Privacy Policy

DATA CONTROLLER: The company “CAÑA NATURE, S.L.U.” (hereinafter, “CAÑA NATURE”), with Tax ID: B-19647981, and registered address at Avda. de Incar, Nº 33, CP: 18130, Escúzar, (Granada), contact email: info@cnature.es, hereby informs users of its Internet portal (hereinafter, “Users” and the “Portal”) about its personal data protection policy (hereinafter, “Personal Data”), so that Users may freely and voluntarily decide whether to provide Caña Nature with the Personal Data that may be requested or obtained from Users in connection with visiting the website, submitting a CV, subscribing to or signing up for any of our informational newsletters, Blog, requesting information about our product range — which includes gazpacho, salmorejo, guacamole, and grated tomato, among others, made from top-quality raw materials grown and harvested by our own farmers, and produced using high-pressure processing (HPP) technology, a cold process that ensures maximum food safety and a longer shelf life without the need for additives or preservatives — as well as other information about activities, presentations and events, Caña Nature’s social media profiles, and promotions organised through our website.

Caña Nature reserves the right to amend this privacy policy to adapt it to legislative or jurisprudential developments as well as industry practices. In such cases, Caña Nature will announce the changes on this page with reasonable advance notice before they take effect. Certain service offerings for the marketing and sale of fresh and natural food products — including gazpacho, salmorejo, guacamole, and grated tomato, among others — made from top-quality fruits and vegetables grown on the Tropical Coast of Granada and processed using high-pressure processing (HPP) technology, without additives or preservatives, distributed both through the Caña Nature online store and through conventional and similar distribution channels, may contain specific terms with particular provisions regarding privacy.

Caña Nature, as the Data Controller for the personal data of its USERS and other data subjects with whom it maintains a relationship, informs you that such data will be processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data, and the current LOPD-GDD 3/2018 of 5 December on the protection of personal data.

INFORMATION / DATA PROCESSED: Purely identifying data (first name and surname) and contact details where applicable (address, telephone number, and email address), data required for certain contracts and online order management, subscription to our corporate newsletter service, CVs received by email, data provided at events, data supplied through Caña Nature’s social media profiles, and activities and presentations of our food products managed by the company.

DATA CONTROLLER:

“CAÑA NATURE, S.L.U.”, Tax ID: B-19647981 Address: Avda. de Incar, Nº 33, CP: 18130, Escúzar, (Granada). Contact email: info@cnature.es Website: www.cnature.es Contact phone: (+34) 958 05 00 02 Data Protection Officer contact: dpo@cnature.es

INTENDED PROCESSING PURPOSES:

MAINTAINING THE RELATIONSHIP with customers or prospective customers, collaborators and suppliers, website users, employees, data processors, management and administration of the relationship with employees and external collaborators, registrations and terminations, management of the contractual relationship with collaborators and sponsors and the commercial relationship with suppliers, recruitment of staff for Caña Nature, candidates in selection processes, followers on Caña Nature’s social media, users registered on our website, participants in activities and events, including potential training activities managed or participated in by Caña Nature. In this regard, the operations planned for carrying out the processing are:

WHAT PERSONAL DATA WE PROCESS: When filling in our contact form, or through the registration options available on our website.

Depending on each case, you may provide, among others, the following personal data:

  • Your name and surname and contact details (address, phone numbers and email address), and a free-text field.
  • Other contact details and preferences based on the order or service requested, delivery address, and other information necessary for its correct management.
  • We collect your data if you contact us through the Site, or if you place any order or use any requested service.
  • When you visit our website, we will collect your data if you fill in any of our data/contact forms, information request forms, or newsletter subscription forms, present or future.
  • If personal data has been provided by users, it must be accurate, and Caña Nature must be notified of any changes, with the user being responsible in all cases for the accuracy and correctness of the data provided at any time.
  • The data subject who provides personal data to Caña Nature declares that they are of legal age and is fully responsible for such declaration.

