Privacy Policy - Roque Artesanos

1. Introduction

This Privacy Policy provides detailed information on how Panadería y Bollería Roque S.L (hereinafter, the "Company") uses and protects your personal data when you browse our website, as well as your rights in this regard.

This Privacy Policy is applicable to the processing of personal data that you provide us or that we obtain from you when you access and use the website, whether to browse it, purchase our products or services, request information, contact us, submit an application or make use of the functionalities or services available on the website.

The Company respects your right to privacy and complies with current legislation on the protection of personal data, including Organic Law 15/1999, of December 13, on the Protection of Personal Data, its development regulations and any other rule that may modify, complement or replace it in the future, as well as Regulation (EU) 2016/679, of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons in what regarding the processing of personal data and the free circulation of these data and which repeals Directive 95/46/EC ("General Data Protection Regulation"), applicable as of May 25, 2018, as well as any another norm that can develop or complement it in the future.

We recommend that you carefully review our Privacy Policy to ensure that you understand how your personal data will be used when you browse the website.

2. Who is responsible for the processing of your data?

The data controller is the legal entity that determines the purposes and means of processing personal data. In other words, the controller decides how and for what purposes the personal data is processed.

For the purposes of this Privacy Policy, the person responsible for processing personal data is Panadería y Bollería Roque, S.L., with CIF no. B-03852365, acting under the trade name Panadería y Bollería Roque, with registered office at C/ Cervantes, 83 03420 Castalla Alicante - Spain, and with email info@roqueartesanos.com.

3. Who is your contact in the Company for the protection of your personal data?

If you have any questions or wish to receive more information about the treatment or protection of your personal data, you can contact us through any of the following ways:

Responsible for the treatment: Panadería y Bollería Roque, S.L.
Postal address: C/ Cervantes, 83 03420 Castalla, Alicante - (Spain)
Email: info@roqueartesanos.com

4. What is personal data?

Personal data is any information about an identified or identifiable natural person.

5. What personal data is processed by the Company?

For the purposes established in this Privacy Policy, the Company collects and processes the personal data detailed below:

Identification data: name, surnames, identity document (tax identification number or code, foreigner identification number, passport or residence permit).
Contact details: postal address, email, landline phone number, mobile phone number.
Transactional data: information about purchases, orders, billing and collection, payment methods, bank details and any data related to your transactions with us.
Electronic data: IP address, browser type and language, domain through which you access the website, browsing data, activity on the website.

The Company does not intentionally collect information about minors, unless it has the express consent of their parents or legal guardians. You guarantee to be over 18 years of age. If you are aware or suspect that the Company has personal data of minors, please contact us through any of the channels indicated in section 3 of this Privacy Policy "Who is your contact in the Company for the protection of your personal data?" and it will be removed.

6. Collection of personal data

The Company collects and processes the personal data that you voluntarily provide us through your interaction with our website, specifically:

when requesting information from us about our products and services and services;
by subscribing to our Newsletter;
when registering as a registered user of our website;
when purchasing products and services from the Company.

You will only be obliged to provide the personal data that is necessary for the Company to provide you with the services or make available to you the functionalities of the website that you have requested.

For example, if you wish to receive the Company Newsletter, you will need to provide us with your email address. If you request information or want us to contact you, you must provide us with the necessary contact information for this purpose. If you wish to purchase any product that the Company makes available on the website, it will be necessary for you to provide us with, among other things, a fiscal address in order to prepare your invoice. If you do not provide this personal data, it would be impossible for us to provide you with our services.

In the forms available on the website, the fields whose completion is mandatory will be marked with an asterisk (*). If you do not provide all of the mandatory data or if we receive any abnormal or incorrect response, we will not be able to meet your request or provide the corresponding service or functionality.

You guarantee and are responsible, in any case, for the veracity, accuracy, validity and authenticity of the personal data provided and undertake to keep them duly updated.

To browse the website you do not need to provide your personal data. However, when you visit our website, the Company collects the following information, automatically and through cookies and other tracking technologies, based on your specific browser settings: IP address, device type and ID, browser type and language, domain through which you access the website, browsing data, activity on the website. For more information, you can consult section 12 of this Privacy Policy "Use of cookies and other tracking technologies".

7. What do we use your personal data for? Purposes and legal bases for the treatment

In general, the personal data that you provide to us and that we obtain from you is used to process your requests and transactions, to provide you with a high quality service and to inform you about opportunities that we believe will be of interest to you.

The specific purposes for which we process your personal data are detailed below:

To provide you with information requested by you. In this case, the legal basis for the processing of your data is your consent.
To send you our Newsletter with information, promotions, campaigns and news about the Company's products and services. In this case, the legal basis for the processing of your data is your consent.
To register you as a customer, process your transactions, manage the contractual relationship with you, give you access to the private customer area, send you the relevant information about products and services, billing, collections and payments, process transactions and payment methods and any communication of service or related to your contract and transactions, administration of loyalty programs, discounts and promotions and conducting satisfaction surveys or related to the products and services and services marketed by the Company. In this case, the legal basis for the processing of your data is the execution of the contract for the sale of products and services with the Company.
To create an account to provide you with access to the Private Area and facilitate access to the information and services available therein: information about your customer account, billing and payments, issuing orders, information about the products and services marketed by the Company, administration loyalty programs, discounts and promotions. In this case, the legal basis for the processing of your data is the execution of the contract for the sale of products and services with the Company.
If you give your consent, in order to send you commercial communications about the products and services marketed by the Company, send you our publications, opinion polls, promotional and advertising information, coupons, offers (including personalized offers) and recommendations of products and services marketed by the Company, according to your interests and based on a profile prepared by us, by telephone, post, email, SMS and MMS. In this case, the legal basis for the processing of your data is your consent.
To ensure the security of our website and information. In this case, the legal basis for the processing of your data is the legitimate interest in providing a secure environment and avoiding damage to the Company's systems and the information of its users, as well as unauthorized access and improper use of the data. themselves.
Regarding the purposes of the use of cookies, see section 12 of this Privacy Policy "Use of cookies and other tracking technologies". In this case, the legal basis for the processing of your data is your consent.

