Privacy Policy

This Privacy Policy applies to the website available at www.dolucena.es and to users’ interactions with www.dolucena.es (hereinafter D.O. LUCENA) through the website or any other means of communication.

D.O. LUCENA, in its commitment to protecting the confidentiality and privacy of personal data, complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data (GDPR), and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

D.O. LUCENA may amend this Privacy Policy when necessary. Changes will be communicated through the website or other means so users can learn about the new conditions. Continued use of the features made available by D.O. LUCENA after notification implies acceptance, except where express consent is required.

1. Controller of Your Personal Data

The entity responsible for processing your data is:

D.O. Protegida Aceite de Lucena

  • Address: C/ Sevilla, 5, C.P. 14900 Lucena – Córdoba
  • Telephone: +34 957 503 325
  • Fax: +34 957 503 325
  • Personal data contact email: info@dolucena.com

2. What Data We Process and Where It Comes From

We may collect personal information through:

  • Our website, including cookies;
  • Telephone;
  • Email;
  • Forms;
  • In-person visits to our centres as a result of providing a healthcare service.

Data may come from the individual, the patient or, where applicable, their legal or authorised representative and/or healthcare personnel.

We only request information essential to provide the service you request.

D.O. LUCENA informs users that when personal data is collected through a form, they must provide at least the fields marked as mandatory. Without this necessary data, D.O. LUCENA cannot manage the service or respond to the request.

Where we need to collect personal data by law or under a contract and you do not provide it when requested, we may be unable to fulfil the contract we have or are seeking to enter into. We may then be unable to enter into the requested contract or may have to cancel a contracted service, in which case we will notify you.

For technical security and system diagnostics, D.O. LUCENA may record IP addresses in anonymised or pseudonymised form. An IP address identifies a device’s Internet access and allows devices, systems and servers to recognise and communicate with one another. This information may be used for website performance analytics.

Processing Children’s Data

Users providing personal data through website forms and expressly accepting its processing declare that they are over 14.

Access to and use of the website by children under 14 is prohibited. If D.O. LUCENA discovers that a child under 14 has provided personal data, we will delete it immediately. Parents or guardians may contact D.O. LUCENA to request deletion of data provided by children in their care who have misrepresented their identity or age.

All information supplied must be truthful. Users are responsible for the data they provide and must keep it up to date so it accurately reflects their circumstances. The person providing information is solely responsible for false or inaccurate statements and any resulting harm to D.O. LUCENA or third parties.

If you provide information about other people, you must obtain their consent. By doing so, you confirm that you have their permission and that they understand how the information will be used under this policy.

3. Purposes of Personal Data Processing

Personal data voluntarily provided through any means will be included in the processing activity records of D.O. LUCENA for these purposes:

  • Processing and managing requests for information or advice through this website, by telephone or email.
  • Providing services included on the website and/or supplying requested information online, by email or telephone.
  • Managing compliance with contractual or non-contractual obligations undertaken by D.O. LUCENA.
  • Handling requests for information, complaints, suggestions, claims and the exercise of data protection rights, by managing and processing the request.

We will only use personal data for the purposes for which it was collected, unless we reasonably consider another use compatible with the original purpose.

If we need to use personal information for unrelated purposes, we will notify you sufficiently in advance and explain the legal basis.

4. Legal Bases for Processing

Each purpose has a legal basis justifying the use of personal data:

  • The user has consented to request information through the Contact form or to send a complaint, suggestion, claim or similar communication. You may withdraw consent by contacting us, although this may affect our ability to provide the requested service.
  • The user has provided personal data within a contractual or pre-contractual relationship. Processing is necessary to enter into and/or perform a contract.
  • The user has given informed consent to tracking systems that report browsing habits, under the Cookie Policy.

Processing may also be necessary to comply with a legal obligation or to perform a task carried out in the public interest.

5. Who We Share Personal Information With

We may disclose personal information to the following third parties solely for the purposes described in this policy. Contact us for further information about disclosures.

The following third parties will only use personal information under our strict instructions and must ensure appropriate security measures:

  • Insurance companies.
  • Financial institutions managing payments and collections.
  • IT service companies.
  • System administration and IT service providers.
  • Professional advisers.

We may also disclose personal information where:

  • Required by law or by an administrative body with authority over us or you, for example under a court order or legal obligation;
  • We believe disclosure is necessary to help prevent or detect criminal activity, including fraud, or in the public interest.

6. Social Networks and Plugins

Our website uses social network plugins. They can be identified by the network logo, such as Facebook’s white “f” on a blue square or a thumbs-up symbol, or by their label. The following explains processing through these networks.

When you visit a page containing such a plugin, your browser establishes a direct connection with the social network’s servers. The network sends the plugin content directly to the browser, which integrates it into the website. We cannot influence the extent of data collected through these plugins, and can therefore only provide the following information.

Through the plugin, the network is informed that a user has opened the corresponding page. If logged into the network, it may associate the visit with their account. Interacting with a plugin, for example by clicking “Like” or commenting, sends the relevant information directly from the browser to the network, where it is stored. Even non-members may have their IP address detected and stored.

D.O. LUCENA does not know which buttons users have used or when. Please consult the network’s current data protection information for the purpose and scope of collection, subsequent processing and use, related rights and privacy settings.