Other processing activities:

SENDING COMMERCIAL ELECTRONIC COMMUNICATIONS by email, SMS, WhatsApp, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be sent by the CONTROLLER and will relate to requests for information about Caña Nature’s fresh and natural food products — including gazpacho, salmorejo, guacamole, grated tomato, and other catalogue items — news, promotions, activities, presentations and events, Caña Nature’s social media profiles, and promotions organised through our website. In this case, third parties will never have access to personal data.

ACTIONS REQUESTED BY THE USER: Processing requests for information or contracting of services and orders, or any request made by the user/customer through the Caña Nature website via any of the contact methods made available, as well as events and presentations organised by or with the participation of Caña Nature.

PROCESSING REGISTRATIONS FOR EVENTS AND PROMOTIONAL ACTIVITIES in which users wish to participate. In this case, images or videos of individual participants taken during such events — provided that their express and unequivocal consent has been obtained — may be published on the entity’s website, its social media channels, corporate publications and leaflets, notice boards, and any other analogous communication medium owned by the company, for the purpose of promoting such activities or events. In the case of promotional events, presentations, or similar activities, participants’ data (name, surname and age) may be published in the same media to publicise participation or results of any prizes or activities organised by the company. If this data processing is not expressly consented to, the data will only be shared internally among tournament participants so they can view the relevant standings, which is a necessary requirement for the proper running of the event (legitimate interest).

DATA STORED DURING YOUR VISIT: When you visit our website, our web servers generally store, among other data, information about the browser and operating system you use, the website from which you visit us, the pages you visit on our website, and the date of your visit. For security reasons — for example, to detect possible attacks on our website — the IP address assigned to you by your internet service provider is also stored for a period of seven days. With the exception of the IP address, personal data is only stored if you provide it to us, for example, in connection with a registration, management of ongoing assistance, a survey, user registration, or commercial promotion. Caña Nature uses your personal data for the technical administration of its websites, customer and online order management, shipment tracking, customer satisfaction surveys on our products, and marketing activities, solely to the extent necessary, and always informing the User and data owner in advance.

NEWSLETTER SUBSCRIPTION: When subscribing to any of our informational newsletters, present or future, as stated, by giving your consent to the use of your personal data for sending advertising or carrying out other marketing activities, your data will be stored and used on an ongoing basis for such purposes, including sending the aforementioned newsletters about news, launches and promotions of Caña Nature’s fresh and natural food products, as well as other information about activities, presentations and events, Caña Nature’s social media profiles, and promotions organised through our website, through communication channels such as email, postal mail, or any other channel authorised by you. We may use your data to create and keep your user profile up to date in order to send you personalised information about advertising actions. We may also use the data you provide us to analyse and improve the effectiveness of our website services, advertising, marketing, market research, and sales activities.

SUBMISSION OF CVs BY CANDIDATES: In the event of a CV being sent to Caña Nature’s email address or through the designated form at https://www.grupolacana.com/empleo/, the applicant authorises Caña Nature to analyse the documents they submit, all content directly accessible through search engines (Google), profiles maintained on professional social networks such as LinkedIn or similar, data obtained during access tests, and information disclosed during the job interview, with the aim of evaluating their candidacy and, where applicable, offering them a position. If the candidate is not selected, Caña Nature may retain their CV for inclusion in future recruitment processes, unless the candidate indicates otherwise.

EXISTENCE OF AN INTERNAL WHISTLEBLOWING CHANNEL: In accordance with Law 2/2023 of 20 February, regulating the protection of persons who report regulatory breaches and combating corruption, Grupo La Caña has established a whistleblowing channel for all its subsidiaries, available at: https://www.grupolacana.com/canal-de-denuncias/

