Privacy policy
Through this website (HTTPS://staging-11ac enlagloriasaladhouse.wpcomstaging.com), personal data necessary for the management and maintenance of some of our services is collected.
We inform you that THE WEBSITE OWNER (Data Controller) complies with Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD), the EU Regulation 2016/679 on Data Protection (hereinafter, GDPR), and other current and applicable regulations at all times, ensuring the correct use and processing of user’s personal data.
In accordance with Article 13 of the GDPR and Article 11 of the LOPDGDD, this Privacy Policy applies to the processing of personal data carried out by ENLAGLORIA SALADS, S.L., as the Data Controller, in relation to the data that users and/or customers (natural persons) provide as a result of requesting information and/or contracting the services and/or products offered and marketed through its website or collected in any section of the website.
DATA CONTROLLER’S IDENTITY
- Data Controller: ENLAGLORIA SALADS, S.L.
- Address: C/ AVENIR, 66, 08021, BARCELONA
- VAT Number (CIF): B67291393
- Email: HOLA@ENLAGLORIASALADHOUSE.COM
PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data will be used for the general purpose of managing and controlling the established commercial relationship and, specifically, for:
- Managing full access and proper use of services and/or products by users.
- Communicating with users in response to incidents, requests, comments, and questions made to us through the services and/or products, as well as through the contact forms on our website (including emails and/or phone calls).
- Providing, updating, maintaining, and protecting the services and/or products and their activities.
- Offering new services and/or products, special offers, or updates.
- Managing personnel selection processes in the hiring of workers and/or collaborators, if applicable.
- Communications: We may send you emails, messages, and other types of communication regarding the services and/or products, technical matters, and changes to them. These communications are considered part of the services and/or products, and you cannot opt out of them.
- Commercial Communications (Marketing): We may use your data to contact you, both electronically and non-electronically, to conduct surveys, gather your opinion on the services provided, and occasionally notify you of changes, significant developments in the services and/or products, offers, and promotions of our services and/or products or those of third-party companies related to us. These commercial offers will always require the express and separate authorization of the user, who can revoke their consent to receive these notifications at any time using the mechanism implemented for this purpose or through the account preferences.
We will not process your personal data for any other purpose beyond those described above unless required by law or there is a judicial requirement.
DATA RETENTION PERIOD
The personal data provided will be retained and processed for the duration of the provision of services and/or products, without prejudice to the possibility of exercising your data protection rights (access, rectification, erasure, opposition, restriction, portability, and the right not to be subject to automated individual decisions).
The personal data of individuals interested in receiving information about services and/or products will be kept in the system indefinitely unless the individual requests their deletion.
LEGAL BASIS FOR PROCESSING
ENLAGLORIA SALADS, S.L. processes your personal data in accordance with the following two (2) legal bases: Consent of the data subject (1) and legitimate interest (2).
1. The consent of the data subject, given for the purposes described above, will be requested:
- Before processing your data,
- During the customer registration process, or
- At the time of sending communications from ENLAGLORIA SALADS, S.L.
Information requests sent to us require the data subject to voluntarily provide the necessary data for us to assist or provide services and/or products. However, the data subject is free to refuse to provide this data or subsequently revoke the previously granted consent to process their data. It should be noted that such refusal will result in our inability to fulfill the data subject’s request.
2. The legitimate interest of ENLAGLORIA SALADS, S.L. in maintaining and retaining its customers and/or users, and in better meeting their previously expressed expectations or interests, e.g., improving products, handling requests, inquiries or complaints, offering products similar to those contracted, informing about promotions, etc. This is without prejudice to ENLAGLORIA SALADS, S.L.’s compliance with all other obligations related to sending commercial communications via electronic means.
ENLAGLORIA SALADS, S.L. understands that, by providing this data, the data subject guarantees and takes responsibility for their truthfulness, timeliness, and accuracy, and expressly accepts and consents to their processing for the purposes described above.
RECIPIENTS OF DATA TRANSFERS OR DISCLOSURES
In general, ENLAGLORIA SALADS, S.L. will not transfer your personal data to third parties unless we are legally obligated to do so or you have expressly authorized us to do so when using our services and/or products.
ENLAGLORIA SALADS, S.L. will not make international transfers of the personal data collected through this website, except in the following cases:
- When the international transfer of data is necessary for the execution of a contract or pre-contractual measures in which the data subject is involved.
- When the international transfer of data is required by applicable law.
- When the international transfer of data takes place with the express consent of the data subject.
- When the international transfer of data occurs because the website is hosted on servers located outside the European Economic Area.
In any case, in situations where international data transfers may occur, ENLAGLORIA SALADS, S.L. will ensure that the importing country of the data provides an adequate level of protection in accordance with current regulations.
