PRIVACY POLICY

In compliance with the provisions of the General Data Protection Regulation 2016/679, of the European Parliament and of the Council of 27 April 2016, this Privacy Policy informs you of the way in which OSBORNE collects, processes and protects the personal data of people who access and use its services.

CONTROLLER

GRUPO OSBORNE S.A.

CIF A-11535564

Postal address: c/ Salvatierra, 6 – 28034 – Madrid

Electronic address: rgpd@osborne.es.

PURPOSES OF DATA PROCESSING

GRUPO OSBORNE S.A, hereinafter OSBORNE, processes the personal data it collects: to provide services and for the sale of the products offered through its website; to manage commercial relationships and contacts; to account for sales and determine consumption and its source; to carry out satisfaction surveys; to prepare profiles of preferences and interests; to analyse activity on its website, which does not involve the adoption of automated decisions that generate effects for the person, promotions and/or competitions; and for delivery of promotional communications relating to products and services related to OSBORNE, by physical or electronic means.

The User will find a specific information policy relating to the processing of the personal data requested for execution of the service relating to each of the services offered on this privacy portal.

SOURCE OF THE DATA

The personal data collected comes directly from the information provided by Users.

ACCURACY AND VERACITY OF THE DATA PROVIDED

The users of OSBORNE's services guarantee and are responsible for the accuracy, validity and authenticity of the personal data provided, and undertake to keep this duly updated.

STORAGE

The personal data provided shall be held whilst it is necessary to meet the purposes for which it was collected, in each case, in order to maintain the User's relationship with OSBORNE, providing that the User does not ask for it to be deleted or objects to its processing; it shall also be kept for the periods required under prevailing legal requirements.

LEGAL BASIS. LEGAL TITLE FOR USE OF THE DATA

The legal basis for OSBORNE processing the data is provided by the provisions of the General Data Protection Regulation (EU), with the data subject being informed of the legal provisions applicable to the provision of each service.

RECIPIENTS ​

During the processing of the personal data, OSBORNE shall not assign any such data, except when so required by legal obligation or when so authorised by the person involved in advance when it is necessary to do so.

The provision of the services may require the use of communications to IT service companies that act as data handlers on behalf of OSBORNE, which may be located outside the European Union, within the scope of the European Union-United States Privacy Shield; any such data processing will be subject to confidentiality and security conditions. Information is available at: https://www.privacyshield.gov

RIGHTS

OSBORNE ensures the following rights relating to the processing of your personal data:

  • Right to request access to personal data.
  • Right to request rectification or suppression.
  • Right to request limitation of processing.
  • Right to object to processing.
  • Right to portability of the data.
  • Right to withdraw the consent granted.

Everybody is entitled to obtain confirmation about whether OSBORNE processes their personal data. They may access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

Under certain circumstances, interested parties may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims. Likewise, interested parties may object to the processing of their data for reasons related to their specific situation, under certain circumstances. In this case, OSBORNE shall cease to process their data, except for legitimate purposes and for the exercise or defence of claims.

If consent has been granted for a particular purpose, the interested party has the right to withdraw this at any time, without this affecting the legality of the processing carried out before the prior consent was withdrawn.

This can be done by sending an email to rgpd@osborne.es.

If you are dissatisfied in any way in relation to the protection of your personal rights, you can file a complaint with the competent Data Protection Agency, through their website www.agpd.es. www.agpd.es.

You can check all of the data protection policies in each of the following sections:

PERSONAL DATA PROTECTION INFORMATION POLICY FOR REGISTERED CUSTOMERS

Controller

Who is the data controller?

- GRUPO OSBORNE S.A.

- C.I.F.: A-28318871

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

GRUPO OSBORNE S.A. will process the data providing for the following reasons:

- Managing the process of purchase, delivery, complaints and after-sales service to registered website users who buy OSBORNE products.

- To forward queries to the areas of the Osborne Group companies responsible for the request, query and/or complaint.

- Customer loyalty schemes: processing of personal data relating to management and customer service to offer benefits as a result of loyalty to the brand through regular purchases of Osborne products, which may lead to campaigns to encourage customer loyalty or to approach prospective customers to establish a close and lasting relationship with the brand.

- To send our newsletter and commercial information by physical and electronic means.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

Legal basis

What is the legal basis for processing your data?

The legal bases for processing the data are:

- A contract or legal relationship for the management of product purchases, and related queries: Article 6(1)(b) of the EU General Data Protection Regulation.

- Consent for loyalty schemes, preference profiling and browsing analytics: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent to, and legitimate interest in, sending our newsletter and marketing information: Article 6(1)(a) and (f) and Recital 47 of the EU General Data Protection Regulation.