IDENTIFICATION OF THE CONTROLLER: “GRUPO EMPRESARIAL LA CAÑA, S.L.” Tax ID: B19650696 (also “Grupo La Caña”), Ctra. Vieja de Carchuna, S/N – Puntalón, CP: 18600 – Motril (Granada). By signing this document, you guarantee that the data provided is truthful, accurate, complete, and up to date. Any changes to your data must be communicated as soon as possible. PURPOSE OF PROCESSING: Grupo La Caña will process the data collected in this form and any data generated as a result of the investigations carried out, with the sole purpose of processing and deciding on the admissibility of complaints received within the framework of the company’s crime prevention management model, analysing them, conducting proceedings, and taking the appropriate measures. The data required is the minimum necessary for the stated purpose; refusal or partial provision of data could mean the complaint cannot be accepted for processing*. LEGAL BASIS: Processing will be carried out on the basis of: (i) the public interest in crime prevention and the existence of applicable law: Law 2/2023 of 20 February, regulating the protection of persons who report regulatory breaches and combating corruption; (ii) the legitimate interest of GRUPO LA CAÑA in preventing irregularities and/or non-compliance with the provisions of its Protocol and in the overall management of human resources within GRUPO LA CAÑA; (iii) if you are an employee of GRUPO LA CAÑA, the entity’s authority to manage its workforce and, where applicable, to adopt appropriate disciplinary measures within the framework of the employment contract between both parties; (iv) the express consent of the reporting party upon accepting this Privacy Policy. DATA DISCLOSURES: None foreseen except those strictly necessary for the management, maintenance, and operation of the Whistleblowing Channel, for example, to the data processor contracted for the channel (LINK SOLUCIONES INFORMATICAS S.L., Tax ID: B-35794478). The recipients of the information are the EXECUTIVE COMMITTEE as the persons designated by the Company, and other persons or entities whose collaboration may be necessary in the context of an investigation or for auditing the operation of the Whistleblowing Channel, in accordance with the Internal Regulations of the Whistleblowing Channel, available to its users/interested parties. Furthermore, with the aim of carrying out the necessary investigative tasks, determining the responsibilities arising from the process, or implementing internal organisational policies within GRUPO LA CAÑA in connection with the reported facts, your personal data may be shared with the various subsidiaries that form part of the group and that may be connected to the facts under investigation. Depending on the facts reported, GRUPO LA CAÑA may also be required to disclose or communicate your personal data and the information you have provided to the State Security Forces and Corps, other Public Administration bodies with competence in investigating the reported facts, as well as to Courts of Justice and other jurisdictional bodies. Notwithstanding the above, in the event that a complaint proves to be false, your data may be communicated to the person or persons reported so that they may, if they deem it appropriate, initiate any legal actions available to them as a result of the false complaint, as well as to persons involved in judicial proceedings initiated as a result of the investigation. If the complainant chooses to remain anonymous, their identifying data will not be communicated to third parties during the management and processing of the complaint and subsequent proceedings. RETENTION PERIODS: The personal data you provide will be processed for the time strictly necessary to decide on whether to initiate an investigation into the reported facts and, where applicable, to conduct such investigation. If the investigation concludes with the archiving of proceedings, your data will be deleted. In any case, after THREE (3) MONTHS from the submission of the complaint, GRUPO LA CAÑA will delete your data, without prejudice to the possibility that it may continue to be processed, if necessary, to conclude the investigation and address any irregularities detected through, among other means, judicial, administrative, or employment measures. Information may also be retained, once the data has been anonymised, for the purpose of carrying out audits of the Whistleblowing Channel’s operation. EXERCISE OF GDPR RIGHTS: You may exercise your rights of access, rectification, restriction of processing, erasure, portability, and objection where applicable in accordance with the applicable personal data protection regulations, by submitting a dated and signed written request, indicating in the subject line: “GDPR Rights”, accompanied by a photocopy of your ID document where necessary for correct identification (and, where applicable, of the person representing you) and an address for notification purposes, sent to GRUPO LA CAÑA’s registered address at: Ctra. Vieja de Carchuna, S/N – Puntalón, CP: 18600 – Motril (Granada), enclosing a photocopy of your national ID or equivalent document where strictly necessary for correct identification, or by email to: dpo@cnature.es. If you believe your right to personal data protection has been violated, you may file a complaint with the AEPD (www.aepd.es). Additional privacy information is available on our website: www.grupolacana.com. In this regard, the exercise of the reported party’s rights is guaranteed, without this implying disclosure of the complainant’s identity to that party. Grupo La Caña has an officially designated Data Protection Officer registered with the AEPD, whose contact details are: dpo@cnature.es, available to any interested data subject.

