Equatorial Coca-Cola Bottling Company S.L., (hereinafter, “Equatorial Coca-Cola”, “us”, or “we”) provides this privacy statement (hereinafter the “Privacy Statement”) to inform you how we collect, use, and manage the persona data that you share with us. Additionally, this privacy statement outlines how you can manage your preferences concerning the personal data that you provide to us.
The foregoing in consideration of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, hereinafter, “GDPR”), which governs the processing of personal data and the free movement of such data within the European Union.
This Privacy Statement addresses the following key areas:
- Identification of the website owner and data controller.
- What data will we obtain from you? Purpose, legal basis, and retention period.
- Data categories and data recipients.
- International transfers of personal data.
- How can you contact us? What are my rights as an interested party?
- Cookies.
- Processing of the personal data of minors.
- How do we protect your data?
- EthicsLine
1- Identification of the website owner and data controller.
The owner of this website is Equatorial Coca-Cola with registered address at Avinguda Diagonal 682, 6th Floor, Postal Code 08034, Barcelona, Catalonia, Spain. It holds the tax identification TIN B 61518064.
Equatorial Coca-Cola is also the data controller.
2- What data will we obtain from you? Purpose, legal basis, and retention period.
The data that we collect and process via our website is any information relating to an identified or identifiable individual that you make available to us. More specifically, the data is related to (a) the browsing of the website or (b) your CV, if you use the form posted in the section “Work for us”.
We do not use your personal data for automated decision-making, including profiling.
| Data Subject | Collected Data | Data Processing Purpose | Legal Basis for Processing Data | Retention Period |
| Website Browser | IP address, domain name, your browser version and operating system, traffic data, location data, and web logs. | Where we have obtained your consent, we use cookies and similar tracking technologies to: (1) monitor browsing habits on our website; (2) measure website performance, including the number of visits, average time spent on the site, and pages viewed; and (3) operate, maintain, improve, and provide all functionalities of our website and related online services. | Legitimate interest to measure the use and to improve the content of our website. | See our Cookies Policy |
| Job Applicant | The information provided in your CV as submitted by the job applicant. | To process the application, manage candidate data, assess suitability for the role, and contact the candidate. | The consent given by ticking the acceptance box. | We will retain the candidate´s data for a period of two years from the date it is received |
Paragraph. Failure to provide the data identified in the “Collected Data” column may prevent us from processing and delivering the necessary operations that rely on it. You have the right to refuse or withdraw your consent, at any time, for any data processing based on your consent.
3- Data categories and data recipients:
We may disclose personal information for the purposes described below:
- Cookies:
- Service Providers: we may share cookies with web developers, strictly for the purpose of monitoring website usage and performance. Said provider may access cookie data only to the extent necessary to fulfill their contractual obligations. We require adhesion to strict confidentiality and data protection standards.
- Law Enforcement: we may share your personal data to comply with applicable laws, regulations, or legal processes, or when we believe it is necessary to protect the integrity of our services, ensure security, or defend our legitimate interests.
- Business Transfers: we may share personal data with a purchaser, successor, or assignee in connection with a merger, acquisition, restructuring, or sale of our business or assets.
- CV:
- Law Enforcement: we may share your personal data to comply with applicable laws, regulations, or legal processes, or when we believe it is necessary to protect the integrity of our services, ensure security, or defend our legitimate interests.
- Business Transfers: we may share personal data with a purchaser, successor, or assignee in connection with a merger, acquisition, restructuring, or sale of our business or assets.
The data that you provide will be stored in data center located in Barcelona, Spain. ECCBC has implemented appropriate measures to safeguard your data and prevent unauthorized access. In addition, the personal data we collect will be processed in accordance with the technical and organizational measures set out in our internal policies.
If you wish, you may request a list of the categories of service providers that have access to your personal data by writing to the address given for exercising your rights.
4- International transfers of personal data
We do not make any international transfers of any category of personal data obtained from the website.
5- How can you contact us? What are my rights as an interested party?
You may contact us at any time if you need assistance with how we process your personal data. More specifically, you may exercise your rights of (1) data access (confirmation as to whether or not your personal data is being processed, and, where that is the case, access to said personal data), (2) data rectification (correction of inaccurate personal data), (3) data erasure (elimination of personal data), (4) data restriction (limit how your personal data is used), (5) data portability (receive and port your personal data), and (6) data objection (stop certain types of data processing), by writing to the following addresses:
- (i) Equatorial Coca-Cola´s Compliance Function, Av. Diagonal 682, 6th Floor, 08034, Barcelona, Catalonia, Spain.
- (ii) privacy@eccbc.com.
You are reminded that should you not agree to your personal data being processed, you are entitled to file a claim with the Spanish Data Protection Agency (AEPD), at https://www.aepd.es/.
6- Cookies
We use cookies. You can find detailed information about the use of cookies and your consent at the following link on our website: Cookies Policy.
7- Processing of the personal data of minors
Our services must only be used by people aged 14 and over. Therefore, should you not be of this age you should refrain from using them.
We may require official documentation to prove your age.
8- How do we protect your data?
Equatorial Coca-Cola has taken the appropriate steps to safeguard your data. We apply appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including access controls, encryption of data in transit, and staff confidentiality obligations.
9- EthicsLine
Equatorial Coca-Cola´s Ethics Line is hosted by Navex. See https://www.navex.com/en-us/privacy-statement/#privacy-statement
Effective Date: September, 2025