WEB PRIVACY POLICY

Entrecartas hostelería digital S.L., with registered office at Rúa Areal, 8 Bajo 15172 Oleiros, A Coruña (Spain), CIF B70486485. As a company, we are committed to respecting and protecting the privacy of all the individuals with whom we interact. We are also committed to the processing of personal data always in a transparent manner and in accordance with the applicable law on the protection of personal data.

This privacy policy explains in detail the types of personal data that we collect about you when you interact with us. Entrecartas hostelería digital S.L. is responsible for the processing of personal data that you provide to us, among others, through this website.

This Privacy Policy explains:

What information do we process?
How we use this information
How long will we process the data
How we protect your personal data
With whom we share information
Information transfers between group companies
Your rights
Our responsibility for web links
Updates
How to get in touch with us

In the Additional Information section we explain the meaning of “personal data”, as well as other terms used in this policy.

What information do we process?

We will obtain information about you and / or about the use of our services in the following way:

Identification and contact information

We obtain your contact information when you request us to send notices through your email when you complete the registration form or when you send us an inquiry. The personal data included would be your name, surname, telephone and email address.

Minors

We try not to get information about children under 16. If you are concerned about the privacy of your children in relation to our services or if you think that your child may have provided us with personal data, please contact us at info@entrecartas.com. We will remove such information from our records within a reasonable time.

How we use this information

Except for legal obligations, we will only use the personal data you provide us for the following purposes:

Manage the registration;
Send you information about our services through our newsletters;
Respond to your requests and comments;
Analyze and / or improve our services;
Share your data with group companies for administrative and management purposes; and
Comply with legal obligations.

The data protection legislation obliges us to communicate the legally established bases that allow us to process your personal data. For the most part, the processing of your personal data is based both on compliance with the relationship.

In the table below we inform you of the purposes for which we process your data and the legitimating bases on which the treatment depends. Please note that the processing of your data may be based on more than one legitimate basis, depending on the specific purposes for which we use such data.

1. Purpose / Activity

Manage your registration.

Types of personal data processed

(a) name

(b) Email address

(c) Telephone

(d) Company

(e) Shipping address

Legitimizing basis, including legitimate interests

The legitimating basis that allows us to process this data is the execution of the contractual relationship.

2. Purpose / Activity

Send you information.

Types of personal data processed

(A name

(b) Email address

(c) Company

(d) Location

Legitimizing basis, including legitimate interests

It is based on legitimate interest. You can request the cessation of such communications at any time by clicking on the unsubscribe link at the end of the message.

3. Purpose / Activity

Respond to requests and comments.

Types of personal data processed

(A name

(b) Email address

(c) Telephone

(d) Company

(e) Location

Legitimizing basis, including legitimate interests

Responding to communications you send us requesting information about our products is included in our legitimate interests.

4. Purpose / Activity

Improve and develop the website: We perform statistical analyzes on your use of the website, p. eg, to know how to improve the website, offer new features and material, etc.

Types of personal data processed

(a) Technical data

(b) Navigation and use

(c) Location

Legitimizing basis, including legitimate interests

Necessary for our legitimate interests (define the type of client of our services, keep the website updated and relevant, develop our services and determine our marketing strategy).

5. Purpose / Activity

Share information with our service providers.

Types of personal data processed

(A name

(b) Email address

(c) Navigation and use

(d) Technical data

Legitimizing basis, including legitimate interests

Our legitimate interests allow us to share information with trusted companies that provide us with services to carry out our services.

6. Purpose / Activity

Sharing information between companies of the Entrecartas hostelería digital S.L.

Types of personal data processed

(A name

(b) Email address

(c) Location

(d) Navigation and use

Legitimizing basis, including legitimate interests

Due to the global presence of Entrecartas hostelería digital S.L., our legitimate interests allow us to share data with other Group companies in order to manage the business of providing our products and services effectively.

7. Purpose / Activity

Sharing information with other third parties, such as legally competent authorities and public administrations.

Types of personal data processed

(a) Name and surname

(b) Email address

(c) Telephone

(d) Location

(e) Use

(f) Technical data

Legitimizing basis, including legitimate interests

We will share your data when any legal provision obliges us to do so or in order to satisfy our legitimate interests.

How long will we process the data

We will keep your personal data for the time necessary for the provision of the corresponding services, in accordance with our legal obligations. Once the treatment is finished, your personal data will remain blocked and only available to the competent authorities until the responsibilities that may derive from the treatment are prescribed, after which they are safely deleted, or anonymized so that we can continue to use them for analytical purposes. You can request more information at the contact points indicated in this Privacy Policy.

How we protect your personal data

We employ appropriate organizational and technological measures to help protect your data against unauthorized use and access and accidental loss, alteration or destruction. We also try to make our suppliers do the same.

Information shared with our service providers

We use third parties to carry out certain functions of our business on our behalf. We will only give them access to the information necessary to provide the contracted services. Our service providers are contracted to comply with our instructions and we require that they do not use personal data for their own purposes.

