Privacy Policy
Last updated: 31 May 2026
1. Data controller
- Controller: CECOAGRO CENTRAL DE COMPRAS, S.L.
- Tax ID: B27284546
- Address: Ctra. N-VI, km 518, 27373 Begonte, Lugo, Spain
- Email: export@avantispet.com
- Data Protection Officer: Not appointed. The appointment of a DPO is not mandatory under Art. 37 GDPR for an entity whose core activities do not consist of processing operations requiring regular and systematic monitoring of data subjects on a large scale, nor large-scale processing of special categories of data.
2. Regulatory framework
The processing of personal data is carried out in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
- Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
- Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
3. What data we process
We process the following categories of personal data:
Data provided by the User in contact forms and commercial enquiries: - Full name - Company - Position or job title - Country and market of activity - Email address - Phone number (when voluntarily provided) - Commercial information freely included in the message
Data automatically collected through browsing: - IP address - Browser and device type - Pages visited and time spent - Source of visit (referrer) - Data derived from cookies, as set out in the Cookie Policy
4. Purposes of processing
Personal data will be processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Respond to requests for commercial or distribution information | Consent (Art. 6.1.a GDPR) and pre-contractual legitimate interest (Art. 6.1.b GDPR) |
| Send commercial communications about products, brands and distribution opportunities within the Avantis Pet ecosystem | Express consent of the User (Art. 6.1.a GDPR) |
| Manage the commercial relationship with distributors and importers | Performance of contract (Art. 6.1.b GDPR) |
| Comply with applicable legal obligations | Legal obligation (Art. 6.1.c GDPR) |
| Analyse Website usage and improve its performance | Legitimate interest of the Controller (Art. 6.1.f GDPR) and, where applicable, User's consent |
5. Data retention periods
Personal data will be kept for the time necessary to fulfil the purposes for which they were collected:
- Commercial contact data: for as long as the commercial relationship or interest is maintained and, subsequently, during the legal periods applicable to the prescription of liabilities.
- Data for commercial communications: until the User withdraws their consent.
- Browsing data: according to the periods defined in the Cookie Policy.
Once the applicable periods have elapsed, the data will be deleted or anonymised.
6. Recipients of the data
The User's personal data may be communicated to:
- Data processors that provide services to the Controller (web hosting, email management, customer relationship management tools, analytics tools), with whom the Controller maintains the corresponding contracts in accordance with Art. 28 GDPR.
- Competent authorities when there is a legal obligation to communicate.
No other transfers of data to third parties are foreseen, except by legal obligation.
7. International data transfers
Some of the service providers used by the Controller may be located outside the European Economic Area (EEA). When international transfers occur, they will be carried out ensuring an adequate level of protection through:
- Adequacy decisions of the European Commission.
- Standard contractual clauses approved by the European Commission.
- Other safeguards provided for in Chapter V of the GDPR.
The updated list of providers with international transfers can be requested through export@avantispet.com.
8. User rights
The User may exercise the following rights at any time:
- Access to their personal data.
- Rectification of inaccurate or incomplete data.
- Erasure of data when no longer necessary.
- Objection to processing for reasons related to their particular situation.
- Restriction of processing in the cases provided for in the GDPR.
- Portability of data, where applicable.
- Withdrawal of consent previously given, without affecting the lawfulness of prior processing.
To exercise any of these rights, the User may contact export@avantispet.com, providing adequate identification and indicating the right they wish to exercise.
The User also has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the competent supervisory authority in their country of residence, if they consider that the processing of their data does not comply with current regulations.
9. Data security
The Controller has adopted the technical and organisational measures necessary to ensure the security of personal data and to prevent their alteration, loss, unauthorised processing or access, in accordance with the state of the art and the nature of the data processed.
10. Minors
The Website is not intended for minors. The Controller does not knowingly collect personal data from minors. If it is detected that a minor has provided data without the consent of their legal representative, such data will be deleted.
11. Modifications
The Controller may modify this Privacy Policy to adapt it to regulatory changes or to the evolution of the Website itself. Modifications will be published on this same page, indicating the date of last update.