In accordance with current regulations on personal data protection, we provide you with the following information:

1. INFORMATION FOR THE INTERESTED PARTY AND/OR USER

COVEGAN COMERCIAL VETERINARIA Y GANADERA, S.L.U. makes this privacy policy available to you to inform you, in detail, about how the personal data that you, as the interested party and/or user, provide or have provided, through any means (website, email, telephone, in person, online or paper forms, etc.), are or will be processed.

COVEGAN COMERCIAL VETERINARIA Y GANADERA, S.L.U. has adopted all necessary technical and organizational measures to guarantee the confidentiality, integrity, availability, and resilience of the personal data it stores.

Responsibility of the data subject and/or user
By providing your data, you, as the data subject and/or user (hereinafter the Data Subject), guarantee that you are over 18 years of age and that the data provided to COVEGAN COMERCIAL VETERINARIA Y GANADERA, S.L.U. is true, accurate, complete, and up-to-date. For these purposes, the Data Subject confirms that they are responsible for the veracity of the data provided and that they will keep said information appropriately updated so that it reflects their actual situation. They are responsible for any false or inaccurate data they may provide, as well as for any direct or indirect damages that may arise.

2. DATA CONTROLLER

Identity: COVEGAN COMERCIAL VETERINARIA Y GANADERA, S.L.U.
Tax ID No.: B31522329
Postal address: PO Box 320 – 31500 Tudela (Navarra). Email: lopd@covegan.es Telephone: 948412488
Email: lopd@covegan.es

3. PURPOSES, RETENTION PERIODS, AND LEGAL BASIS FOR PROCESSING

COVEGAN COMERCIAL VETERINARIA Y GANADERA, S.L.U., as the Data Controller of the Data Subject’s personal data, as well as any data that may be provided in the future, informs you that these data will be processed in accordance with current regulations on personal data protection. Therefore, the following information is provided regarding each of the processing operations carried out by COVEGAN COMERCIAL VETERINARIA Y GANADERA, S.L.U.:

CONTACT / QUERIES

Purpose of processing: to respond to and follow up on queries, requests for information, suggestions, and complaints, as well as to maintain contact with those who have expressed interest in the company and its users. products or services.
Data retention criteria: Data will be retained for the time necessary to process and respond to the query.
Legal basis for data processing: GDPR: 6.1.f) The legal basis for data processing is based on the Data Controller’s legitimate interest in addressing and responding to communications or requests received.
COMMENTS

Purpose of processing: To moderate and publish opinions and/or comments on a post on the website. The only personal data published regarding the comment will be the name.
Data retention criteria: Data will be retained in the system indefinitely unless the data subject requests its deletion.
Legal basis for data processing: GDPR: 6.1.a) The legal basis for data processing is the consent provided by the data subject at the time of posting the comment/opinion.
USER REGISTRATION

Purpose of processing: User management and to manage and enable the use of the various services offered on the website and/or through the Data Controller’s App.
Data retention criteria: Data will be kept in the system indefinitely as long as the data subject does not request its deletion.
Legal basis for data processing: GDPR: 6.1.a) The legal basis for data processing is the consent provided by the Data Subject at the time of providing their data.
NEWSLETTER SUBSCRIPTION

Purpose of processing: To manage the sending of newsletters about the Data Controller, its products, and services.
Data retention criteria: Data will be kept in the system indefinitely as long as the data subject does not request its deletion.
Legitimation for data processing: GDPR: 6.1.a) The legal basis for data processing is the consent provided by the Data Subject when subscribing to the newsletter.
PROFORMA INVOICES / ESTIMATES / POTENTIAL CLIENTS

Purpose of processing: The preparation and delivery of proforma invoices and/or estimates requested by Data Subjects, as well as the ability to follow up on them by telephone, electronically, or in person.
Also to establish contact with individuals who provide services to a legal entity (company, organization, etc.), as well as with other companies.