DATA RETENTION CRITERIA: The data provided will generally be retained for as long as there is a mutual interest in maintaining the purpose of the processing, and when it is no longer necessary for that purpose, it will be deleted with appropriate security measures to ensure pseudonymisation or complete destruction of the data.

Given this general rule, the following possible variations apply:

(i) Disaggregated data: retained without a deletion deadline. (ii) Data of users, companies, suppliers, etc. — Caña Nature: retention period of 4 years (Articles 66 et seq. of the General Tax Law); retention period of 6 years (Article 30 of the Commercial Code regarding accounting books and invoices). (iii) Data provided in connection with newsletter subscription: from the moment the User gives consent until it is withdrawn. (iv) Employment or social security-related documentation: 4 years — Article 21 of Royal Legislative Decree 5/2000 of 4 August, approving the consolidated text of the Law on Infringements and Sanctions in the Social Order. (v) Data provided by candidates through the submission of their CV: the CV may be retained for a maximum of two years for future recruitment processes, unless the candidate indicates otherwise. (vi) Images captured by CCTV systems installed, where applicable, at premises owned by Caña Nature, for security, access control, and internal production monitoring purposes: 30 days, in accordance with AEPD guidance.

DISCLOSURE OF DATA: Your personal data may be shared with:

  • Companies, entities, and other organisations contracted to provide services, such as: hosting, cloud, marketing services, collaborators, related companies, market analysis, and information society services.
  • Partner/sponsor companies with which Caña Nature has reached a collaboration or sponsorship agreement.
  • Companies or other organisations that you have requested or agreed that we may share your personal data with.
  • For certain internal company activities/services that must be outsourced to third parties providing specific services. These subcontractors may be external providers both within and outside the EU. Caña Nature guarantees that all subcontractors comply with the obligations and requirements assumed by Caña Nature in its Data Processing Agreement; specifically, that their level of data protection meets the standard required by the relevant data protection laws. If a jurisdiction is outside the EU and is not on the European Commission’s approved list of jurisdictions with satisfactory data protection levels under the GDPR, a specific agreement is established between Caña Nature and the subcontractor to ensure that all personal data will be maintained in accordance with the requirements of current EU data protection laws.
  • Existence of a Business Group: All visitors, users, customers, candidates, and other potentially affected parties who share data with “CAÑA NATURE, S.L.U.” are informed that the said company forms part of a business group whose holding company is GRUPO EMPRESARIAL LA CAÑA, S.L. (Tax ID: B-19650696), a company that acts as the group’s parent company and provides centralised management, administration, human resources, technology, and similar services to its subsidiaries. In light of the above, and under the legitimate interest recognised in Article 6.1(f) of the GDPR, personal data provided through any means may be processed and shared among group companies for the purposes arising from such shared and centralised services, always within the limits of what is strictly necessary and with the safeguards set out in applicable data protection regulations.
  • Professional service providers, such as transport operators, logistics companies, couriers, training centres, lawyers, solicitors, arbitrators, notaries, registrars, or other similar professionals involved in Caña Nature’s own operations.
  • Public bodies, courts, regulators, and other administrative authorities, where we consider it necessary to comply with a legal or regulatory obligation, or otherwise to protect ourselves from claims against us or third parties, or to protect the safety of individuals, as well as to prevent or otherwise combat fraud, or for security or protection reasons.
  • Any third party that purchases, or to whom we transfer, all or a substantial part of our assets and business. In the event of such a sale or transfer, we will make all reasonable efforts to ensure that the entity to which we transfer your personal data uses it in accordance with this Privacy Policy.

In such cases, we will ensure that your data is used for appropriate purposes in accordance with this Privacy Policy, and the corresponding data processing contracts or clauses (Standard Contractual Clauses — SCCs) will be signed, with the same or similar security measures as those applied by Caña Nature.

