1. GENERAL INFORMATION

The purpose of this “Privacy and Data Protection Policy” is to make known the conditions that govern the collection and processing of your data by Cosmo Cash and Carry to ensure fundamental rights, honor, and freedoms. All of this complies with current regulations that regulate the Protection of Personal Data according to the European Union and the Spanish Member State.

By these regulations, we need to have your authorization and consent for the collection and processing of your data, so below, we indicate all the details of your interest regarding how we carry out these processes, for what purposes, what other entities could have access to your data, and what your rights are.

For all the above, once you have reviewed and read our Data Protection Policy, you must accept it as proof of your agreement and consent.

 

2. RESPONSIBLE FOR THE TREATMENT

Who collects and processes your data?

The Data Controller is “Cosmo Cash and Carry”, a natural or legal person, public or private, or administrative body, who alone or jointly with others determines the purposes and means of processing personal data; if the purposes and means of the processing are determined by the Law of the European Union or the Spanish Member State.

 

3.- SECURITY MEASURES

 

Our entity, Cosmo Cash and Carry, is committed to ensuring the utmost privacy and security of your data. We have taken extensive measures, both organizational and technical, to safeguard your data against unauthorized access, alteration, loss, or any form of compromise. These measures are aligned with the state of the art in technology, the specific nature of the data we store, and the potential risks they may be exposed to.

Some of the key security measures we have implemented include:

Ensuring the continuous confidentiality, integrity, availability, and resilience of our data treatment systems and services.
Rapidly restoring availability and access to personal data in the event of a physical or technical incident.
Regularly verifying, evaluating, and assessing the effectiveness of the technical and organizational measures we have put in place to guarantee the security of your data.
Employing techniques such as pseudonymization and encryption for sensitive personal data to provide an additional layer of protection.
At Cosmo Cash and Carry, your data security and privacy are paramount, and we continuously strive to uphold the highest standards of data protection.

 

4. RECIPIENTS OF YOUR DATA

 

To whom do we transfer your data within the European Union?

Sometimes, in order to comply with our legal obligations and our contractual commitment to you, we are faced with the obligation and need to transfer some of your data to certain categories of recipients, which we specify below:

• Ecommerce customer management: Banks, savings banks, and rural banks
• Labor management: Social Security Organizations; Tax administration; Banks, savings banks, and rural banks
• Video surveillance: Security forces and bodiesSupplier
• Management: Tax Administration; Banks, savings banks, and rural banks
• Cosmo Cash And Carry: [Specify the purpose of data transfer to Cosmo Cash And Carry, if applicable]

In addition to the categories of recipients to whom data is transferred, we may also transfer data to the following organizations (they will only appear if data is transferred to other organizations):

[Specify any additional organizations, if applicable]

Do we make International Transfers of your data outside the European Union?

We do not carry out international transfers of your data.

 

5.- PURPOSE OF THE TREATMENT

 

Why do we want to process your data?

We need your authorization and consent to collect and process your personal data, so below we detail the intended uses and purposes.

• Ecommerce customer management: Electronic commerce; Customer/supplier, accounting, tax, and administrative management for Cosmo Cash And Carry.
• Labor management: Control of work presence; Job raining; Management of payroll and employment contracts; Prevention of occupational hazards; Human Resources; Labor supervision and control for Cosmo Cash And Carry.
• Video surveillance: Video surveillance for Cosmo Cash And Carry.
• Supplier management: Contact and commercial activities with suppliers for Cosmo Cash And Carry.
• Commercial communications: Marketing, advertising, and commercial prospecting for Cosmo Cash And Carry.
• Collaborators in RRSS and web: Share information on Social Networks for Cosmo Cash And Carry.

How long do we keep your data?

We use your data for the time strictly necessary to fulfill the purposes indicated above for Cosmo Cash And Carry. Unless there is a legal obligation or requirement, the expected retention periods are:

Ecommerce customer management: For a period of 6 years from the last confirmation of interest. Article 30 Commercial Code
Labor management: For a period of 5 years from the last confirmation of interest. Article 21 of Royal Legislative Decree 5/2000
Video surveillance: For a period of 1 month from the last confirmation of interest
Supplier management: For a period of 6 years from the last confirmation of interest. Article 30 of the Commercial Code
Commercial communications: As long as their deletion is not requested by the interested party
Collaborators in RRSS and web: As long as its deletion is not requested by the interested party