Privacy Policy

Who is responsible for your data?

In accordance with the provisions of Organic Law 3/2018 of 5 December on Personal Data and Digital Rights Protection (LOPD), and the General Data Protection Regulation (RGPD) of 27 April 2016, we inform you that the personal data provided will be processed by GM VENDING S.A., with Tax ID No. A31538937,with registered office at Pol Vizcaya, Calle A, Número 6 – 31119, Torres de Elorz (Navarra, Spain) and registered in the Commercial Registry of Navarra, Volume 436, Sheet 132, Page NA-9560.

For what purpose do we process your personal data?

The data you supply is needed in order to provide you the requested service with total guarantee and will be processed for the following purposes:

– advertising and
– market research.

In case your data would be process for any other purpose a previous consent will be required with information about it.

What categories of data do we process?

In accordance with the aforementioned purposes, GM VENDING, S.A. processes the following categories of data:

– Identifying data: name, surname, NIF, postal address, email, zip code, telephone.
– Credit and debit card information for the purpose of payments.
– Traffic and location data: see our Cookies Policy for more information.
– Electronic communications metadata.

These personal data are essential and, therefore, mandatory in order to provide the services we offer, so the refusal to provide them will make it impossible for GM VENDING, S.A. to provide the contracted services. You guarantee that the provided data are true, exact, complete and up to date, assuming responsibility for any direct or indirect damage or harm that may be caused as a consequence of non-compliance with this obligation.

How do we obtain your data?

GM VENDING, S.A. obtains your data from the following sources:

1. The information that you provide us when you contract our services.
2. The information you provide us when you register your personal account

How do we store your data?

The personal data you provide to GM VENDING, S.A. may be stored in automated or non-automated databases, whose ownership corresponds exclusively to GM VENDING, S.A., who assumes all the technical, organizational and security measures that guarantee the confidentiality, integrity and quality of the information contained therein in accordance with the provisions of current data protection legislation. Nevertheless, you should be aware that the security measures of computer systems on the Internet are not entirely reliable and that, therefore, GM VENDING, S.A. cannot guarantee the non-existence of viruses or other elements that may cause alterations in the user’s computer systems (software and hardware) or in its electronic documents and files contained therein, although GM VENDING, S.A. puts all necessary means and takes the appropriate security measures to avoid the presence of these harmful elements

How long do we keep your data?

The personal data supplied will be kept for as long as service is provided and/or to meet any possible liabilities, as well as the defense of claims, all this as long as you do not revoke the consents granted. In this case, or after this period has elapsed, your data may be kept and blocked for the legally established periods.

Why is the processing of your personal data legitimate?

You give to GM VENDING, S.A. your informed and unequivocal consent by providing your contact details.

Who will my data be sent to?

Your data will not be transferred to third parties unless it would exist a legal requirement to do so with any of the following entities, attending at all times to the intended purposes:

– To the Public Administrations in compliance with the legal obligations applicable to us in accordance with current legislation.
– To the State Security Forces and Corps by virtue of the provisions of the applicable legislation.
– To banks and financial institutions for the collection of rendered services.
– To our ancillary service providers, which are essential for the proper provision of contracted services (among others, hosting providers, messaging providers, providers of management services and / or tax advice, service providers for sending emails).

Due to the importance of guaranteeing the security and confidentiality of the information that will be shared, the corresponding data transfer contract will be signed with the above-mentioned entities. The transmission of data to any third party not listed above will only be possible for purposes directly related to those for which they were collected. It will therefore require the express written consent of the User, who will have been previously informed of the purpose for which their data will be used.

What are your rights when you provide us with your data?

Everyone has the right to request access to, rectification of, erasure of, restriction on the processing of, opposition to and the right to portability of their personal data by writing to our offices, or by sending an email to, indicating the right they wish to exercise and enclosing a copy of your ID card or substitute identification document. You also have the right to withdraw the consent given at any time. The withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. You have the right to submit a claim to the supervisory authority if you believe that your rights may have been violated in relation to the protection of your data. The necessary information is available on:

Are your data protected?

GM VENDING, S.A. is firmly committed to the protection of personal data and the privacy of our Users, so, to ensure the security and protect personal data collected in accordance with the provisions of this Privacy Policy, we want to guarantee that we carry out all necessary technical security measures to prevent its loss, manipulation, dissemination or modification.