Recipients

Who do we share your data with?​

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates Grupo OSBORNE, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Storage

How long will we keep your data?

- Personal data strictly related to the purchase process, such as acquisition, purchase, delivery, returns and complaints, are retained for a period of six years from the sale, in accordance with the Spanish Commercial Code.

- Personal data relating to the other purposes are retained until the data subject formally objects to, or requests cessation of, the relevant processing.

Rights

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website,  www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

INFORMATION ON THE PROTECTION OF PERSONAL DATA FOR USERS

Controller

Who is the data controller?

- GRUPO OSBORNE S.A.

- C.I.F.: A-28318871

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

GRUPO OSBORNE S.A. will process the data providing for the following reasons:

- To manage relationships with customers interested in OSBORNE's brand, products and services.

- To manage the registration process in our web channel, and to respond to queries sent using the contact channel provided on the website.

- To forward queries to the areas of the Osborne Group companies responsible for the request, query and/or complaint.

- To send our newsletter and commercial information by physical and electronic means.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

Legal basis

What is the legal basis for processing your data?

The legal bases for processing the data are:

- Consent for the main purpose of customer registration, consultation and contact and relations: article 6.1.a) of the European General Data Protection Regulation.

- Consent for preference profiling and browser analytics: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent and legitimate interest in sending our newsletter and commercial information: Article 6.1.a) and 6.1.f) of the European General Data Protection Regulation.​

Recipients

Who do we share your data with?​

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates Grupo OSBORNE, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Storage

How long will we keep your data?

- OSBORNE keeps personal data relating to the management of queries and contact details for one year from receipt.

- OSBORNE keeps personal data for six years from purchase, pursuant to the Commercial Code.

- Information relating to claims is kept until the claim process is definitively closed.

- OSBORNE keeps personal data relating to the sending of commercial information and monitoring and analysis of browsing until the person objects of asks for them to be deleted.

Rights

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website,  www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

NEWSLETTER PERSONAL DATA PROTECTION POLICY

Controller

Who is the data controller?

- GRUPO OSBORNE S.A.

- C.I.F.: A-28318871

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

GRUPO OSBORNE S.A. will process the data providing for the following reasons:

- Processing of personal data on subscribers and recipients of newsletters or digital publications ciruclated by email on a regular basis (daily, weekly, monthly, bimonthly or quarterly) with content aimed at people interested in the brand, potentially including offers or premium content.

- Manage invitations to events.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

Legal basis

What is the legal basis for processing your data?

The legal basis for the processing of data is the consent for the purposes indicated and / or legitimate interest in sending newsletters and marketing information and management of invitations to events: Article 6(1)(a) and (f) of the EU General Data Protection Regulation.

Recipients

Who do we share your data with?​

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates Grupo OSBORNE, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Storage

How long will we keep your data?

- Personal data are kept until the data subject objects or unsubscribes.

Rights

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website,  www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

PRODUCT AVAILABILITY DATA PROTECTION POLICY

Controller

Who is the data controller?

- GRUPO OSBORNE S.A.

- C.I.F.: A-28318871

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

GRUPO OSBORNE S.A. will process the data providing for the following reasons:

- Processing of personal data generated on the website relating to alerts on availability of products for sale on the website about which the data subject has expressed interest and has requested to be informed when they become available.

- To send our newsletter and commercial information by physical and electronic means.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

Legal basis

What is the legal basis for processing your data?

The legal bases for processing the data are:

- Consent for the main purpose of alerting the data subject to availability of the product of interest: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent for preference profiling and browser analytics: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent and legitimate interest in sending our newsletter and commercial information: Article 6(1)(a) and (f) of the EU General Data Protection Regulation.

Recipients

Who do we share your data with?​

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates Grupo OSBORNE, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Storage

How long will we keep your data?

- Personal data relating to "in-stock" alert requests are kept until the time of the product availability alert.

- OSBORNE keeps personal data relating to the sending of commercial information and monitoring and analysis of browsing or profiling until the person objects of asks for them to be deleted.

Rights

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website,  www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

PERSONAL DATA PROTECTION INFORMATION RELATING TO WINERY VISIT REQUESTS

Controller

Who is the data controller?

- GRUPO OSBORNE S.A.

- C.I.F.: A-28318871

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

GRUPO OSBORNE S.A. will process the data providing for the following reasons:

- Processing of the personal information relating to the management and service of people requesting visits to the winery.

- To send our newsletter and commercial information by physical and electronic means.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

Legal basis

What is the legal basis for processing your data?

