ORDER ONLINE

PRIVACY POLICY

Through this website (HTTPS://staging-11ac-enlagloriasaladhouse.wpcomstaging.com), personal data necessary for the management and maintenance of some of our services is collected.

We inform you that THE WEBSITE OWNER (Data Controller) complies with Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (hereinafter, the LOPDGDD), EU Regulation 2016/679 on Data Protection (hereinafter, the GDPR), and other applicable regulations in force at any given time, ensuring the proper use and processing of the user’s personal data.

In accordance with Article 13 of the GDPR and Article 11 of the LOPDGDD, this Privacy Policy applies to the processing of personal data carried out by ENLAGLORIA SALADS, S.L., as Data Controller, in relation to the data that users and/or customers (natural persons) provide as a result of requesting information and/or contracting the services and/or products it provides and markets through its website, or that is collected in any section of the website.

IDENTITY OF THE CONTROLLER OF YOUR PERSONAL DATA

  • Data Controller: ENLAGLORIA SALADS, S.L.
  • Registered address: C/ AVENIR, 66, 08021, BARCELONA
  • Tax ID (CIF): B67291393
  • Email: HOLA@ENLAGLORIASALADHOUSE.COM

PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data will be used for the general purpose of managing and monitoring the established business relationship and, specifically, to:

  • Manage full access to and proper use of the services and/or products by users.
  • Communicate with users in response to incidents, requests, comments, and questions submitted through the services and/or products, as well as through the contact forms on our website (including emails and/or phone calls).
  • Provide, update, maintain, and protect the services and/or products and activities.
  • Offer new services and/or products, special offers, or updates.
  • Where applicable, manage recruitment processes for employees and/or collaborators.
  • Communications: We may send you emails, messages, and other types of communications regarding the services and/or products, technical issues, and changes to them. These communications are considered part of the services and/or products and you cannot opt out of them.
  • Where applicable, Commercial communications (Marketing): We may use your data to contact you, electronically or otherwise, to conduct surveys, obtain your opinion on the service provided, and, occasionally, to notify you of changes, important developments to the services and/or products, offers and/or promotions of our services and/or products or of third-party companies related to us. These commercial offers will, in all cases, be expressly and separately authorised by the user, who may withdraw their consent to receive these notifications at any time using the mechanism provided within them, or via the customer account preferences.

We will not process your personal data for any purpose other than those described above unless required by law or by a court order.

RETENTION PERIOD

The personal data provided will be retained and processed for as long as the service and/or product relationship is maintained, without prejudice to the possibility of exercising your data protection rights (access, rectification, erasure, objection, restriction, portability, and not being subject to automated individual decisions).

The personal data of individuals interested in receiving information about the services and/or products will be kept in the system indefinitely unless the data subject requests its deletion.

LAWFUL BASIS FOR PROCESSING

ENLAGLORIA SALADS, S.L. processes your personal data on the basis of the following two (2) legal grounds: the data subject’s consent (1) and legitimate interest (2).

1. The data subject’s consent given for the purposes described above, which will be requested:

  • Before we proceed to process your data,
  • During the customer registration process, or
  • At the time of sending communications from ENLAGLORIA SALADS, S.L..

Information requests you send us require the data subject to voluntarily provide the data necessary for us to assist you or provide the services and/or products. However, the data subject may freely refuse to provide such data or later withdraw the consent previously granted for processing their data, although such refusal will make it impossible for us to handle your request.

2. The legitimate interest of ENLAGLORIA SALADS, S.L. in maintaining and building customer and/or user loyalty and better meeting their previously expressed expectations or interests, e.g., improving products, managing requests, queries or complaints, offering products similar to those contracted, informing about promotions, etc., without prejudice to ENLAGLORIA SALADS, S.L.’s compliance with its other obligations regarding the sending of commercial communications by electronic means.

ENLAGLORIA SALADS, S.L. understands that, by providing us with such data, the data subject guarantees and is responsible for its truthfulness, currency, and accuracy, and expressly accepts and consents to its processing for the purposes described above.

RECIPIENTS OF DISCLOSURES OR TRANSFERS.

As a general rule, ENLAGLORIA SALADS, S.L. will not disclose your personal data to third parties unless we are legally obliged to do so or you have expressly authorised us to do so when using our services and/or products.

ENLAGLORIA SALADS, S.L. will not carry out international transfers of personal data collected through this website, except in the following cases:

  • Where the international data transfer is necessary for the performance of a contract or pre-contractual measures to which the data subject is a party.
  • Where the international data transfer is necessary under applicable legislation.
  • Where the international data transfer takes place with the data subject’s express consent.
  • Where the international data transfer takes place because the website is hosted on servers located outside the European Economic Area.

