PRIVACY POLICY

When you access the Contact Us form and provide personal information, the data collected through this form will be processed in accordance with the following data protection policy:

Data Controller: GADISA RETAIL or any of the companies within the GADISA RETAIL group to which the message is addressed (Atlántica Saga Ourense, S.L.U., Ecomás Supermercados, S.L., Ezequiel Arribas, S.A.U., Hipermercados y Economatos, S.A.U., Lucus Market, S.L.U., Mercartabria, S.L.U., Pescarmar, S.L.U., Pontevicus, S.L.U.) to fulfil the purpose described.

Purpose: To handle your inquiry, suggestion and/or complaint with the aim of improving customer service. Any client or user may contact companies within the GADISA RETAIL group.

Data Category:

Personal data: name, surname, e-mail address.

Contact details: telephone number.

Legal Basis for Processing: Consent of the data subject, which may be withdrawn at any time without any retroactive effects.

Retention Period: Personal data collected via the Contact Us form will be kept for the time necessary to handle your inquiry, suggestion and/or complaint. Once this purpose has been fulfilled, the data will be destroyed.

Third-Party Disclosure: The data collected will not be shared with third parties, except with companies within the GADISA RETAIL group, in order to fulfil the purpose described.

If you access the Employment, section and register as a job applicant, the data collected through this means will be processed in accordance with the following data protection policy:

Data Controller: For the purposes of the data collected in this section, we inform you that GADISA will be considered the Data Controller.

Purpose: To participate in recruitment processes carried out in the company itself, in any of the companies of the GADISA RETAIL group (Gadisa Retail, S.L.U., Atlántica Saga Ourense, S.L.U., Ecomás Supermercados, S.L., Ezequiel Arribas, S.A.U., Hipermercados y Economatos, S.A.U., Lucus Market, S.L.U., Mercartabria, S.L.U., Pescarmar, S.L.U., Pontevicus, S.L.U.) or in Bienes Inmuebles Corporativos Atlánticos 2088, S.L.U.

The personal data of job applicants will be shared with companies within the group for the purpose described and to facilitate their participation in recruitment processes carried out in those companies.

Data Category: Personal data: name, surname, e-mail address, picture, language and identification document (ID card, passport number, social security number, etc.) or any other details you may provide in your curriculum vitae such as date of birth, gender, etc. Contact details: address, telephone number or professional experience. Academic and professional history.

Legal Basis for Processing: Consent of the data subject.

Retention Period: Personal data will be processed for as long as the applicant does not request to opt out and keeps their application up to date. User accounts that remain inactive for a period of 2 years will be removed from our systems.

Third-Party Disclosure: Job applicant data will be shared with companies within the group where recruitment processes take place.

If you complete the Collaboration Request form to request GADISA RETAIL’s participation in campaigns or events organised in collaboration with other entities, we inform you that the data collected by this means will be processed in accordance with the following data protection policy:

Data Controller: For the purposes of the data collected in this section, GADISA RETAIL will be considered the Data Controller.

Purpose: To organise and manage campaigns or events in which the GADISA RETAIL business group collaborates with other organisations.

Data Category: Personal data: name, surname, identification document (ID card), e-mail address, language and/or any other details you may provide in your curriculum vitae such as date of birth, gender, etc. Contact details: address, telephone number or organisation you represent. Other data: event details (name, date, place, audience type, etc.).

Legal Basis for Processing: Consent of the data subject.

Retention Period: Personal data will be processed during the management of the event and will be retained for a period of 5 years from the date of the events conclusion.

Third-Party Disclosure: Data may be shared with companies within the GADISA RETAIL group (Gadisa Retail, S.L.U., Atlántica Saga Ourense, S.L.U., Ecomás Supermercados, S.L., Ezequiel Arribas, S.A.U., Hipermercados y Economatos, S.A.U., Lucus Market, S.L.U., Mercartabria, S.L.U., Pescarmar, S.L.U., Pontevicus, S.L.U.) if necessary and to fulfil the purpose described.

In cases where personal data is provided through the Ethical Channel or reporting channel which the GADISA RETAIL group makes available to its employees and other stakeholders, GADISA RETAIL is committed to preserving the confidentiality of any complaints or reports received.

The data collected through this means will be processed in accordance with the following data protection policy:

Data Controller: GADISA RETAIL S.L.U., acting also as Data Processor for the companies of the GADISA RETAIL group (Atlántica Saga Ourense, S.L.U., Ecomás Supermercados, S.L., Ezequiel Arribas, S.A.U., Hipermercados y Economatos, S.A.U., Lucus Market, S.L.U., Mercartabria, S.L.U., Pescarmar, S.L.U., Pontevicus, S.L.U.).

Purpose: To investigate reported facts and take appropriate disciplinary measures, as well as to initiate and process legal proceedings where necessary to prevent possible retaliatory actions.

Legal Basis for Processing: The legal basis for the processing of such data is compliance with the obligations set out in Spanish Law 2/2023 of 20 February on the protection of reporting persons.

Retention Period: Data will be stored for a maximum period of 3 months, unless an extended retention period is necessary for the following reasons:

(i) to determine whether an investigation should be initiated,

(ii) for the necessary duration of an investigation,

(iii) throughout the course of any relevant legal actions.

Finally, and after all of the above, the data collected will be retained to comply with any applicable legal obligations and to address potential claims and liabilities. These records will be securely blocked and, in accordance with legally established time limits, may be made available to law enforcement authorities, courts and tribunals, as well as other relevant public authorities, for a maximum legal period of 10 years.

Third-Party Disclosure: The data collected will not be shared with third parties, except where necessary for the investigation and processing of a complaint. In such cases, data may be communicated to judicial authorities and law enforcement agencies.