The legal bases for processing the data are:

- Contract or legal relationship in the case of visits where the purpose ends in the purchase of ticket: article 6.1. b) of the European General Regulations on Data Protection.

- Consent for preference profiling and browser analytics: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent and/or legitimate interest in the receiving the newsletter and commercial information: article 6.1.a) and 6.1.f) of the European General Regulations on Data Protection.

Recipients

Who do we share your data with?​

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates Grupo OSBORNE, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- If the delivery of services requires data to be shared with service providers within and outside the European Union that support the management of this processing, this will only be done with with members that are members of the USA-European Union privacy Shield and that fulfil sufficient guarantees in terms of confidentiality and security in terms of data processing. Specifically, the delivery of services linked to this treatment is provided by the use of the computer-based client management platform Salesforce, which complies with Binding Corporate Rules that allow it to export personal data to organizations within the Salesforce Group located outside the European Economic Area, that have been approved by the data protection authorities of Frnace, Holland and Bavaria in Germany. The Salesforce platform has also been accepted into the North-American Privacy Shield system and OSBORNE and Salesforce have signed a binding contractual agreement based on the model approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Storage

How long will we keep your data?

- The personal data is kept until you visit the winery.

- The personal data relating to the mailing of commercial data is retained until the person unsubscribes or requests their removal.

Rights

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website,  www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

RESTAURANT BOOKINGS DATA PROTECTION INFORMATION POLICY

Controller

Who is the data controller?

- OSBORNE RESTAURACIÓN S.L.

- C.I.F.: B-28183911

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

OSBORNE RESTAURACIÓN S.L. processes the data you provide for the following purposes:

- We process personal data to manage online and telephone bookings at Osborne restaurants and any related customer service.

- Management of payment and complaints processes.

- Customer loyalty schemes to reward loyalty to the Osborne brand, which can give rise to campaigns to encourage customer loyalty or approach prospective customers to establish a close and lasting relationship.

- To send our newsletter and commercial information by physical and electronic means.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

- Surveys for quality and satisfaction.

Legal basis

What is the legal basis for processing your data?

The legal bases for processing the data are:

- Legal relationship underpinning the provision of catering and customer service: Article 6(1)(b) of the EU General Data Protection Regulation.

- Consent for preference profiling and browser analytics: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent to, and/or legitimate interest in, sending our newsletter and marketing information: Article 6(1)(a) and 6(1)(f) of the EU General Data Protection Regulation.

Recipients

Who do we share your data with?​

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates Grupo OSBORNE, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Storage

How long will we keep your data?

- OSBORNE keeps personal data for six years from invoicing, pursuant to the Commercial Code.

- Information relating to complaints is kept until the complaint process is definitively closed.

- OSBORNE keeps personal data relating to the sending of commercial information, loyalty schemes and monitoring and analysis of browsing until the data subject objects or unsubscribes.

Rights

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website,  www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

COMPETITION ENTRIES PERSONAL DATA PROTECTION INFORMATION POLICY

Controller

Who is the data controller?

- GRUPO OSBORNE S.A.

- C.I.F.: A-28318871

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

GRUPO OSBORNE S.A. processes the data you provide for the following purposes:

- Processing of personal data for managing data subjects' involvement in competitions and prize draws organized by Osborne through social networks.

- Publication on websites and social networks of the full name of the winner and images of him/her collecting and/or enjoying the prize.

- To send our newsletter and commercial information by physical and electronic means.

- Osborne brand monitoring activity analysis.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

Legal basis

What is the legal basis for processing your data?

The legal bases for processing the data are:

- Consent for entry in the competition and publication of the winner's details: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent for preference profiling and browser analytics: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent and legitimate interest in sending our newsletter and commercial information: Article 6(1)(a) and 6(1)(f) of the EU General Data Protection Regulation.

Recipients

Who do we share your data with?​

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates Grupo OSBORNE, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- The identity details of the winner of the competition will be published on social networks and on the website.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Storage

How long will we keep your data?

- The personal data will be kept until the end of the process, with the delivery of the prize.

- Personal data relating to the other purposes are kept until the data subject objects or unsubscribes.

Rights

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website,  www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

PERSONAL DATA PROTECTION INFORMATION POLICY RELATING TO THE EXERCISE OF RIGHTS RELATING TO PRIVACY

Controller

Who is the data controller?

- GRUPO OSBORNE S.A.

- C.I.F.: A-28318871

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

GRUPO OSBORNE S.A. processes the data provided to respond to requests from people to exercise the rights established by the European General Data Protection Regulation.

Legal basis

What is the legal basis for processing your data?

The legal basis for processing the data is compliance with a legal obligation applicable to parties responsible for processing data, as set down in article 6.1.c) of the European General Data Protection Regulation.

