Privacy policy

Luís Ramón Chamorro Pentinat is committed to protecting the privacy of users who access this website and/or any of its services.

The use of the website and/or any of the services offered by Luís Ramón Chamorro Pentinat implies the user's acceptance of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated therein.

Please note that although there may be links from our website to other websites, this Privacy Policy does not apply to the websites of other companies or organizations to which the website is redirected. Luís Ramón Chamorro Pentinat does not control the content of third-party websites nor does it accept any responsibility for the content or privacy policies of these websites.

Basic information on data processing (Regulation (EU) 2016/679)

Questions about privacy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), we offer you the following information about the processing of your personal data:

Who is responsible for the processing of your data?

Identity: Luís Ramón Chamorro Pentinat
NIF: 40530975F
Address: Carrer Anselm Clavé, 10. 17220 Sant Feliu de Guíxols (Girona).
Telephone: 972 320 695
Email: pastisseriagirones@hotmail.es

For what purpose do we process your personal data?

• We process the information provided to us to manage our services.
• If you contact us through the contact form on our website, we will process it to manage your query.
• If you give us your consent, we may also process your data to send you information about our activities, products or services.

How long will we keep your data?

• The personal data provided will be retained while you are a user of our services or wish to receive information about them, and then, for the periods established to comply with our legal obligations.

What is the legitimacy for the processing of your data?

The legitimacy to process them is found in the execution of the service contract and in the consents you give us.

Regarding information sent by minors under the age of 16, it will be an essential requirement that it be done with the consent of the parent, guardian or legal representative of the minor so that the personal data can be processed. If this is not the case, the legal representative of the minor must inform us as soon as they become aware of it.

To which recipients will your data be communicated?

The data will not be communicated to third parties, unless required by law or necessary to comply with the purpose of the processing.

What are your rights when you provide us with your data?

• Anyone has the right to obtain confirmation as to whether or not we are processing their personal data.
• Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
• Also, in certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, we will stop processing them, except for compelling legitimate reasons or for the exercise or defense of possible claims.
• Interested parties also have the right to the portability of their data.
• Finally, interested parties have the right to file a complaint with the competent Control Authority.

How can you exercise your rights?

By sending us a letter attaching a copy of a document that identifies you, to our physical address or by email.

How did we obtain your data?

The personal data we process comes from the interested party, who guarantees that the personal data provided is true and is responsible for communicating any modification. The data marked with an asterisk are mandatory in order to provide the requested service.

What data do we process?

The categories of data we can process are:

• Identification data.
• Postal or electronic addresses.

The data is limited, since we only process the data necessary for the provision of our services and the management of our activity.

Do we use cookies?

We use cookies while browsing our website with the user's consent.

The user can configure their browser to notify them of the use of cookies and to prevent their use. Please visit our cookie policy.

What security measures do we apply?

We apply the security measures established in article 32 of the GDPR, therefore we have adopted the necessary security measures to guarantee a level of security appropriate to the risk of the data processing we carry out, with mechanisms that allow us to guarantee the confidentiality, integrity, availability and permanent resilience of the processing systems and services.

Some of these measures are:

• Information on data processing policies to staff.
• Regular backups.
• Data access control.
• Regular verification, evaluation and assessment processes.