PRIVACY POLICY
1. Data Controller
ERNESTO VENTÓS, S.A., (hereinafter, VENTÓS or the data controller), which is listed in the Madrid Company Register and is the holder of Tax ID Number A08329344, with registered address at Crta. Reial 120 B, 08960 Sant Just Desvern (Barcelona); telephone number +34934706210; and email address
The data controller adheres to the legislation in force regarding personal data protection, user privacy, and data confidentiality and security in accordance with the provisions of the applicable data protection legislation, as well as implementing the appropriate technical and organisational measures in order to ensure and be able to demonstrate that the data processing is carried out in compliance with the aforementioned regulations.
Personal data shall solely be collected for processing when they are appropriate, relevant and not excessive in relation to the scope and specific, explicit and legitimate purposes for which they were collected. The User declares that the data provided are accurate and correct, and undertakes to notify the data controller of any changes thereto.
2. Purpose of processing and legitimate basis
Contact:
The purpose of processing is the management of and response to enquiries and requests for information sent by the User to
The legitimate basis for processing is the consent given by the User when submitting their enquiry or request for information.
User registration:
The purpose is to manage the registration of users of the website.
The legitimate basis is the express consent provided by the User when registering.
Account registration for sector professionals:
The purpose is the management of the commercial and advertising relationship with sector professionals who create an account to operate on the online store.
The legitimate basis is the express consent provided by the data subject when creating the account and the fulfilment of the contract for the sale made online.
Curriculum Vitae Management:
The purpose is the management of applications for personnel selection processes through the website using the “Job Position” functionality.
The legitimate basis for processing is the consent provided by the User when applying for the vacant job position.
Contractual relationships:
The purpose is the management and fulfilment of contractual relationships and/or the management of a contracted service.
The legitimate basis is the fulfilment of a contract and/or contracted service.
Advertising and commercial promotion of products, services and activities of interest related to the chemical sector and aromatic essences:
The purpose is the sending of information and commercial promotion of products, services and activities of interest related to the chemical sector and aromatic essences.
The legitimate basis is the express consent of the data subject.
Cookies:
The purpose is that indicated in the Cookie Policy.
The legitimate basis, with the exception of technical and necessary cookies, is the consent provided by the User in the banner when accessing the website or in the cookie settings panel.
Ethical Channel:
The purpose is the management of communications regarding non-compliance with legal or internal regulations by a User with a working relationship with the data controller or users covered by the Policy of the Internal Reporting System – Ethical Channel of the data controller. The aforementioned Policy is available for consultation on the digital platform.
The legitimate basis is compliance with a legal obligation to which the data controller is subject.
The User, in those cases in which the legitimate basis for processing is consent, may revoke such consent at any time by contacting the data controller at the email address
3. Data category
With regard to processing activities in which personal data are collected, including those carried out on the website, only data that are appropriate, relevant and not excessive in relation to the scope and purposes of the processing shall be requested and processed. Such data include identification and contact data such as name and surname, email address, telephone number, address and bank details for payment management.
The data shall not be disclosed to third parties except in circumstances in which the data controller is legally obliged to do so.
The data controller may lawfully disclose personal data to third-party data processors in order to ensure the fulfilment of a contract or the provision of a service, in which case the corresponding data processing agreement shall be formalised obliging such processors to process the data in accordance with the instructions and for the purposes specified by the data controller, ensuring equivalent levels of security and privacy.
4. Storage period
Personal data shall be stored for the period strictly necessary to fulfil the purpose for which they were collected or until consent is withdrawn by the User, without prejudice to any storage required to comply with legal obligations to which the data controller is subject or to address any potential liabilities arising from the services and products offered and the processing of personal data, in which case the data shall be stored in a protected manner until the end of the limitation period.
The withdrawal of consent shall not affect any processing performed prior to such withdrawal, which shall remain valid and lawful.
In the event that a curriculum vitae is received as part of an open selection process to fill a specific position, the storage period of the personal data shall be the duration of the process, unless the interested party has granted their consent for such data to be stored for future personnel selection processes, in which case the storage period shall be 24 months.
5. User Rights
In accordance with the regulations in force regarding personal data protection, the User may exercise the following rights:
- The right to withdraw consent at any time.
- The right to be informed of whether the data controller processes the personal data of the User.
- The rights of access, rectification, portability and erasure of their data, and the right to restrict or object to processing.
- The right not to be subject to automated individual decisions, including profiling.
- The right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) when the User believes that the data controller has violated their rights with respect to the processing of personal data.
The User may exercise their rights at any time and free of charge by contacting the data controller in writing at the email address
However, should the data controller have reasonable doubts regarding the identity of the natural person making the request, the data controller may request that additional information be provided to confirm their identity.
6. Social Media
This Website may make links available to Users that allow access to channels and websites that the data controller has on various platforms and social networks belonging to and/or managed by third parties (e.g. Instagram, LinkedIn). The sole purpose of such links is to enable Users to access these channels on the various platforms and social networks so that they can be informed about the activities and news relating to the products and services of the data controller. For further information, please consult our Legal Notice.
7. Cookies
This website uses first- and third-party cookies. Therefore, in compliance with Article 22 of the current Information Society Law, we request the informed consent of the User for the processing of cookies, informing them of the option to reject such cookies or to set their processing preferences. For more detailed information, please consult the Cookie Policy.
8. Confidentiality and security of processing
Personal data are processed with the utmost discretion, confidentiality and security, employing the appropriate technical and organisational measures to prevent the loss, misuse, alteration, unauthorised access or copying of the data provided through the website.
9. Changes to the Privacy Policy
The data controller reserves the right to modify this Privacy Policy in accordance with legislative or regulatory requirements, or in order to adapt said Policy to any instructions from the Spanish Data Protection Agency; Users are therefore advised to regularly review it. When significant changes are made to this Policy, they shall be published on the website.
Last update: 11/06/2025.