Recipients

Who do we share your data with?​

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates Grupo OSBORNE, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Storage

How long will we keep your personal data?

- We keep the data for one year after the end of the process of exercising rights and once any final ruling is handed down by the control authorities.

Rights

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website,  www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

PROTECTION OF PERSONAL DATA INFORMATION POLICY RELATING TO OUR CONTACTS

Controller

Who is the data controller?

- GRUPO OSBORNE S.A.

- C.I.F.: A-28318871

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

GRUPO OSBORNE S.A. processes the data you provide for the following purposes:

- Managing communications with people in the public and private sectors.

- Managing the sending of information about activities, products and services.

- Managing invitations to and participation in events promoted or hosted by OSBORNE.

Legal basis

What is the legal basis for processing your data?

The legal basis for the processing of data is the "legitimate interest" referred to in Article 6(1)(f) of the EU General Data Protection Regulation.

Recipients

Who do we share your data with?​

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates Grupo OSBORNE, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Storage

How long will we keep your personal data?

We keep the data until the data subject objects to data processing or requests erasure of the data.

Rights

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Data subjects are entitled to access their personal data and request the rectification of any inaccurate data, or erasure of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the Spanish Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

PROTECTION OF PERSONAL DATA INFORMATION POLICY ON UNREGISTERED CUSTOMERS

Controller

Who is the data controller?

- GRUPO OSBORNE S.A.

- C.I.F.: A-28318871

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

GRUPO OSBORNE S.A., hereinafter OSBORNE, processes the data provided in order to manage the process of purchase, delivery, complaint and after-sales service to purchasers of OSBORNE products through the website without prior registration on the site.

Legal basis

What is the legal basis for processing your data?

The legal basis for such processing is the legal relationship established with the product purchase. Article 6(1)(b) of the EU General Data Protection Regulation.

Recipients

Who do we share your data with?​

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates Grupo OSBORNE, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission (https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32010D0087&from=ES).

Storage

How long will we keep your data?

- Personal data strictly related to the purchase process, such as acquisition, purchase, delivery, returns and complaints, are retained for a period of six years from the sale, in accordance with the Spanish Commercial Code.

Rights

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website,  www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

Información sobre protección de datos personales relativa a órganos de gobierno y accionistas

Controller

Who is the data controller?

- GRUPO OSBORNE S.A.

- C.I.F.: A-28318871

- Address:  c/ Salvatierra, 6 – 28034 – Madrid

- Telephone: 917283880

- Email address for requests relating to personal data: rgpd@osborne.es


Purpose

Why do we process your data?

GRUPO OSBORNE S.A. will process the data providing for the following reasons:

- Gestionar la información personal relativa a las personas integrantes de los órganos de gobierno, accionistas y personas vinculadas a éstas, y prestación de servicios de la empresa a los mismos.

- Fomentar la marca y las relaciones entre las personas accionistas y personas vinculadas entre sí a través de la APP de accionistas.

- Gestión y atención a las personas integrantes de los órganos de gobierno, accionistas y personas vinculadas a estas que adquieren productos Osborne online, gestión de los procesos de compra, entrega, reclamaciones y atención al cliente.

- Gestionar la información personal de personas suscriptoras y receptoras de newsletter o publicación digital distribuida a través del correo electrónico con cierta periodicidad (diaria, semanal, mensual, bimensual o trimestral) con contenidos de interés para las personas interesadas sobre la marca y que pueden incluir ofertas o contenidos Premium.

- Manage invitations to events.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

Legal basis

What is the legal basis for processing your data?

- Cumplimiento de obligación legal: art. 6.1.c) del Reglamento General Europeo de Protección de Datos Ley de Sociedades de Capital para el tratamiento de los datos referidos a personas integrantes de los órganos de gobierno y accionistas.

- Relación jurídica relativa a la adquisición de productos: art. 6.1.b) del Reglamento General Europeo de Protección de Datos.

- Consentimiento, respecto de las demás finalidades del tratamiento: art. 6.1.a) del Reglamento General Europeo de Protección de Datos.

Recipients

Who do we share your data with?​

- Los datos no serán objeto de cesión salvo para dar soporte al servicio, así como en caso de ser necesario para el cumplimiento de obligaciones legalmente establecidas, pudiendo ser cedidas a las empresas del Grupo Osborne, así como al resto de miembros de la comunidad de personas usuarias de la App de accionistas.

- En el caso de que la prestación de servicios requiera la utilización de la información personal por empresas que actúen en calidad de encargados de tratamiento de la organización y que se ubiquen fuera de la Unión Europea se garantizará el cumplimiento de las condiciones impuestas por la normativa europea.

