In accordance with the General Data Protection Regulation (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we present this Privacy Policy to inform you clearly and transparently about the collection and processing of your personal data through the website https://refrescosdelatlantico.com.

Identity: Refrescos del Atlántico, S.L.
Tax ID (NIF): B36181766
Postal address: Moledo, 115 (Ardán) – 36214 Marín (Pontevedra) – Spain
Email: protecciondedatos@refrescodelatlantico.com

By accessing and using this website, enjoying our services, or using any means involving the processing of personal data, you accept this Privacy Policy, along with the provisions in the Legal Notice and the Cookie Policy.

At Refrescos del Atlántico, we will provide you with information so that, before entering your personal data, you can access this Privacy Policy and any other relevant information regarding data protection.

This Privacy Policy may be modified by the website owner when necessary. You will be notified via the website or another communication channel so that you are aware of any changes and can continue to use our services. Continuing to use our services after being notified of these changes will be considered acceptance, except where express consent is required.

At Refrescos del Atlántico, we process your personal data (name, surname, email, phone number, and any other necessary information) for the following purposes:

Managing the registration and contracting process and, where applicable, handling contact requests, inquiries, information or quote requests, as well as job applications, complaints, and claims.

Managing the sending of advertising related to our products and services through any means (postal mail, email, telephone, etc.) and inviting you to events organized by the company, unless you indicate otherwise or withdraw your consent.

Ensuring compliance with legal obligations and verifying contractual obligations, including fraud prevention.

The retention period depends on the service contracted. In any case, your data will be retained during the duration of the commercial relationship. Once it ends, your data will be blocked for the legal retention periods applicable, for the attention of any potential liabilities. For reference:

• Inquiries or complaints: Data will be processed until your request is addressed and during any legal retention period that may apply.
• Clients: Data will be processed during the contractual relationship and subsequently during the limitation periods.
• Job candidates: Data will be stored for a maximum of one year from the date of receipt or end of the selection process.
• Marketing communications: Data will be processed until you unsubscribe or cancel your subscription.

Los datos personales que se pueden recoger serán tratados con absoluta confidencialidad, comprometiéndonos a guardar secreto respecto a los mismos y garantizando el deber de guardarlos adoptando todas las medidas necesarias que evitan su alteración, pérdida y tratamiento o acceso no autorizado, de acuerdo con lo establecido en la legislación aplicable.

The legal bases include: your consent, the performance of a contract, legal obligations, and our legitimate interest in maintaining professional contact and sending commercial communications.

Personal data collected will be treated with strict confidentiality. We commit to secrecy and to applying all necessary measures to prevent unauthorized alteration, loss, processing, or access, in accordance with applicable laws.

Acceptance and Consent

You declare that you have been informed of the terms regarding personal data protection, accepting and consenting to the processing of your data by Refrescos del Atlántico as described in this Privacy Policy.

Data may be shared with:

• Public authorities, the Tax Agency, law enforcement, and courts when legally required.
• Banks and financial institutions.
• Third parties essential for service delivery: service providers, call centers, subcontracted professionals, etc.

Your data will never be shared with third parties without meeting legal requirements.

We work with providers who may access your data solely on our behalf, under signed agreements aligned with Article 28 of the GDPR, ensuring they apply appropriate technical and organizational measures.

If any data processors are located outside the European Economic Area, Standard Contractual Clauses will be signed to guarantee adequate protection.

You have the right to:

• Access: Check if we are processing your data.
• Rectification or Erasure: Modify or delete your data if it’s inaccurate or no longer needed.
• Object: Object to processing under certain conditions.
• Restriction: Limit processing while accuracy or legality is being verified.
• Portability: Transfer your data to another controller in specific circumstances.

You can exercise these rights free of charge by:

• Sending a written request to our postal address.

Sending an email to: protecciondedatos@refrescodelatlantico.com

For more information on your rights, visit the website of the Spanish Data Protection Agency: www.agpd.es

If you believe there is an issue with how your data is being handled, you can:

Contact us at Moledo, 121 (Ardán) – 36912 Marín (Pontevedra) – Spain

Or contact the Spanish Data Protection Agency: www.aepd.es

At REFRESCOS DEL ATLÁNTICO, we maintain the highest levels of security to protect your personal data from accidental loss, unauthorized access, or disclosure. Measures may include:

• Pseudonymization and encryption.
• Ensuring confidentiality, integrity, availability, and resilience of systems.
• Regular evaluations and restoration capabilities in case of incidents.
• Strict internal protocols ensuring that only authorized personnel access your data under proper instructions.

As stated above, all data will be treated with utmost confidentiality in line with applicable legislation.

The user acknowledges having been informed and consents to the processing of their data by REFRESCOS DEL ATLÁNTICO as detailed in this Privacy Policy.

This version of the Privacy Policy corresponds to a published update that came into effect in March 2025. You can contact REFRESCOS DEL ATLÁNTICO through the established contact channels for any related inquiries.

This message and its attachments are intended exclusively for the recipient and may contain confidential information protected by professional secrecy. Its communication, reproduction or distribution is not permitted without the express authorization of REFRESCOS DEL ATLÁNTICO S.L. If you are not the intended recipient, please delete it and notify us immediately. In accordance with Regulation (EU) 2016/679 on Data Protection, we inform you that your personal data and email address are part of a file for which REFRESCOS DEL ATLÁNTICO S.L. is responsible. The sole purpose of this file is the management of business relationships. You may exercise your rights of access, rectification, cancellation and opposition under the terms established by law by writing to: protecciondedatos@refrescodelatlantico.com.