To prevent social networks collecting data through our website, log out of those networks before visiting it.

Facebook Social Plugins

Our website uses social plugins from www.facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.

We do not know what data Facebook transmits or how it uses it. Information about collection purposes and scope, further processing and use, your rights and privacy settings is available in Facebook’s privacy policy.

Instagram Social Plugins

Our website uses plugins from www.instagram.com, operated by Instagram Inc., 1601 Willow Road, Menlo Park, California, 94025, USA.

We do not know what data Instagram transmits or how it uses it. Information about collection purposes and scope, further processing and use, rights and privacy settings is available in Instagram’s privacy information.

7. Cookies

A cookie is a small piece of information sent by a website and stored in a user’s browser, allowing the website to consult previous user activity.

Its main functions are:

  • User management: for example, storing a cookie after a username and password are entered avoids requiring them on every page. A cookie does not identify only a person, but a computer-browser-user combination.
  • Obtaining information about browsing habits.

Cookies can be accepted, configured or blocked through the website banner settings and deleted through the browser.

D.O. LUCENA uses its own and third-party cookies. For more information, consult our Cookie Policy.

8. Retention of Personal Data

We retain personal data only for as long as necessary and for the purpose for which it was originally collected. In particular, this includes periods when you or we may wish to bring a legal claim relating to the contracted service, or when retention is required by law or regulations.

Clinical documentation is subject to Article 17.1 of Spanish Law 41/2002 of 14 November, regulating patient autonomy and rights and obligations regarding clinical information and documentation. The minimum retention period is five years from discharge from the care process.

Data provided to manage requests for information, complaints, suggestions, claims or the exercise of data protection rights will be retained for the time needed to process the request, for legally required periods and for the period necessary to establish, exercise or defend claims.

Data processed to fulfil legal obligations will be retained for the period established in applicable legislation.

Data will remain blocked for the periods required by applicable regulations to address possible liabilities. After those periods, it will be deleted unless the individual has authorised processing for specific purposes for a longer period.

In some circumstances, we may anonymise personal data so it can no longer be associated with you for statistical purposes. Such information may be used indefinitely without further notice.

9. International Transfers

D.O. LUCENA currently makes no international transfers of personal data outside the European Union.

If this changes, we want to ensure data is stored and transferred securely. We will therefore transfer it outside the EU only where the recipient complies with data protection legislation and the transfer mechanisms provide appropriate safeguards for the data concerned.

10. Personal Data Security Measures

We have implemented appropriate technical and organisational measures to prevent personal data being lost, used or accessed accidentally or without authorisation, modified or disclosed, in accordance with Regulation (EU) 2016/679 and applicable national legislation.

We have also implemented procedures to address suspected personal data breaches. If one occurs, we will notify you and the relevant regulatory authority, the Spanish Data Protection Agency.

Although we strive to protect personal information, the nature of the Internet prevents a 100% security guarantee. Any online data transmission is therefore at your own risk, and we urge you to take all precautions to protect personal information online.

11. Your Rights

You may exercise, free of charge, your rights of access, rectification, erasure, objection, restriction of processing and portability, and the right not to be subject to a decision based solely on automated processing, including profiling.

Specifically, you may:

  • Request further details of our use of personal data, including special-category data.
  • Access personal data and obtain a copy of information you have provided.
  • Have inaccuracies corrected.
  • Have personal data erased where there is no longer a legal basis for its use.
  • Withdraw consent for future processing where consent is the legal basis.
  • Object to processing based on legitimate interests, unless our reasons outweigh the impact on your data protection rights.
  • Restrict use of personal data while a complaint is investigated.

In certain circumstances, we may have to restrict these rights to safeguard the public interest, such as preventing or detecting crime, and our interests, such as maintaining legal privilege.

Exercising rights is free. However, we may charge a reasonable fee if a request is clearly unfounded, repetitive or excessive.

These rights are personal, so you must prove your identity or that of your legal representative.

If identity is not adequately established or there is uncertainty about the right exercised, we will contact you for clarification.

We aim to respond to legitimate requests within one month. Occasionally, complex or multiple requests may take longer. We will notify you if this happens.

To exercise these rights, contact info@dolucena.com.

Use the subject “Personal Data Protection”, provide your full name, attach a copy of your identity card or other identification, and specify a notification address, the reasoned request, date and signature.

For questions about this policy or our processing of personal data, contact D.O. Protegida Aceite de Lucena at info@dolucena.com.

If you remain dissatisfied with our use of personal data or response to a rights request, you may complain to the SPANISH DATA PROTECTION AGENCY.

12. Other Websites

This website may link to third-party sites. They have their own privacy policies, and we accept no responsibility for those policies or their processing of personal information. Consult them before submitting information.

13. Changes to the Privacy Policy

Information collected is subject to the Privacy and Data Protection Policy in force at the time of collection.

We may occasionally need to amend this policy, for example because of new legislation, case law, new technology or other developments in personal data protection or privacy standards.

We recommend checking our website periodically for the latest policy.

14. Applicable Law

This Privacy Policy is governed in all respects by Spanish law. The parties expressly waive any other jurisdiction to which they may be entitled and submit to the courts of Seville, Spain.