Data will be processed on the legal basis of the express consent of the person providing it. Such consent may be withdrawn at any time, although this will not affect the lawfulness of any processing carried out prior to withdrawal. Providing data is voluntary; however, failure to do so will mean it cannot be processed for the stated purposes. If third-party data is provided through this website, the person doing so assumes responsibility for having previously obtained the relevant consent, informing them of all provisions set out in Article 14 of the General Data Protection Regulation.

INTERNATIONAL DATA TRANSFERS:

On 10 July 2023, the European Commission adopted a new adequacy decision to enable international transfers of personal data between entities in the European Union (EU) and the United States (US) under the EU-U.S. Data Privacy Framework. Following the judgment of the Court of Justice of the European Union (CJEU) of 16 July 2020, known as the Schrems II ruling, international transfers of personal data to the US were called into question due to concerns identified by the CJEU relating to US surveillance practices and the lack of mechanisms for European citizens to challenge interference with their rights.

With this adequacy decision, the European Commission recognises that the US provides a level of protection equivalent to that offered by the EU, but only when international transfers are made with entities certified under the new privacy framework, the EU-U.S. Data Privacy Framework.

Therefore, AND IN ACCORDANCE WITH THE ABOVE, personal data will flow securely from the European Union to US companies participating in the Framework, without the need to establish additional data protection safeguards.

Other international transfers to the US: Both the safeguards adopted and the legislative changes that have taken place in the US will facilitate the use of guarantees such as standard contractual clauses or binding corporate rules. This does not exclude the ongoing need to carry out a Transfer Impact Assessment for any transfer made outside the EU-US Data Privacy Framework. The adequacy decision ensures that data transfers between the EU and the US are possible through a stable and reliable agreement that protects individuals and provides legal certainty for businesses.

LEGAL BASIS FOR THE PROCESSING DESCRIBED:

As a general rule, prior to processing personal data, Caña Nature obtains the express and unequivocal consent of the data subject through the incorporation of informed consent clauses in the various information collection systems, and on the basis of a legitimate interest of the User.

Where the data subject’s consent is not required, the legal basis on which Caña Nature relies is the existence of a Request, PURCHASE OR SUPPLY CONTRACT for food products, customer/company registration, INFORMATION REQUESTS, COMMERCIAL AGREEMENTS WITH PARTNER COMPANIES, collaboration agreements, or Caña Nature’s data collection form.

Notwithstanding the above, the legal bases are as follows:

  • Where processing is necessary for the performance of a contract to which the data subject is party, or where the data is necessary in the context of a pre-contractual relationship.
  • Where the use of your personal data is necessary to satisfy our legitimate interests or those of the companies with which we have shared your personal data.
  • Where the processing of data is necessary to comply with the legislation/regulations governing the legal obligations of the sector, the GDPR and LOPD-GDD regulations and similar applicable legislation in force at any given time, including those relating to the placing on the market of Caña Nature’s own or third-party services, consumer and user protection, retail trade regulation, and other applicable regulations.
  • In accordance with the applicable Information Society Services regulations (LSSI-CE), if a prior demonstrable relationship exists, data may be used to send electronic commercial communications relating to that specific activity, unless the data subject objects in the manner provided for this purpose.
  • Where we consider it necessary to process your personal data to comply with a legal or regulatory obligation, or a vital interest.
  • Where we have your consent, for example, to collect technical information such as cookie data and similar technologies as described in: “Information on the Use of Cookies”.
  • Acceptance of a contractual relationship within the relevant social network environment, and in accordance with its Privacy Policies in each case, when you visit any of our social media profiles (Facebook, LinkedIn, “X”, YouTube).

RECOGNISED RIGHTS:

These are your rights as a data subject:

Right of access: You have the right to obtain confirmation from the company as to whether or not personal data concerning you is being processed. Caña Nature will, where applicable, provide a copy of the personal data being processed.

Right to rectification: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you will have the right to have incomplete personal data completed, including by means of a supplementary statement.

Right to erasure: You have the right to obtain without undue delay the deletion of personal data concerning you. Caña Nature will be obliged to delete such personal data without undue delay where one of the following circumstances applies:

  • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • You withdraw the consent on which the processing is based and there is no other legal basis for the processing;
  • You object to the processing and there are no overriding legitimate grounds for the processing;
  • Your data has been processed unlawfully;
  • Your data must be deleted to comply with a legal obligation;
  • Or if your personal data has been collected in relation to the offer of information society services to children (under 16 years of age).