RIGHTS OF DATA SUBJECTS
Data protection regulations allow you to exercise the following rights with the data controller: access, rectification, opposition, erasure (“right to be forgotten”), restriction of processing, data portability, and the right not to be subject to automated individual decisions:
-
Right of access: Allows the data subject to know and obtain information about their personal data undergoing processing.
-
Right of rectification: Allows for the correction of errors, the modification of data that is found to be inaccurate or incomplete, and ensuring the accuracy of personal data.
-
Right of erasure: Allows the data subject to request the deletion of their personal data when it is no longer necessary for the execution or provision of the service.
-
Right of opposition: Allows the data subject to oppose the processing of their personal data or its cessation, except for legitimate reasons or for the exercise or defense of possible claims, in which case we will keep them blocked for the corresponding period.
-
Right to object to receiving advertising: Data subjects may object to receiving commercial communications. In this case, you can revoke your consent to receive these notifications at any time.
-
Restriction of processing: In certain circumstances, data subjects may request the restriction of the processing of their data, in which case the data will only be kept for the exercise or defense of claims.
-
Data portability: Data subjects can request to receive their data and have it sent to another data controller of their choice, in a structured, commonly used, and machine-readable format, provided that this is technically feasible.
-
Right not to be subject to automated individual decisions (including profiling): Data subjects have the right not to be subject to a decision based on automated processing that produces legal effects or significantly affects them.
Right to withdraw consent: The data subject has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent given when providing their data.
If you wish to exercise any of the aforementioned rights, please contact us using the contact details provided in the “Data Controller Identification” section, and include the following information: name, ID number, postal and email address for contact, indicating the type of right and specifying its conditions.
Right to lodge a complaint with the Supervisory Authority: ENLAGLORIA SALADS, S.L. also informs you of your right to file a complaint with the Spanish Data Protection Agency (www.agpd.es) if you believe that the processing does not comply with current regulations.
ADDITIONAL INFORMATION
Retention of Certain Data
ENLAGLORIA SALADS, S.L. informs that, in compliance with the provisions of Law 25/2007, of October 18, on the retention of data concerning electronic communications and public communication networks, it is required to retain and store certain traffic data generated during the course of communications for the purpose of providing them to authorized authorities when the legal circumstances specified in the law are met.
Recorded Data
Our servers automatically collect information when the user uses the services of the websites. This log data may include the IP address, device identification from which the products are accessed, the operating system, and device configuration.
Security Measures
Furthermore, you are informed that THE WEBSITE OWNER (Data Controller) has implemented the necessary technical and organizational security measures to ensure the security of your personal data and to prevent their alteration, loss, and unauthorized processing and/or access, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed, whether they come from human action or the physical or natural environment. Additionally, additional measures have been established to enhance the confidentiality and integrity of information within the organization, with continuous monitoring, control, and evaluation of processes to ensure the respect for data privacy.
SOCIAL MEDIA PRIVACY POLICY
This Social Media Privacy Policy of THE WEBSITE OWNER (Data Controller) concerns the personal data of users who register through their profile and/or browse with their social media user. By registering with their ID on social media, the user gives their express consent for the processing of their personal data in accordance with the current Privacy Policy.
Users are informed that when they provide their personal data through the information available on their social media account and/or user profile, THE WEBSITE OWNER/ SOCIAL MEDIA is the data controller for the personal data processing, unless other conditions are expressly informed in a specific processing.
In accordance with the applicable data protection legislation, THE WEBSITE OWNER/ SOCIAL MEDIA respects the privacy of users and the secrecy and security of personal data, adopting the necessary legal, technical, and organizational measures to prevent the loss, misuse, alteration, unauthorized access, and theft of the personal data provided, taking into account the state of technology, the nature of the data, and the risks to which they are exposed.
The personal data of users will only be obtained for processing when they are appropriate, relevant, and not excessive in relation to the scope and purposes for which they were collected. Therefore, their processing will be limited to the purposes indicated to users in each case.
When personal data is collected, users will be informed in advance in a clear and unequivocal manner about the circumstances related to the processing of their data, in accordance with the data protection requirements in force at all times. Furthermore, the personal data provided will be retained until the data subject requests their deletion or rectification, objects to the continued processing of their data, or in those processes that require their authorization, and does not withdraw their consent.
MINORS
Access and registration on the website or through social media is prohibited for individuals under the age of 14. If a minor or legally incapacitated individual wishes to register, the legal guardian or legal representative of the user must intervene through a valid document that proves the legal representation of the incapacitated user for access.
THE WEBSITE OWNER/ SOCIAL MEDIA is expressly exempt from any responsibility that may arise from the use of social media by minors or legally incapacitated individuals.