Information shared with other entities

The law may require or enable us to provide personal data to third parties such as competent authorities and public administrations, for example, in response to court orders or subpoenas or to requests from competent authorities in the exercise of their legally attributed functions, or when we believe that it is It is necessary to investigate, prevent or take actions in relation to illegal activities.

We will not sell or rent your personal data to third parties.

Information transfers between group companies

Entrecartas hostelería digital S.L. is a media group made up of different companies. For this reason, from time to time we will communicate your personal data to other group companies. Access to your data will always be limited by the need to use the data to provide the requested services or to carry out necessary or legitimate actions (need-to-know principle). Some of the group’s companies are located outside the European Union, but we will always ensure that such communications and transfers are carried out with the security required by the applicable data protection legislation.

We will only transfer your personal data outside the European Union after having verified, in accordance with the applicable data protection legislation, that there is an adequate level of security for the protection of the integrity and security of any information processed. These measures may include the use of standard contractual clauses approved by the European Commission and, when the data is transferred to the United States of America, the EU-US Privacy Shield, Swiss-US Privacy Shield or your consent. All transfers of personal data between group companies have been protected by subscribing to the standard contractual clauses approved by the European Commission.

You can request more information about the measures taken to protect said transfers by contacting us through the contact points indicated in this Privacy Policy.

Your rights opposition to the treatment of your personal data when said treatment is based on our legitimate interest or that of third parties, if you wish to oppose a concrete treatment considering that it negatively impacts their fundamental rights and freedoms. You can also assert your right to object to the processing of your personal data for direct marketing or profiling purposes. You can exercise your right of opposition at any time, after which we will stop processing the data to which you have objected, unless we can demonstrate that the processing can continue based on priority grounds of legitimacy.

Access to your personal data.

If you send us this type of request and, in fact, we have personal data about you, we are obliged to provide you with this information by means of a copy of the personal data processed and together with a description of the treatment, including its purposes. In order to meet your request, we may require you to prove your identity. We will process your request within the legally required period.

Portability of your personal data.

You can request the transmission of your personal data to any third party that you choose. Such data will be transmitted in a structured, commonly used and machine readable format. Please keep in mind that this right will only apply to the personal data you have provided us and that we are treating on the basis of consent to fulfill a contract that you have signed with us.

Deletion (cancellation) of your personal data.

You have the right to demand the deletion or removal of your personal data when we have accepted your opposition request (see above) or when, under applicable law, we are obliged to delete your personal data. Please be aware that we may retain certain information when required or enabled by law or when we are entitled to do so based on our legitimate interests. In any case, we will inform you of this circumstance.

Rectification or updating of your personal data.

This right allows you to correct any incomplete or inaccurate information we have about you.
Limitation of the processing of your personal data in certain situations. You can exercise this right so that we stop the treatment temporarily, keeping the blocked data in the meantime.

Withdrawal of consent.

When the processing of your data is based on your consent, you can withdraw it at any time. In the event that you withdraw your consent, please note that this circumstance will not affect the legality of the treatments carried out previously.

File a claim.

We will do what we can to resolve your claims. However, if you consider that we have not been able to resolve them, you can file a claim with the corresponding territorial control authority. For example, in the case of Spain, the corresponding authority is the Spanish Data Protection Agency.
When you exercise the aforementioned rights and we have doubts about your identity, we can require you to identify yourself effectively, for example, attaching a copy of your ID to your request.

Our responsibility for web links

This Privacy Policy is limited to the personal data collected by Entrecartas hostelería digital S.L. Therefore, we must refer to the links enabled on the website that redirect to third-party websites, including social networks such as Facebook, Twitter and LinkedIn. If you follow these links, you must use the websites you access in accordance with their own privacy policies, since the treatment of personal data that the owners of these websites carry out is not included in the scope of this Privacy Policy. Therefore, we have no responsibility or control over the information collected by third parties or over the protection and privacy of the information you provide through said websites.

Updates

This Privacy Policy may be updated from time to time in order to reflect changes in the law, in good practices or in our personal data processing activities. The date of the last modification will appear in the heading of this Privacy Policy. If you do not agree with the changes made, please do not continue to use our services or share your personal data with us. We recommend that you check regularly if this Privacy Policy has been updated.

How to get in touch with us

If you have any questions about this Privacy Policy, about how we protect your privacy or if you want to exercise any of the rights mentioned in this Privacy policy, you can contact our Data Protection Officer through any of the following contact points:

Address: Rúa Areal, 8 Bajo 15172 Oleiros, A Coruña. Spain.

Telephone: (+34) 881 89 91 48

Email: info@entrecartas.com

ADDITIONAL INFORMATION

In this section of additional information we define some of the terms used in this Privacy Policy.

Responsible for the treatment: the natural or legal person who determines the purposes and means of the treatment.

Personal data: all information that identifies you or makes you identifiable.

Treatment: any operation carried out with personal data. Among others, obtaining, storage, disclosure or elimination.

Transfer: Communication of personal data to recipients located outside the European Economic Area (eg, when storing data on equipment located outside the European Economic Area), or access to personal data by someone located outside the European Economic Area.

Last update: May 2020.

© Entrecartas hostelería digital S.L. 2020. All rights reserved.