Right to restriction of processing: Where the processing of your personal data has been restricted at your request, such data may only be processed, with the exception of storage, with your consent or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest. You have the right to obtain restriction of processing of your personal data where one of the following conditions applies:

  • When you contest the accuracy of the personal data, for a period enabling Caña Nature to verify its accuracy;
  • The processing is unlawful and you object to the deletion of the personal data and request the restriction of its use instead;
  • Caña Nature no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise, or defence of legal claims;
  • When you have objected to the processing, pending verification of whether Caña Nature’s legitimate grounds override those of the data subject.

Right to data portability: You have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format, and to transmit it to another controller without hindrance from Caña Nature, where:

  • The processing is based on your consent, and
  • The processing is carried out by automated means.

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on public interests or on the legitimate interests of the data controller. Where personal data is processed for direct marketing purposes, you will have the right to object at any time to the processing of personal data concerning you. Where you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.

We remind you that whenever the legal basis for the processing of your data is your consent, you have the right to withdraw that consent at any time and in all circumstances, and as easily as you gave it.

You also have the right to lodge a complaint with the relevant supervisory authority, generally the Spanish Data Protection Agency. For more information, you may visit its website at https://www.aepd.es

Finally, you have the right not to be subject to a decision by Caña Nature based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

CONTACT DETAILS FOR EXERCISING YOUR RIGHTS: Caña Nature, in application of Regulation (EU) 2016/679 of 27 April 2016 (GDPR), and the recent LOPD-GDD 3/2018 of 5 December, has appointed a designated internal responsible person and a Data Protection Officer (DPO) for the management of Data Protection, whose contact details are set out below:

CONTACT DETAILS FOR EXERCISING YOUR RIGHTS:

By post: You may submit your request by sending it to the following postal address:

Address: Avda. de Incar, Nº 33, CP: 18130, Escúzar, (Granada).

Online:

Email address: You may submit your request to: dpo@cnature.es

In both cases, you must:

  • Provide sufficient data and information to process the request. For this purpose, you may use the form templates made available by the Spanish Data Protection Agency at https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos
  • Sign the form by hand or, if you have a recognised digital certificate, sign it electronically.
  • If acting on behalf of a third party, you must provide a document accrediting your representation of the data subject.
  • Send the form and identity documents by any of the means mentioned above.

Note: In the event of reasonable doubt as to the identity of the applicant, the data subject, and/or their representative, a copy of their national ID, Passport, NIE, or equivalent identifying document may be required.

ADDITIONAL INFORMATION ON YOUR REQUEST:

Caña Nature will assess whether the request complies with the law. It will communicate the decision taken to the applicant and act accordingly: if the request is granted, it will take the appropriate measures in accordance with the right exercised; if it is rejected, it will indicate the legally provided appeal mechanisms. If requests are manifestly unfounded or excessive (e.g. repetitive in nature), Caña Nature may: (i) charge a fee proportionate to the administrative costs incurred; (ii) refuse to act.

If a user/data subject considers that there is a problem with the way Caña Nature is processing their data, they may address their complaints to Caña Nature at the address indicated above, or through the Spanish Supervisory Authority, in this case, the AEPD: https://www.aepd.es

MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED:

The data collected through any of the contact forms available on this Website, or even for the provision of information, or data provided by Users in connection with their participation in activities/events organised by Caña Nature, will be incorporated, depending on their purpose, into the Internal Record of Processing Activities (Article 30 of Regulation (EU) 2016/679 of 27 April 2016). The Record of Processing Activities is available to the Supervisory Authority.

Users, by ticking the relevant boxes and entering data in the various fields marked with an asterisk (*) in the contact form or presented in download/contracting forms, expressly, freely, and unequivocally accept that their data is necessary for Caña Nature to process their request, while the inclusion of data in the remaining fields is voluntary. The User guarantees that the personal data provided is accurate and takes responsibility for notifying any changes to such data.

