users accessing this website and/or any of its services. The use of the web and / or any of the services offered by COSTA BRAVA MEDITERRANEAN FOODS USA, LLC implies acceptance by the user of the provisions contained in this Privacy Policy and that your personal data will be treated as stipulated therein. Please note that although there may be links from our website to other websites or social networks, this Privacy Policy does not apply to the websites of other companies or organizations to which the web is redirected. COSTA BRAVA MEDITERRANEAN FOODS USA, LLC   does not control the content of third-party websites, nor does it accept any responsibility for the content or privacy policies of these websites.

Basic information on data processing Regulation (EU) 2016/679 and the California Privacy Act (CCPA).

COSTA BRAVA MEDITERRANEAN FOODS USA, LLC
Responsible party	EIN: 88-2675214 Address: 3601 La Grange Pkwy. 23168 Toano, VA Email: dadesprotec@costabravafoods.com
Purpose of treatment	To offer, provide and invoice our services as manufacturers of fresh meat, serrano ham and cured sausages.
Legitimation	§ Consent obtained from the person concerned. § Execution of the service contract.
Addressees	The data will not be communicated to third parties, unless required by law or necessary to fulfill the purpose of the processing.
Rights of persons	The interested parties are entitled to exercise their rights of access, rectification, limitation of processing, deletion, portability, and opposition, by sending their request to our address.
Data retention period	As long as the business relationship is maintained or for the years necessary to comply with legal obligations.
Reclamation	Interested parties may contact the AEPD to file the claim they deem appropriate.
Additional information	Additional detailed information can be found below in the “Privacy Questions”.

Privacy Questions

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the California Privacy Act (CCPA) we provide you with the following information regarding the processing of your personal data:

Who is responsible for processing your data?

Identity: COSTA BRAVA MEDITERRANEAN FOODS USA, LLC.

EIN: 88-2675214

Address: 3601 Lagrange Pkwy, Toano (Virginia) 23168

Tel.: 800.710.4034

Email: dadesprotec@costabravafoods.com

For what purpose do we process your personal data?

• We process the information provided to us to provide and invoice our services as a manufacturer of fresh meat, cured ham and cured sausages.
• If you give us your consent, we may also process your data to send you information about our activities, products, or services.
• When accessing our facilities your image may be recorded by video surveillance cameras for security control purposes.
• If you send us a CV, we will process the data to manage the CV database for recruitment purposes.

How long will we keep your data?

The personal data provided will be kept for as long as you are a user of our services or wish to receive information, and then for the periods established to comply with our legal obligations.

Images captured by the video surveillance system will be kept for one month.

In the case of resumes, the data will be kept for one year.

What is the legitimacy for the processing of your data?

The legitimacy to treat them is found in the execution of the service contract and in the consents, you give us.

As for the capture of images by the video surveillance system, the legitimacy is given by the legitimate interest of preserving the safety of persons and property.

To whom will your data be communicated?

The data will not be communicated to third parties, unless required by law or necessary to fulfill the purpose of the processing.

What are your rights when you provide us with your data?

In accordance with the GDPR,

• Any person has the right to obtain confirmation as to whether we are processing their personal data.
• Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• In certain circumstances, the interested parties may request the limitation of the processing of their data, in this case we will only keep them for the exercise or defense of claims.
• Also, in certain circumstances and for reasons related to their situation, data subjects may object to the processing of their data. In this case, we will stop processing the data, except for compelling legitimate reasons or for the exercise or defense of possible claims.
• Data subjects also have the right to data portability.
• Finally, data subjects have the right to lodge a complaint with the competent supervisory authority.

Also, under the CCPA, you have the following rights:

• Right to know what personal information we collect, use, disclose and sell.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information.
• The right not to be discriminated against for exercising your privacy rights.

How can you exercise your rights?

By sending a written request, attaching a copy of a document that identifies you, to our physical or e-mail address.

How did we obtain your data?

The personal data that we process comes from the interested party. The interested party guarantees that the personal data provided are true and is responsible for communicating any changes to them. The data marked with an asterisk are mandatory to provide the requested service.

What data do we process?

The categories of data that we may process in the provision of our services are:

• Identifying data.
• Postal or electronic addresses.

In the case of the video vigilance system:

• Image.

In the case of resumes:

• Personal characteristics.
• Academic and professional.

The data is limited since we only process the data necessary for the provision of our services and the management of our activity.

What security measures do we implement?

We apply the security measures established in Article 32 of the GDPR, therefore, we have adopted the necessary security measures to ensure a level of security appropriate to the risk of data processing we perform, with mechanisms that allow us to ensure the confidentiality, integrity, availability and ongoing resilience of systems and processing services. Some of these measures include:

• Information of the data processing policies to the personnel.
• Periodic backups.
• Data access control.
• Regular verification, evaluation, and assessment processes.