European General Data Protection Regulation

Who is responsible for the processing of personal data collected through this website? 

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users of this website are hereby informed that the controller of their personal data is:

• Company name: Cenador de Amós, S.L.
• CIF: B39655873
• Address: Plaza del Sol s/n, 39793 Villaverde de Pontones, Cantabria (Spain)
• Contact email: info@cenadordeamos.com
• Main activity: Restaurant, catering and artisanal bakery.

Cenador de Amós, S.L. guarantees the confidentiality and protection of personal data provided by users through this website, in accordance with the provisions of this privacy policy.

Acceptance of this policy will be necessary in order to manage requests or enquiries via the contact form.

What personal data will we process and what is the requirement to provide it? 

Cenador de Amós, S.L. collects and processes only the personal data that is necessary and adequate for each specific purpose, always applying the principles of data minimisation and privacy by design.

The data that can be collected includes, but is not limited to:

• First name and surname
• Email address
• Telephone number
• County and postcode
• Shipping and billing information
• Your National Identity Document/Tax Identification Number and payment details

Providing this data is mandatory when required for the processing of queries, subscriptions, or purchases. If the requested information is not provided, we cannot guarantee the correct management of your request.

The user can freely navigate the website without needing to provide personal data, except when they wish to use specific forms or functionalities.

Certain site functionalities may require, with prior authorisation, the use of your device's geolocation data.

For what purpose do we process your personal data? 

Cenador de Amós S.L. informs the user that their data will be processed for the following purposes: 

1. Handling enquiries submitted via the website. We will carry out the necessary data processing for the handling of your information request, meaning we will process data such as your first name, surname, ID number, email, telephone number, province, and postcode. 
2. User navigation management through the web (cookie data processing) Your data will be processed in accordance with the cookie policy available on this page. 
3. Computer control of the webpage. We will carry out controls on the use of the website to prevent and detect any misuse. 
4. Newsletter/Blog Subscription Management. Whenever we have your express authorisation, we will carry out the processing operations of your data to manage your subscription to our newsletters. 
5. E-commerce. We will carry out the necessary data processing to manage purchases made on this website, including payment management and order dispatch. For this purpose, we will process data such as your name, surnames, national identity number (DNI), email, telephone number, address, province, postcode, and credit card details. Our company guarantees the security and confidentiality of all communications with our customers. All online payment transactions are carried out through a secure server, based on the SSL standard, which protects data against attempted breaches by third parties. 

What is the legal basis that permits the processing of your personal data? 

Cenador de Amós, S.L.'s processing of your personal data is based on different legal grounds, depending on the nature of your interaction with the website:

Consent of the data subject

When the user sends a query via the contact form or subscribes to our commercial communications (such as newsletters), the processing of their data is based on their express consent, given by ticking the corresponding box before submitting the form.

Execution of a contract

In the case of purchases made through our online shop, the legal basis that legitimises the processing of data is the contractual relationship existing between the buyer and Cenador de Amós, which is necessary for the management of the order, invoicing and shipment of the products purchased.

Legitimate interest

When a user accesses the website without providing personal data via forms or making purchases, the legal basis for processing technical or navigation data is the legitimate interest of the controller, based on the need to ensure the proper technical functioning, the security of the website, and the prevention of misuse.

In all cases, the user is informed of their rights and the possibility to withdraw consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.

How long will we keep your data for? 

The personal data provided will be retained for the time necessary to process your request, query or contractual management.

In the event of a purchase, data will be retained for the time necessary to:

• To correctly run the service.
• Comply with legal obligations (tax, accounting, commercial, etc.).
• To address potential liabilities arising from the processing, in accordance with legally established limitation periods.

Once these periods have ended, the data will be deleted with guarantees of confidentiality or, where applicable, blocked in accordance with current regulations.

To whom will we communicate your data? 

Cenador de Amós, S.L. will only communicate personal data when strictly necessary and in accordance with the legal bases provided for in the GDPR. Specifically:

Public Bodies or Competent Authorities, when required by law (e.g. Tax Agency, judicial authorities).

To technology service providers, such as hosting companies and web support services, who act as data processors under contract pursuant to Article 28 GDPR.

In the case of purchases, to logistics and transport companies, in order to carry out the delivery of the order. This assignment will include minimum data such as name, surnames, address, telephone number and, if required by identification regulations, DNI/NIF number.

All recipient entities are obliged to treat the data with confidentiality guarantees and exclusively for the stated purpose.

Social media and third-party services

Our website includes links or access to social networks (such as Instagram, Facebook, etc.). If the user is registered on any of them and clicks on the corresponding icon, the social network may link this interaction to their user profile.

Cenador de Amós is not responsible for the processing carried out by these platforms. We recommend consulting their privacy policies to understand how they use your data.

If analytical tools or integrated social buttons are used, these could involve situations of joint responsibility for processing, in accordance with Article 26 of the GDPR.

Will we send you commercial communications? 

Cenador de Amós, S.L. may send you commercial communications regarding its products, services, news, or promotions, only if you give your express consent.

These communications may be made by electronic means (email, SMS) or, where applicable, by post, always based on the voluntary, specific, and informed consent of the user.

Consent can be withdrawn at any time, without retroactive effect, by sending a request to the contact addresses indicated in this Privacy Policy.

Once you have requested to unsubscribe, we will immediately stop sending you marketing communications.

How did we obtain your data? 

The personal data processed by Cenador de Amós, S.L. has been provided directly by the user themselves through:

• The contact form available on the website.
• The shopping cart and forms associated with order management.

How can the user revoke their consent? 

The user will be able to withdraw their consent for the processing of their personal data at any time by sending an email to:

contable@cenadordeamos.com

This withdrawal will not affect the lawfulness of processing that has already taken place.

What are your data protection rights? 

The user has the right to:

• Access your personal data.
• Rectify the inaccurate data.
• Request their deletion once they are no longer needed or you have withdrawn consent.
• Requesting the restriction of treatment in certain circumstances.
• To object to treatment on grounds relating to your particular situation.
• Request the portability of your data, when the processing is based on consent or a contractual relationship and is carried out by automated means.

To exercise these rights, you may submit a request:

• By email to: contable@cenadordeamos.com
• Or, by post to the registered office stated above.

If you believe your rights have been infringed, you may submit a complaint to the Spanish Data Protection Agency (www.aepd.es).

Cookie List

On our page Cookies Policy You can consult the list of cookies used by our website and the purpose of each one.