Caña Nature expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances, and that, whenever any future transfer is planned, prior express, informed, and unequivocal consent will be sought from Users, informing them of the details of the recipient and the purpose of the transfer. All data requested through the website is mandatory, as it is necessary for the provision of an optimal service to the User. If all data is not provided, it cannot be guaranteed that the information and services provided will be fully suited to their needs.

SECURITY MEASURES:

In accordance with the provisions of current personal data protection regulations, and in particular Regulation (EU) 2016/679 of 27 April 2016 and LOPD-GDD 3/2018, for the processing of personal data under its responsibility, and manifestly in line with the principles described in Article 5 of the GDPR, personal data is processed lawfully, fairly, and transparently in relation to the data subject, and is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.

In any case, Caña Nature has implemented sufficient mechanisms to:

  • Ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
  • Restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.
  • Regularly verify, evaluate, and assess the effectiveness of the technical and organisational measures implemented to ensure the security of processing.
  • Pseudonymise and encrypt personal data where applicable.

Caña Nature guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by GDPR 679/2016 and LOPD-GDD 3/2018 in order to protect the rights and freedoms of Users, and has communicated adequate information to enable them to exercise those rights. Caña Nature has put in place all technical means and measures within its power to prevent the loss, misuse, alteration, unauthorised access, and theft of Personal Data provided by the data subject to Caña Nature. Nonetheless, the User must be aware that security measures on the Internet are not impenetrable.

Personal data incorporated into the Internal Record of Processing Activities will be processed with the utmost confidentiality and security. The Controller may send commercial information relating to NEWS ABOUT OUR FOOD PRODUCTS, NEW DEVELOPMENTS, PRESENTATIONS, ACTIVITIES, AND EVENTS OF Caña Nature. In this case, the sender undertakes to indicate its advertising purpose when sending communications and to provide a simple, clear, and free system for cases in which you wish to stop receiving them.

Caña Nature’s services contained on the website are intended exclusively for adults. In the event that Caña Nature offers any promotional activity, event, competition, or similar where the collection of Personal Data of minors may occur, Caña Nature will always request parental consent for minors to access them and for their Personal Data to be subject to automated processing as provided for in this Data Protection Policy notice.

As previously indicated, the collection and automated processing of Personal Data is intended for the maintenance of the contractual relationship established with Caña Nature where applicable, the management and administration of the marketing and sale of Caña Nature’s fresh and natural food products, the processing of online orders and their tracking, the management of distributors and sales channels, and the sending, by traditional and electronic means, of operational and commercial information about products marketed by Caña Nature.

USE OF PUBLIC PROFILES ON SOCIAL MEDIA:

Caña Nature has a profile on the main Internet social media platforms and is in all cases recognised as the data controller for the data of its followers, fans, subscribers, commenters, and other user profiles (hereinafter, followers). The processing that Caña Nature will carry out with such data will be, at most, what the social network allows for corporate profiles.

Caña Nature may inform its followers through any means permitted by the social network about its news, activities, and events. Caña Nature will not under any circumstances extract data from social media unless the user’s specific and express consent has been obtained. Where, due to the nature of social media, the effective exercise of the follower’s rights depends on a modification to their personal profile, Caña Nature will assist and advise them to that end to the best of its ability.

What purposes will we use your personal data for?

  • Responding to your queries, requests, or petitions.
  • Managing the requested service and processing your order.
  • Maintaining a relationship with you and within a community of followers.

Social Media: CAÑA NATURE’S SOCIAL MEDIA PROFILES:

What is the legal basis for processing your data?

  • For more information about Facebook, click here.
  • For more information about YouTube, click here.
  • For more information about “X”, click here.
  • For more information about LinkedIn, click here.
  • For more information about Instagram, click here.
  • For more information about TikTok, click here.

