Aleix Vilardebò Bofill informs website users about its policy regarding the processing and protection of personal data of users and clients.
And guarantees at all times the full and complete compliance with the obligations set forth by data protection regulations and information society services: Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDGDD), and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSIce).
DATA CONTROLLER
Aleix Vilardebò Bofill
Tax ID: 52595924F
Address: C/Baix 6, 08519 Tavèrnoles (Barcelona)
Phone: (+34) 679907733
Email: guieslegourmand@gmail.com
PURPOSES OF DATA PROCESSING
The data provided by the User are used for various purposes listed below:
| Purpose of processing | Legal basis for processing |
| Manage inquiries submitted through web forms. | Legitimate interest of the Company to address information requests through the website. Express consent provided at the time of data collection through web forms. |
| Sending newsletters, commercial communications, and promotions. | Express consent provided at the time of data collection through web forms. |
| Manage website incidents and maintenance. | Legitimate interest of the Company. |
DATA RETENTION PERIOD
| Purpose of processing | Retention period |
| Manage inquiries submitted through web forms. | We will process your data for as long as necessary to fulfill your request or petition. |
| Sending newsletters, commercial communications, and promotions. | We will process your data until you unsubscribe. |
| Manage website incidents and maintenance. | We will process your data for the time necessary to comply with applicable legal prescription periods. |
Purpose of processing Retention period
Manage inquiries submitted through web forms. We will process your data for as long as necessary to fulfill your request or petition.
Sending newsletters, commercial communications, and promotions. We will process your data until you unsubscribe.
Manage website incidents and maintenance. We will process your data for the time necessary to comply with applicable legal prescription periods.
DATA RECIPIENTS
To fulfill the purposes indicated in this Privacy Policy, it is necessary for us to grant access to your personal data to third parties who support us in the services we offer you (Data Processors).
The data processors for the execution of a contract or provision of a service to the Controller, following their instructions at all times and ensuring the same levels of security.
USER RIGHTS
The user has the right to:
• Request access to their personal data being processed and receive this information in writing through the requested means.
• Request the rectification of inaccurate personal data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purpose for which they were collected.
• Request the restriction of the processing of their data.
• Object to the processing of their personal data when applicable, in which case their data will no longer be processed except for legitimate reasons.
• Right to data portability when processing is based on consent and carried out by automated means. The data will be delivered in a structured, commonly used, and machine-readable format.
• Right to withdraw the consent given.
• Right to lodge a complaint with the Spanish Data Protection Agency.
The User can exercise the aforementioned rights by postal mail or email to the Controller, proving their identity with a scanned copy of their ID or equivalent document, and specifying the right they wish to exercise.
ORIGIN OF DATA
Personal data will be provided by the data subject themselves on a completely voluntary basis. The failure to provide certain data or answer questions that may be asked in the registration processes or in the various electronic forms presented to the User may make it impossible to access certain services for the provision of which personal data are essential. In such a case, the Controller will inform of the mandatory and/or necessary nature of providing personal data for the service to function.
The Controller assures you of the confidentiality of your personal data and guarantees their security, adopting the necessary measures to prevent their alteration, loss, unauthorized processing, or access.
INFORMATION PROVIDED BY THE USER
Minors under 18 years of age cannot provide their personal data without the prior consent of their parent/guardian and/or legal guardians.
Users, by entering their data in the contact forms or forms presented for download, expressly and freely and unequivocally accept that their data are necessary to fulfill their request by the Controller, with the inclusion of data in the remaining fields being voluntary.
The User guarantees that the personal data provided are truthful and is responsible for communicating any modification thereof.
All data requested through the website are necessary for the provision of optimal service to the User. If not all data are provided, it is not guaranteed that the information and services provided by the Controller will be completely adjusted to your needs.
SECURITY MEASURES
In accordance with the provisions of current regulations on personal data protection, the Controller complies with all provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, which are processed lawfully, fairly, and transparently in relation to the data subject, and are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
The Controller guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of Users and has communicated adequate information to them so that they can exercise them.
SECURITY BREACHES
The Controller will inform about any security breach affecting the database used by this website, or affecting any of our third-party services, to each and every person whose data may have been affected, and to authorities, within 72 hours following the detection of the breach.
APPLICABLE LAW AND JURISDICTION
The right is reserved to bring civil or criminal actions deemed necessary for the improper use of the Website and its Contents.
The relationship between the User and the Controller shall be governed by the current and applicable regulations in Spanish territory. Should any controversy arise in relation to the interpretation and/or application, the parties shall submit their conflicts to ordinary jurisdiction, submitting to the judges and courts that correspond according to law.
