Who is responsible for the data processing?

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR), and with the rest of the legislation applicable in Spain regarding the protection of personal data, we hereby inform you that the personal data provided when completing and sending the forms published on this website will be processed by LANA S. COOP (hereinafter, LANA), with registered office at Apdo. 25, Bº Santxolopetegi, 24, 20560, Oñati (Spain) as the party responsible for the processing of the personal data provided.

For what purpose and on what basis do we process your data?

  • To respond to information queries about LANA. Legal legitimate basis: the express consent you provide by checking the checkbox (Art.6.1 a) GDPR).
  • For the management of CVs. Legal legitimate basis: consent of the data subject.
    (Art.6.1 a) GDPR).
  • For the processing of contractual relations.
    Legitimate basis: (Art.6.1 a) GDPR).

To whom will we communicate your personal data?

  • External technological service providers, such as maintenance services and IT services, consultancy services, who will process your data strictly according to the instructions of this entity, by means of signed agreements on data protection.

  • Those third parties, public bodies and institutions to which it is legally obligatory to provide them, as well as the State Security Forces and Bodies and jurisdictional bodies.



How long will we store your data?

The personal data obtained through the contact or information request form will only be stored for the time necessary to deal with and follow up your request.

Our customers’ personal data will be stored for the duration of the contract and thereafter until the prescription of possible liabilities.

Personal data relating to job candidates will be kept for a period of one year from the end of the selection process.

Do we perform international data transfers?

LANA does not perform international data transfers.

How can you exercise your rights in relation to your personal data?

To revoke the consents granted, as well as to exercise the rights of access, rectification, cancellation, suppression, opposition, limitation, portability and non-submission to automated decisions, you may send a written request to the following e-mail address or to the address Apdo. 25, Bº Santxolopetegi, 24, 20560 Oñati, Spain.

The request must include: name and surname(s) of the interested party and specification of the object of the request.

If the interested party considers that the aforementioned rights have not been complied with in accordance with current legislation, he/she may file the corresponding claim for the protection of rights with the Spanish Data Protection Agency