Individuals and professionals, in order to establish or maintain business-to-business (B2B) relationships with them.
Data retention criteria: Data will be retained as long as there is a mutual interest in doing so, or the data subject requests its deletion.
Legitimate grounds for data processing: Data processing is necessary for the implementation of pre-contractual measures at the request of the Data Subject (GDPR: 6.1.b), as well as for the satisfaction of the Data Controller’s Legitimate Interest in preparing and monitoring the quotes requested by the data subject (GDPR: 6.1.f).
CLIENTS

Purpose of processing: Customer management, maintaining contractual and/or commercial relationships with them, managing the contracting of products and/or services, as well as for the administrative (invoicing, collections, etc.), accounting, and tax management of the company, and for compliance with the legal obligations that this entails. Also to establish contact with individuals who provide services to a legal entity (company, organization, etc.), as well as with individual entrepreneurs and independent professionals, in order to establish or maintain business-to-business (B2B) relationships with them.
Data retention criteria: Data will be retained as long as contractual and/or commercial relationships are maintained between both parties and its deletion is not requested, and if deletion is requested, for the period provided for by current regulations (tax, commercial, etc.) regarding the statute of limitations on liability.
Legal basis for data processing: GDPR: 6.1.b) The legal basis for data processing is the execution and maintenance of contractual and/or commercial relationships between both parties, as well as compliance with the legal obligations (tax, commercial, etc.) that this entails.
The processing of professional contact data for business relationships is legitimized by the Data Controller’s Legitimate Interest to be able to contact, establish, and/or maintain business relationships with the legal entity for which the Data Subject provides services, as well as with individual entrepreneurs and independent professionals (GDPR: 6.1.f and LOPDGDD: 19).
SENDING COMMERCIAL COMMUNICATIONS

Purpose of processing: to send commercial information by any means, whether postal or electronic, about products and/or services related to the marketing of livestock and veterinary products, and other information from the Data Controller that may be of interest to the Data Subject (events, activities, etc.).
Data retention criteria: Data will be kept in the system indefinitely as long as the Data Subject does not request its deletion and, if they do, for as long as necessary to comply with the statute of limitations.
Legitimacy for data processing: Sending commercial information to customers is based on the Data Controller’s legitimate interest in sending them commercial communications about products or services similar to those contracted and thus achieving customer loyalty (Art. 6.1.f of the GDPR). Processing may also be legitimized by the consent provided by the Data Subject (Art. 6.1.a of the GDPR).
However, in either case, the Data Subject has the right to object to this processing and withdraw consent, which they may do by any of the means described in this document. The exercise of these rights will in no way affect the maintenance of commercial relationships, and any data processing carried out prior to the exercise of these rights will remain lawful.
Data source: The personal data we process comes from . The categories of data processed are identification (name, surname, tax identification number, postal address, telephone number, email address) and professional data (position, place of work, sector of activity).
SUPPLIERS

Purpose of processing: Supplier management, maintenance of contractual and/or commercial relationships with them, as well as administrative management (invoicing, collections, etc.), accounting, and tax management of the company, and compliance with the legal obligations that this entails.
Also to establish contact with individuals who provide services to a legal entity (company, organization, etc.), as well as with individual entrepreneurs and independent professionals, in order to establish or maintain business-to-business (B2B) relationships with them.
Data retention criteria: Data will be retained as long as contractual and/or commercial relationships between both parties are maintained and deletion is not requested, and, if so, for the period provided for by current regulations (tax, commercial, etc.).

etc.) regarding the limitation of liability.
Legal basis for data processing: GDPR: 6.1.b) The legal basis for data processing is the execution and maintenance of contractual and/or commercial relationships between both parties, as well as compliance with the legal obligations (tax, commercial, etc.) that this entails. The processing of professional contact data for business relationships is legitimized by the Controller’s Legitimate Interest to be able to contact, establish, and/or maintain business relationships with the legal entity for which the Data Subject provides services, as well as with individual entrepreneurs and independent professionals (GDPR: 6.1.f and LOPDGDD: 19).
SUBMISSION OF CURRICULUM

Purpose of processing: Archiving and recording of documentation and CVs voluntarily provided by the data subjects for future selection processes for candidates for a position in the company.
Data retention criteria: Data will be retained for a maximum period of one year or until the data subject exercises their right to erasure.
In this regard, after this period has elapsed, and if you wish to continue participating in the Data Controller’s selection processes, please send us your resume again.
Legitimacy for data processing: GDPR: 6.1.a) The legal basis for data processing is the consent provided by the Data Subject at the time they provide their data to participate in selection processes. By submitting or sending us their resume, the Data Subject authorizes the processing of their data through a clear affirmative action.
CONTESTS / RAFFLES / PROMOTIONS

