1. Sandbox AgriFoodtech Privacy Policy
This website provides information about the Spanish Sandbox AgrifoodTech managed by EATEX, a brand owned by the Centro Nacional de Tecnología y Seguridad Alimentaria, CNTA. The personal data you provide us with on this website by any of the means provided for this purpose will be processed in accordance with this privacy policy.
1.1.- Identity of the person responsible
- Identity: Centro Nacional de Tecnología y Seguridad Alimentaria (CNTA).
- Postal address: Crta. NA 134, km 53 · 31570 San Adrián (Navarra).
- Telephone: 948 670 159
- Email: cnta@cnta.es
- Data Protection Delegate: rgpd@cnta.es
1.2.- Tratamiento de datos
Below we inform you about the processing of data covered by this privacy policy, indicating both the legal basis of the General Data Protection Regulation (hereinafter, GDPR) and the specific retention period of the data (to which must be added the time necessary to comply with legal obligations and meet the possible liabilities that may arise for the Data Controller in relation to compliance with the purpose for which the data were collected). In the event that you are requested at any time to authorise the processing of your data for a purpose that requires your consent, your failure to grant it (or its subsequent withdrawal) will not have any consequences for you in any case.
Concerning our relationship with you
| Treatments and purposes | Legal basis (GDPR) | Deadline |
|---|---|---|
| Requests for information or queries: We will use your data to deal with requests for information, queries or complaints that you send us, with the management and scope that these requests have. require. As well as for the preparation of proposals for services and/or collaboration. | Art. 6.1.a) GDPR. The data subject's request for pre-contractual measures. | For as long as it takes to deal with your request and/or complaint. |
| Provision of services: We will use your data to manage and process your orders for products or services that we you have contracted with us. | Art. 6.1.b) GDPR. The treatment is necessary for the performance of a contract in which the stakeholder is a party. | For the duration of the relationship and/or service. |
| Classification based on the analysis of your browsing habits: We will process the data generated by your visit and/or interaction on our websites in order to classify you and present you with content of interest to you. | Art. 6.1.a) GDPR. Express consent of the data subject. | As long as you do not object and the Controller is entitled to the processing. |
| Newsletter and commercial communications: When you request or consent, we will use your data to send you commercial communications about products or services of the Responsible Party. | Art. 6.1.a) GDPR. Express consent of the data subject. | As long as you do not withdraw your consent and object to the processing. |
| Management of registered users: We will use your data to process your registration, control and manage your relationship as a user of the site, manage your interaction with us. | Art. 6.1b) GDPR. Enforcement of a contract to which the person concerned is a party. | As long as the contractual relationship remains in force and the Controller is entitled to the processing. |
| Members: Manage requests for information on membership of the Association, as well as, where appropriate, the management of your incorporation and permanence in the association. | Art. 6.1 .b) The processing is necessary for the performance of a contract to which the data subject is a party. | We will process your data for the time necessary to deal with and manage your request and, where appropriate, for the period during which you are a member. |
Associated with regulatory compliance
| Treatments | Legal basis | Deadline |
|---|---|---|
| Attention to the exercise of data subjects' rights: In the event that, as a data subject, you exercise any of your rights in relation to your personal data, we will use the data you provide to evaluate your request and respond to it. | Art. 6.1.c) GDPR. Compliance with a legal obligation applicable to the Controller based on Articles 15 to 22 of the GDPR and 12 to 18 of Organic Law 3/2018. | As long as it is necessary for the exercise of rights communicated to the Controller. |
| Information systems (reporting channels). To manage the procedure referred to in Law 2/2023 of 20 February, regulating the protection of persons who report infringements regulatory and the fight against corruption, as well as the register of information received and the internal investigations to which they have given rise. | 6.1.c) GDPR. Obligation legal (Law 2/2023 of 20 February on the protection of persons who report regulatory infringements and the fight against corruption). | They will be kept for the time necessary to fulfil the purpose for which they were collected and to determine any possible liabilities that may arise from that purpose and from the processing of the data. |
Cookies
If you have agreed to receive cookies when you visit this website, the website’s cookie policy, accessible via the following link, will apply to you.
1.3.- Type of data we may collect about you
Through the various means of contact (e.g. e-mail, telephone), the forms provided on our website, identifying and contact will be collected, such as name, surname, e-mail address, telephone number, etc. In some specific forms, you can send us additional information (e.g. reason for the query). In the case of forms where it is not necessary to provide all the data requested, those fields that must be filled in will be identified with an asterisk, the rest being completely voluntary.
Finally, depending on your preferences with cookies, the configuration of your device when accessing the site or the communications we send you, we may record your browsing on our website obtaining information about your behaviour and interests and we may also know the opening of commercial communications.
1.4.- Addressees. international data transfers
Below, we list the situations in which it may be necessary to disclose your data to third parties:
- Derived from your profile settings: in case you register in the search/offer of manufacturer, some data related to your status and your search may be visible to other users or visitors of the site according to the indications of that part of the page.
- Sending communications and newsletters, measuring your activity, forms and surveys. In this case, your data will be communicated to the company that owns the technological solution used for this purpose, so that it can carry out the sending and measuring functions that have been entrusted to it.
- Hosting of the website. The data hosted on our website will be communicated to the company that provides us with the web hosting service.
- Co-organisation of events or training or promotional actions. In the case of organising events with other entities, we inform you that your data will also be processed by the person in charge, by the organisation(s) identified in the conditions governing that particular action.
1.5.- Rights
With respect to the personal data collected for processing, you have the possibility of exercising your rights of access, rectification, deletion and portability. Likewise, in certain circumstances, you will have the right to request the limitation of or opposition to the processing of your data, in which case the Data Controller will cease to process them and will only keep them in the event that there is a regulatory obligation to do so or until the prescription of any actions that may arise. For any queries or to exercise your rights, you can contact us through any of the contact channels indicated in the heading of this data protection policy accordance with the provisions of the applicable regulations.
Finally, you may also contact the supervisory authority when you consider it appropriate lodge a complaint (for example, in the country where you have your habitual residence, your place work or where you consider that the alleged infringement has occurred). For the appropriate purposes, we inform you that in Spain the Supervisory Authority is the Spanish AgencyData Protection , and you can exercise your rights through the forms that this entity has set up for this purpose and which are available at its electronic headquarters. If you would like more information on the aforementioned rights, we invite you to read on or visit the infographic prepared by the Spanish Data Protection Agency.
Version 1.1 – Updated to February 2025.
