GFG Trading
This website is operated by GFG TRADING S.L., trading as GFG "GFG".
Registered office: C / De Menorca, 7, Valencia 46023 SPAIN. Tax identification number (NIF): ESB56399249.
Website: WWW.GFGTRADING.COM. Contact email: INFO@GFGTRADING.COM.
Telephone: +34 624 192 094.
Data Protection Officer contact: INFO@GFGTRADING.COM. If a different GFG entity is responsible for a particular service or transaction, its identity and relevant privacy information will be provided at the point of collection.
This Policy explains the processing of personal data through our website and professional dealings relating to food, animal feed and commodity trading. It covers website visitors, people making enquiries and individuals acting for customers, suppliers, and service providers. Corporate information is personal data only where it relates to an identifiable individual. Separate notices apply to employees, recruitment or other activities not covered here.
You may access the website and download publicly available material for legitimate information and business evaluation purposes. You must not misuse contact forms, submit unlawful or misleading content, impersonate another person, interfere with website security, introduce malicious code, access restricted systems without authorisation or reproduce content in violation of intellectual property rights.
Automated access must not circumvent technical controls, infringe rights or disrupt the service.
Depending on your interaction, information may include your name, professional role, company, business email and telephone number; enquiry content and correspondence; quotation, order, shipment, and invoice records containing contact details; and information necessary for relevant identity, payment, or compliance checks. Only data necessary for the relevant purpose should be provided.
Website information may include IP addresses, timestamps, browser and device details, pages requested and security logs. Optional analytics, advertising or embedded-content data is described in the Cookie Policy and depends on the technologies enabled and your choices. Please do not send sensitive personal data or identity documents through a general enquiry form unless specifically requested through an appropriate channel.
We receive information directly from you and, where relevant, from your employer or business, transaction counterparties and service providers involved in the commercial relationship. Any additional source used for compliance screening or professional contact research is identified here: INFO@GFGTRADING.COM.
Where information is obtained indirectly, the applicable privacy information will normally be provided within one month, at the first communication with you, or before the first disclosure to another recipient, whichever is earlier, subject to lawful exceptions.
The applicable legal basis depends on the purpose and your relationship with GFG. A contract with your employer is not, by itself, a contractual legal basis for processing your personal data. The following entries apply only to activities GFG carries out.
Legitimate interests are assessed against your rights and reasonable expectations. We limit processing to what is necessary and provide the right to object. Consent is requested separately where needed; reading this Policy or accepting website Terms does not give consent to marketing or optional cookies.
Required and optional information
Required fields are identified on the relevant form. Without necessary contact or transaction information, we may be unable to answer your request, conclude or perform a contract, or meet a legal obligation. Optional fields may be left blank. Consent to marketing or optional cookies is not required to submit an ordinary business enquiry.
Retention depends on the purpose, legal requirements, and any relevant dispute. The following criteria govern the retention schedule; the actual periods approved by GFG must be reflected in its systems and records.
At the end of the relevant period, data is deleted or irreversibly anonymized, unless lawful restricted retention is required. Where Spanish law requires blocking, data is restricted for the applicable liability period and made available only as legally permitted. Backups follow an approved expiry cycle and are not used to restore deleted data to ordinary use.
Who may receive information
Access is limited to people and organizations needing information for an identified purpose. Depending on the transaction or service, recipients may include authorized GFG staff; contracted hosting, email, IT and business-system providers; banks and payment providers; freight, customs and inspection partners; accountants, legal advisers and insurers; and competent public authorities where disclosure is required or lawfully justified.
Service providers acting as processors must operate under appropriate data-processing terms and instructions. Other recipients may act as independent controllers under their own responsibilities. Any sharing with GFG affiliates, joint controllers, advertising partners or additional recipient categories must be specified here if applicable: [CONFIRM ACTUAL ARRANGEMENTS OR REMOVE].