Acceptance of a contractual relationship within the relevant social network environment, and in accordance with its Privacy Policies:

Caña Nature is in all cases recognised as the data controller for the data of its followers, fans, subscribers, commenters, and other user profiles (hereinafter, followers). The processing that Caña Nature will carry out with such data will be, at most, what the social network allows for corporate profiles. Accordingly, Caña Nature may inform its followers through any means permitted by the social network about its news and activities. Caña Nature will not under any circumstances extract data from social media unless the user’s specific and express consent has been obtained. Where, due to the nature of social media, the effective exercise of the follower’s rights depends on a modification to their personal profile, Caña Nature will assist and advise them to that end to the best of its ability.

RIGHT TO INFORMATION.

Upon a corresponding request, Caña Nature will immediately inform you in writing, in accordance with applicable legislation, whether we hold any personal data about you, and what that data is. If you are registered as a user, we offer you the possibility of personally consulting your data and, where applicable, proceeding to its deletion, modification, and/or update.

DESCRIPTION OF MEASURES ADOPTED BY CAÑA NATURE UNDER THE GDPR:

Caña Nature’s Users/customers and suppliers are hereby informed that, in accordance with the GDPR and LOPD-GDD regulations applicable to the company’s activities, the following measures have been adopted to achieve an optimal level of compliance:

  • Maintaining a record of processing activities in accordance with Article 30 of the GDPR.
  • Identifying the legal bases for data processing in accordance with Articles 6 and 9 of the GDPR.
  • Auditing information input channels and internal forms/documents and informing data subjects about the processing of their data in accordance with Articles 13 and 14 of the GDPR.
  • Attending to data subjects’ rights in relation to: access, rectification and erasure, restriction of processing, data portability (Article 20 of the GDPR), objection, and automated decision-making, by establishing a direct contact channel: dpo@cnature.es.
  • Auditing and requesting compliance guarantees from the company’s data processors, and signing a data processing agreement in accordance with Article 28 of the GDPR. Caña Nature facilitates this process by making the following available through our DPO: 1) a compliance guarantee document and details of the measures adopted; 2) a template data access agreement for Caña Nature.
  • Carrying out a risk analysis and, where applicable, a data protection impact assessment. To assist with meeting these obligations, please refer to the AEPD website: https://www.aepd.es/es/prensa-y-comunicacion/notas-de-prensa/la-aepd-publica-un-modelo-de-informe-para-ayudar-las-empresas
  • Caña Nature, as a responsible company committed to regulatory compliance, recommends that its customers, users, and interested parties subscribe to the alert bulletins of INCIBE (www.incibe.es), OSI (www.osi.es), and CERT (www.incibe-cert.es).
  • Having an internal protocol in place for notifying security breaches; reporting personal data security breaches to data protection authorities (Article 33 of the GDPR) and to the individuals whose data has been compromised (Article 34 of the GDPR). To this end, in the event of any incident that poses a risk to the rights and freedoms of those affected, Caña Nature will notify the CUSTOMER as soon as possible and will assist in making such notifications.
  • The company has officially designated a Data Protection Officer, registered with the AEPD (www.aepd.es) in the designated register, in accordance with Articles 37, 38, and 39 of the GDPR. Caña Nature makes available to CUSTOMERS/users and interested parties the following contact email for the designated DPO for matters related to data protection/exercise of rights: dpo@cnature.es.
  • Caña Nature, in compliance with current regulations, also informs you of your right to lodge a complaint/request further information with the supervisory authority (www.aepd.es).

Related regulations:

If you wish to obtain more information about the regulations that protect you and set out your rights, we provide the following regulatory texts that have informed this privacy policy and are relevant to you:

  • Regulation (EU) 2016/679
  • Organic Law 3/2018 of 28 December on the protection of personal data and the guarantee of digital rights
  • Law 34/2002 of 11 July on information society services and electronic commerce

CONTACT: If you require any clarification regarding this Privacy Policy, wish to raise a question or complaint, or wish to exercise your rights, please write to our internal data protection officer at the details shown below, indicating in the subject line: “Data Protection”

Address: Avda. de Incar, Nº 33, CP: 18130, Escúzar, (Granada) Contact email: dpo@cnature.es Contact phone: (+34) 958 05 00 02

 

Privacy Policy last updated and revised in Granada on May 19, 2026.

Scroll to Top