Purpose of processing: To manage and organize the participation of Data Subjects in raffles, contests, or promotions conducted by the Data Controller and to send any communications related to the organization thereof and, in the event of winning a prize, to publish the Data Subject’s name and/or image in the media that the Data Controller deems appropriate, as well as on its websites, social media, and promotional materials in general, for the purpose of publicizing the Data Controller’s activities.
Data retention criteria: Data will be retained as long as necessary for the purpose of processing and, when no longer necessary for that purpose, for the period provided for by applicable law regarding the statute of limitations for liability.
Legitimacy for data processing: GDPR: 6.1.a) The legal basis for data processing is based on the informed consent requested at the time the data is collected for participation.
GDPR: 6.1.f) The publication of data regarding the results of the contest/draw is based on the legitimate interest of the Data Controller, in accordance with the promotional, distribution, and exploitation interests of the event. It may also be legitimized by the consent provided by the Data Subject (Art. 6.1.a of the GDPR).

ADDITIONAL INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR DRAWINGS AND COMPETITIONS

VIDEO SURVEILLANCE

Purpose of processing: Temporary storage of images captured by video surveillance cameras in order to preserve the security of persons, property, facilities, and merchandise.
Data retention criteria: Data may be retained for a maximum period of 30 days, except when it must be retained to prove the commission of acts that threaten the integrity of persons, property, or facilities, or when it is required to provide information to the courts and State Security Forces.
Legitimacy for data processing: GDPR: 6.1.e) processing is necessary for the performance of a task carried out in the public interest, to ensure the safety of persons, property, and facilities.
Data disclosure: data will not be disclosed to third parties, except to law enforcement agencies, courts, and tribunals, or by legal obligation.
4. DATA DISCLOSURE
Generally, personal data will not be disclosed to third parties, except in cases where there is a legal obligation or where it is necessary for the provision of services or for the maintenance and development of relationships, such as, but not limited to:
– Public Administrations, Judges, and Courts, for compliance with legal obligations, as well as for addressing potential liabilities arising from applicable regulations.
– Financial/banking institutions, for the management of collections and payments.
– Payment Service Providers, for collection and payment management (Mastercard, VISA, PayPal, etc.).
– Shipping companies, for product delivery and/or collection.
– Laboratories, to send you commercial communications and for statistical purposes, if you have authorized it.

.
– Service providers contracted by the Controller, who will act as Data Processors.

Although this is not a transfer of data, for the performance of any of the indicated processing operations or to provide you with a service, third-party companies acting as Data Processors (our suppliers) may access your information to carry out the aforementioned processing or service.
These data processors access your data following our instructions and may not use it for any other purpose, maintaining the strictest confidentiality.

International Transfers
COVEGAN COMERCIAL VETERINARIA Y GANADERA, S.L.U. does not plan to make international transfers of your data to countries outside the European Economic Area (EEA). In those cases where necessary, transfers will only be made to recipients located in a country, territory, or one or more specific sectors within that country or international organization that has been declared to have an adequate level of protection by the European Commission; or are covered by the “EU-US Data Privacy Framework” agreement; or are covered by any of the appropriate safeguards provided for in Article 46.2 of Regulation (EU) 2016/679.

5. RIGHTS OF DATA SUBJECTS

Any person has the right to obtain confirmation as to whether or not the Data Controller is processing personal data concerning them, as well as to withdraw, at any time, any consent they may have given for a specific purpose, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Data protection regulations allow you to exercise your rights of access, rectification, erasure, and data portability, as well as to object to and restrict processing, as well as the right not to be subject to decisions based solely on automated processing of your data, where appropriate. These rights are characterized by the following:
– Their exercise is free of charge, except in the case of requests that are manifestly unfounded or excessive (e.g., repetitive), in which case the Data Controller may charge a fee proportional to the administrative costs incurred or refuse to act.
– You may exercise these rights directly or through your legal or voluntary representative.
– We must respond to your request within one month, although, taking into account the complexity and number of requests, the deadline may be extended by an additional two months.
– We are obliged to inform you of the means to exercise these rights, which must be accessible, and we cannot deny you the right solely for the reason that you choose another method. If the request is submitted electronically, the information will be provided through that channel whenever possible, unless you request otherwise. – If the Data Controller does not process the request, they will inform you, at the latest within one month, of the reasons for their failure to act and the possibility of filing a complaint with a Supervisory Authority.

