DATA PROCESSING POLICY

ADDITIONAL INFORMATION ON THE PROCESSING OF YOUR DATA

Submission of this form is optional. In order for us to analyse it, you must confirm you have read and accept this data protection policy by checking the appropriate box. The information you provide about yourself, employees, suppliers, clients or business partners of MERCADONA (hereinafter, MERCADONA) for whom you submit this form or any other aspect related to MERCADONA, may result in decisions that affect the employees and other third parties involved in the reported incident. Therefore, we ask you to only provide information that is precise and accurate. The information you provide will be treated confidentially. Under no circumstances may the subject of the complaint know the identity of the complainant, without prejudice to the former being informed of the reported facts after the proper investigation has been carried out or the complaint results in legal proceedings.

Data Controller. MERCADONA, S.A. CIF A-46103834, C/ Valencia nº 5, 46016 Tavernes Blanques (Valencia)  

Purpose of Processing. MERCADONA personal data provided when completing this form within the framework of the use of the internal whistleblowing channel of MERCADONA shall be processed for the following purposes:

• To identify and contact you.
• To process the completed form to carry out the necessary investigation to provide a solution to the reported problem.
• To carry out as many procedures as needed in relation to the reported issue.

Legal Standing. The legal basis for the processing of your data is the consent provided when completing the form and the legitimate interest of Mercadona in managing and resolving the complaint and/or consultation relating to actions constituting criminal behaviour or acts or which breach the provisions of the Code of Conduct and the Guidelines on Ethical Behaviour. The personal data of the interested party will be processed by Mercadona in order to address the claim or consultation and exhaustively monitor its status, processing and closure.

The data requested are obligatory, except those which are expressly indicated otherwise, and refusal to supply such may result in the inability to provide a response. In the case the interested party provides data on third parties, said interested party declares that they have obtained the corresponding consent and undertakes to transfer the information contained in this clause, similarly, in the case of providing data on third parties in relation to the internal complaint, states that the information provided is accurate and the provision there of is performed within the framework of the management of the channel and the monitoring thereof.

Data preservation. The data provided will be stored within the framework of the whistleblowing system for maximum period of three (3) months. However, MERCADONA may store the data for the necessary time with the aim of resolving the issue subject of the communication and/or complaint and to attend to any possible civil, criminal or other liabilities that could derive from such processing.

Data communication.  With the sole purpose of the processing, your personal data may be communicated to the appropriate departments, if applicable, to the Regulatory Compliance Committee, the Human Resources, Audit, Legal, Safety and Management departments of MERCADONA and entities of Grupo MERCADONA, as well as to external advisors (such as, legal advisors). Additionally, when applicable, the personal data and information may also be disclosed to the police and the judicial or competent authorities.

Rights. You have the right to:

- Obtain confirmation whether Mercadona is processing of your personal data or not.

- Access your personal data, require the rectification of inexact data and, if applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was gathered.

- Limit the processing of your data: In specific circumstances, you may request this, in which case it shall only be preserved for the exercise or defence of claims.

- In specific circumstances and due to reasons related to your situation, you may oppose the processing of your data. Mercadona will cease to process the data, unless due to imperative legal reasons, or in the exercise or defence of possible claims.

- Withdraw any consent granted without this affecting the lawfulness of the processing performed based on the consent prior to its withdrawal.

To exercise the above rights, you must send a letter signed by you, attaching a copy of your ID or passport, to Div. Jurídico Procesos de Mercadona S.A., C/ Ciudad de Liria N º5-7 - 46988 Polígono Fuente del Jarro - Valencia. However, if you have an electronic signature issued by the Fábrica de Moneda y Timbre, you may also complete the form on our website info.mercadona.es, Customer Service,, expressly stating the right you wish to exercise.

- Contact the Mercadona Data Protection Officer at dpo@mercadona.es

- File a claim before the Spanish Data Protection Agency.