Data may be transferred outside the European Economic Area (EEA) where a transaction partner, service provider, hosting arrangement or remote support operation involves a recipient in a third country. The applicable destinations, recipient categories and safeguards are identified below. This section must reflect actual arrangements, including access from outside the EEA.
Transfers must have a lawful processing basis and satisfy GDPR Chapter V. Where applicable, a European Commission adequacy decision or appropriate safeguards, such as the Commission’s Standard Contractual Clauses, may be used. Reliance on a recipient-specific adequacy framework requires verification of that recipient’s eligibility and covered processing. Where required, destination risks must be assessed, and supplementary protections applied.
Article 49 exceptions are available only under their specific conditions and are not a general substitute for safeguards in routine transfers. To request details or a copy of relevant safeguards, contact INFO@GFGTRADING.COM. Necessary redactions may protect confidential information without preventing an understanding of the protections. If no transfers occur, replace this section with an accurate statement confirmed against all providers and access arrangements.
Cookies and similar technologies
Our Cookie Policy identifies actual cookies and similar technologies, their providers, purposes, duration, and relevant data transfers. Technologies strictly necessary for a service requested by the user may be exempt from consent; other technologies are activated only after the required choice.
Where consent is required, the consent interface offers acceptance and rejection with equivalent prominence, together with granular settings. Continuing to browse is not consent. You can withdraw or change your choice through [COOKIE SETTINGS LINK OR CONTROL] as easily as you gave it. Browser controls are an additional option; blocking necessary technologies may affect requested functions.
Commercial communications
Electronic marketing is sent only where Spanish law permits, including with prior consent or under a qualifying existing-customer exception for GFG’s own similar products or services. A legitimate interest does not, by itself, authorize unsolicited electronic marketing. Each marketing message provides a straightforward, free way to opt out. Withdrawal or objection does not prevent necessary transaction, safety, or legal communications.
Your rights and policy updates
Your data protection rights
Subject to the conditions in applicable law, you may request access to your personal data and a copy, correction of inaccurate or incomplete data, deletion, or restriction of processing. Deletion is not absolute: certain information may need to be retained for legal duties or legal claims.
You may object to processing based on legitimate interests for reasons relating to your situation. Such processing must cease unless overriding compelling legitimate grounds or grounds relating to legal claims apply. You may object to direct marketing, including associated profiling, at any time; processing for that purpose will stop.
Data portability applies to data you have provided where processing is automated and based on consent or a contract with you. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have protections concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects, subject to the conditions and exceptions in GDPR.
How to exercise your rights
Contact INFO@GFGTRADING.COM or write to 46023, explaining your request. We may ask for proportionate additional information where reasonably necessary to confirm identity; an identity-document copy is not routinely required for every request. A representative may act with appropriate evidence of authority.
We respond without undue delay and normally within one month of receipt. Where complexity or the number of requests justifies it, the period may be extended by up to two further months; we will inform you within the first month and explain why. Requests are generally free. Where a request is manifestly unfounded or excessive, GDPR permits a reasonable fee or refusal, with reasons and information about available remedies.
You may lodge a complaint with the Spanish Data Protection Agency (AEPD), through www.aepd.es, or with another competent supervisory authority, including in the EEA country of your habitual residence, workplace, or the alleged infringement. Contacting GFG can help resolve a concern but does not remove your right to complain or seek judicial remedies.
Security scope and updates
Appropriate technical and organizational safeguards must be maintained in proportion to the risks, with access limited to authorized purposes. No internet transmission or system can be guaranteed completely secure. Please use the privacy contact to report a suspected issue. The website and ordinary commercial services are intended for professional users; information concerning children should not be submitted unless there is a specific lawful reason and suitable notice.
We may update this Policy to reflect changes in processing or legal requirements. The effective date identifies the current version. Material changes will be communicated appropriately; a new purpose requiring consent or further information will not be authorized merely by updating this text.