How to exercise these rights?

Data Subjects may exercise their rights by sending a written communication to the Data Controller’s postal or email address, indicating “EXERCISE OF LOPD RIGHTS” in the reference, including: the specific request, the address for notifications, the date, and the signature.
Upon request, we will provide you with forms to exercise these rights, indicating which right you wish to exercise.

Furthermore, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may file a complaint with the National Supervisory Authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.

6. SOCIAL MEDIA

COVEGAN COMERCIAL VETERINARIA Y GANADERA, S.L.U. uses social media, and this is another way to reach you. The information collected through the messages and communications it publishes may contain personal information that is available online and accessible to the public. These social media networks have their own privacy policies, which explain how they use and share your information. Therefore, we recommend that you consult them before using them to confirm that you agree with the way your information is collected, processed, and shared.
The processing of data about individuals who become followers and/or perform any link or connection action through the social media pages of the Data Controller’s official pages will be governed by this privacy policy and the privacy policies of the social media networks themselves.
The Data Controller will process your data for the purposes of properly managing your presence on the social media pages.

to the corresponding social network, send personal and individual messages through the social network’s channels, inform you of activities, products, and/or services of the Data Controller or third parties that may be related to our activity, as well as any other processing permitted by the social network’s regulations.

7. COOKIES

Generally speaking, if you browse the internet, you can accept or reject cookies from your browser’s settings.
This website may use cookies and other similar technologies such as local shared objects, flash cookies, or pixels, which are small files that some platforms, such as websites, can install on the user’s device (computer, tablet, smartphone, etc.).
Their functions can be very varied: storing browsing preferences, collecting statistical information, enabling certain technical features, storing information about the user’s browsing habits or their device, etc.
Cookies are useful for several reasons. From a technical perspective, they allow websites to function more efficiently and adapt to user preferences, such as storing their language or country’s currency, etc. In addition, they help website data controllers improve their services and make the advertising displayed on them more efficient, thanks to the statistical or behavioral information they collect.
For the installation and use of certain cookies, it is necessary to obtain informed consent from users. Cookies that require user consent include, among others, analytical, advertising, and affiliate cookies. Except for technical cookies and those necessary for the operation of the website or the provision of services expressly requested by the user.
Users can configure their browser to be notified when receiving cookies and to prevent their installation on their device. Please consult your browser’s instructions for more information. For more information about cookies, please see our Cookie Policy.

8. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE DATA SUBJECT

By checking the corresponding boxes and entering data in the fields marked as mandatory on the various forms, the Data Subject expressly, freely, and unequivocally accepts that their data is necessary for the Data Controller to process their request. The inclusion of information in the remaining fields is voluntary.
If not all mandatory data is provided, the corresponding processing thereof cannot be carried out, and therefore, the requests, contracts, or applications made by the Data Subject cannot be processed.

The Data Subject guarantees that the personal data provided is accurate and is responsible for communicating any changes thereto.

9. SECURITY MEASURES

COVEGAN COMERCIAL VETERINARIA Y GANADERA, S.L.U. is committed to protecting your personal information by using reasonably reliable and effective physical, organizational, and technological measures, controls, and procedures designed to preserve the integrity and security of your data and guarantee your privacy.
Furthermore, all personnel with access to personal data have been trained and are aware of their obligations regarding the processing of your personal data.
In the contracts we sign with suppliers, we include clauses requiring them to maintain confidentiality regarding the personal data to which they have access by virtue of the contract they have placed, as well as to implement the necessary technical and organizational security measures to guarantee the ongoing confidentiality, integrity, availability, and resilience of the systems and services that process your personal data.
All of these security measures are periodically reviewed to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed and no security system is impenetrable. Therefore, if any information processed and under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, where appropriate, notify any Data Subjects who may have been affected so that they can take appropriate measures.