In any case, where international data transfers may take place, ENLAGLORIA SALADS, S.L. will verify that the data-importing country guarantees an adequate level of protection in accordance with applicable regulations.

RIGHTS OF DATA SUBJECTS.

Data protection regulations allow you to exercise the following rights before the Data Controller: access, rectification, objection, erasure (“right to be forgotten”), restriction of processing, portability, and not being subject to individualised decisions:

  • Right of access: Allows the data subject to know and obtain information about their personal data being processed.
  • Right to rectification: Allows errors to be corrected, data that is inaccurate or incomplete to be modified, and the accuracy of your personal data to be ensured.
  • Right to erasure: Allows you to request the deletion of your personal data when it is no longer necessary for the performance or provision of the service.
  • Right to object: Allows the data subject to request that their personal data not be processed or that such processing cease, except for legitimate reasons or for the exercise or defence of potential claims, in which case we will keep it blocked for the corresponding period.
  • Right to object to advertising: Data subjects may object to the sending of commercial communications. In that case, you may withdraw your consent to receive these notifications at any time.
  • Restriction of processing: In certain circumstances, data subjects may request the restriction of the processing of their data, in which case it will only be retained for the exercise or defence of claims.
  • Data portability: Data subjects may request to receive the data concerning them that they have provided to us or—where technically possible—that we send it to another controller of their choice, in a structured, commonly used, machine-readable format.
  • Right not to be subject to automated individual decisions (including profiling): Data subjects have the right not to be subject to a decision based solely on automated processing that produces effects or significantly affects them.
  • Right to withdraw consent: The data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of the rights set out above, please contact us using the contact details shown in “Identity of the Controller of personal data processing”, including the following information: first and last name, DNI number, postal and email address for contact, indicating the type of right and specifying its scope.

Right to lodge a complaint with the Supervisory Authority: ENLAGLORIA SALADS, S.L. also informs you of your right to lodge a complaint with the Spanish Data Protection Agency (www.agpd.es) if you consider that the processing does not comply with applicable regulations.

ADDITIONAL INFORMATION

Retention of certain data

ENLAGLORIA SALADS, S.L. informs you that, in compliance with the provisions of Law 25/2007 of 18 October on the retention of data relating to electronic communications and public communications networks, it must retain and store certain traffic data generated during the course of communications in order to disclose it to authorised authorities when the legal circumstances provided for therein apply.

Logged data

Our servers automatically collect information when the user uses the website services. This log data may include the IP address, the identification of the device used to access the products, the operating system, and the device settings.

Security measures

In addition, you are informed that THE WEBSITE OWNER (Data Controller) has implemented the necessary technical and organisational security measures to ensure the security of your personal data and prevent its alteration, loss, and unauthorised processing and/or access, taking into account the state of the art, the nature of the stored data, and the risks to which it is exposed, whether arising from human action or the physical or natural environment. Likewise, additional measures have been established to strengthen the confidentiality and integrity of information within the organisation, continuously maintaining supervision, control, and evaluation of processes to ensure respect for data privacy.

PRIVACY POLICY FOR SOCIAL MEDIA

This Social Media Privacy Policy of THE WEBSITE OWNER (Data Controller) applies to users’ personal data when registering via the profile and/or browsing using their social media account. By registering with your ID on social media, the user gives their express consent to the processing of their personal data in accordance with this Privacy Policy.

Users who provide their personal data with the information available through their social media account and/or user profile are informed that the latter is responsible for the processing of personal data carried out, unless other conditions are expressly stated for a specific processing activity.

In accordance with applicable data protection legislation, THE WEBSITE OWNER/SOCIAL MEDIA respects users’ privacy and the secrecy and security of personal data, adopting the legal, technical, and organisational measures necessary to prevent the loss, misuse, alteration, unauthorised access, and theft of the personal data provided, taking into account the state of the art, the nature of the data, and the risks to which it is exposed.

Users’ personal data will only be obtained for processing when it is adequate, relevant, and not excessive in relation to the scope and purposes for which it was collected. Therefore, processing will be limited to the purposes indicated to Users in each case.

When personal data is collected, the user will be informed beforehand clearly and unequivocally of the circumstances relating to the processing of their data, in accordance with the data protection requirements in force at any given time. Likewise, the personal data provided will be retained unless the data subject requests its erasure or rectification, objects to their data continuing to be processed, or, in processing activities that require authorisation, withdraws their consent.

MINORS

Access to and registration on the website or via social media is prohibited for minors under 14 years of age. If a minor or legally incapacitated person wishes to register, the intervention of the holder of parental authority or guardianship, or their legal representative, will be required by means of a valid document proving the legal representation of the incapacitated user for access.

THE WEBSITE/SOCIAL MEDIA OWNER is expressly exempt from any liability that may arise from the use of social media by minors or legally incapacitated persons.