Storage

How long will we keep your data?

- Los datos personales se conservarán durante el mantenimiento de la relación con la organización en el puesto directivo o accionariado y durante 10 años más en cumplimiento de la normativa mercantil, fiscal y de blanqueo de capitales.

- Los datos personales estrictamente referidos al proceso de compra (adquisición, compra, entrega, reclamaciones) se conservan durante un período de seis años desde la compraventa en aplicación del código de comercio.

- Mantenimiento indefinido de datos básicos y esenciales a efectos históricos.

- Los datos personales relativos al registro en la APP al envío de información comercial, al seguimiento o análisis de navegación se conservan hasta que la persona solicite su oposición o baja.

Rights

What are your rights when you provide us with your data?

- Cualquier persona tiene derecho a obtener confirmación sobre si OSBORNE está tratando datos personales que le conciernan. Las personas interesadas tienen derecho a si acceder a sus datos personales, así como a solicitar la rectificación de los datos inexactos o, en su caso, solicitar su supresión cuando, entre otros motivos, los datos ya no sean necesarios para los fines que fueron recogidos.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website,  www.agpd.es.

Security

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

REGLAS DE USO DE LA APP

De cara a la utilización de la APP por parte de las personas accionistas y familiares de éstas de GRUPO OSBORNE, la empresa ha tenido a bien elaborar las siguientes normas de conducta. Estas normas de uso tienen en cuenta la utilización de la aplicación móvil para fines de información a personas accionistas y personas cercanas a éstas, así como para presentarles propuestas comerciales o mantenerles informadas de la actividad comercial de la empresa, e igualmente con la finalidad de fomentar la interrelación entre las personas accionistas y sus familiares entre sí.


PRIMERA. La aplicación se utilizará principalmente para la comunicación de datos, eventos, informaciones o situaciones vinculadas a la empresa y a la marca OSBORNE. No se utilizará esta aplicación para la comunicación de eventos no vinculados a la empresa o para la distribución de información o material audiovisual no vinculados a actos, eventos o informaciones de la empresa. También se podrá utilizar para fomentar las comunicaciones personales entre personas accionistas y personas vinculadas a éstas. Asimismo, la empresa podrá utilizar la APP para mantener informadas a las personas usuarias de la misma de las propuestas comerciales que considere oportuno, proyectos de fidelización, venta online, campañas y otras actividades de la marca.


SEGUNDA. Las personas que utilicen esta aplicación y suban información a la misma deben contar con todos los permisos de las personas cuyos datos se muestran en esa información. Será responsabilidad de la persona que utilice la aplicación obtener, mantener y en su caso, presentar ese permiso si se produce alguna reclamación. OSBORNE no asume ninguna responsabilidad en relación con la carga o subida de información, tanto fotografías, videos como información personal de todo tipo, vinculada a personas de cualquier tipo. Asimismo, OSBORNE podrá eliminar contenidos de la APP si los considera contrarios al código ético o a las buenas costumbres.


TERCERA. Prioritariamente, la aplicación se utilizará exclusivamente para cargar información relacionada exclusivamente con personas que tengan una relación con la marca o con la empresa, que formen parte del grupo de accionistas de la misma o sean personas vinculadas a éstas. También se podrá utilizar por la empresa para mantener informadas a las personas usuarias de campañas o productos que puedan ser de su interés.


CUARTA. La empresa recomienda en la utilización de esta aplicación que no se cargue ningún tipo de información personal en la misma sobre la que la persona usuaria de la aplicación no ostente un permiso expreso.


QUINTA. A la hora de subir información a la aplicación, se tendrán en cuenta también, las restricciones que establece la normativa vinculada a la intimidad, honor y propia imagen, así como a la protección de datos personales, y, no se subirán imágenes de menores de edad, ni se obtendrán imágenes de ningún tipo vinculada o no a la marca en situaciones que puedan ser comprometidas o situaciones en las cuales la obtención de imágenes esté protegida por el derecho a la intimidad.


SEXTA. Por último, la empresa recuerda a todas las personas usuarias de la aplicación que esta aplicación tiene como finalidad general mantener informadas, por parte de la empresa, sobre las actividades y sobre la marca a las personas accionistas de la empresa y fomentar las relaciones entre dichas personas accionistas vinculadas a la empresa y a la marca, así como informar sobre los productos OSBORNE. Esta aplicación móvil, por lo tanto, no pretende que se incluyan comentarios personales, o se opine sobre determinadas personas, o se manifiesten distintos tipos de ideologías o situaciones al margen de la finalidad perseguida