When the basis of the treatment is consent, you may revoke it at any time by sending us a communication to info@roqueartesanos.com, attaching a copy of your D.N.I. or document proving your identity, indicating your address for communication purposes and providing the necessary details to process your request. You can always contact us through any of the channels indicated in section 3 of this Privacy Policy "Who is your contact in the Company for the protection of your personal data?".

Please note that receiving commercial information is not essential to maintaining our relationship with you. If you prefer not to receive commercial communications, you can inform us at any time through the channels indicated or unsubscribe using the link provided for this purpose in the commercial communications by email you receive or, if the communications are sent by other means, through the procedure indicated for these purposes.

To what extent will decision making be automated?

The Company does not use fully automated decision-making processes to enter into, develop or terminate a contractual relationship with You. In the event that we use those processes in a particular case, we will keep you informed and communicate your rights in this regard if so prescribed by law.

Will profiling take place?

In order to be able to offer you products and services according to your interests and to improve your user experience, we may prepare a "commercial profile" based on the information provided. However, no automated decisions will be made based on said profile.

8. With whom do we share your personal data?

We only use, transfer or share personal data with third parties in the terms described in this Privacy Policy. The Company does not sell or rent your personal data to third parties and will only disclose it to individuals or entities if we obtain your prior consent or in compliance with or in accordance with applicable law when such consent is not required for a specific transfer.

We will share or give third parties access to your personal data when doing so is necessary to achieve one of the objectives described below and in accordance with current legislation:

Our providers. The Company will communicate or allow access to your personal data to companies that provide us services under a contract, when necessary for the fulfillment of the purposes described in section 7 of this Privacy Policy "What do we use your personal data for? Purposes and legal bases for treatment": web platform services, order management and transportation, payment processing, email distribution, call center, web positioning services, marketing and organization of promotional campaigns. If any of these service providers need access to your personal data, they use it only to provide a service to us and in accordance with our instructions. We also require them to maintain the confidentiality and security of the data and to return or destroy the data when they are no longer needed.
Access to Private Area. For the management of access to the private area of the website, and to maintain the correct functioning of the services offered to clients, the Company discloses to the owner all the information related to activities of the client's account: contracting services, collections, payments , shipments...
Legal Obligations. The Company may communicate your personal data when the transfer is authorized by law or is necessary to comply with a legal obligation, including the transfer to the competent authorities, judges and courts.

9. What measures do we apply to keep your personal data safe?

The Company adopts the appropriate technical and organizational measures in accordance with current regulations to protect your personal data against any misuse, destruction, loss, accidental or unlawful modification, disclosure or unauthorized access, including those necessary to deal with any suspected violations of data.

The website has a permissions system, by username and password, through which only authorized users can access the Private Area. The Company will not use this information at any time for any use other than its maintenance, the management of the commercial relationship with you, as well as the provision of the services available therein.

You agree to retain and use the username with due diligence. The use of the password is personal and non-transferable, and transfer, even temporary, to third parties is not permitted. In this sense, you must adopt the necessary measures to safeguard the password, avoiding its use by third parties. Consequently, you are solely responsible for the use made of your password, with full indemnity for the Company.

If you have knowledge or suspect the use of your password by third parties or that there may be an improper use of personal data or unauthorized access to them, please let us know as soon as possible through any of the channels indicated in section 3 of this Privacy Policy "Who is your contact in the Company for the protection of your personal data?".

10. How long do we keep your data?

The Company will keep your personal data for the time necessary to fulfill the purposes for which they were collected, as long as you do not exercise your right to delete or revoke your consent.

They will then be blocked, unless the law requires or allows a longer retention period (for example, for the formulation, exercise or defense of claims), in which case, they will be kept duly blocked for the time necessary before proceeding to its removal.

To determine an appropriate retention period for your data, we apply the following criteria:

The data necessary to provide you with information requested by you will be kept for the time necessary to attend to and process said requests, in accordance with the applicable legal provisions and the prescription periods for actions provided for in the regulations.
The data necessary to send you the Newsletter will be processed as long as you do not revoke your consent and notify us of your desire not to continue receiving them, in accordance with the applicable legal provisions and the prescription periods for actions provided for in the regulations.
The registration data in our Private Area will be kept for the duration of the service contract, as long as access to the Private Area is not terminated, in accordance with the applicable legal provisions and the prescription periods for actions provided for in the regulations.
The data related to the acquisition of products and services and services of the Company within the framework of a contractual relationship, will be kept during the term of the service contract, in accordance with the applicable legal provisions and the prescription periods of actions provided in the normative.
The data necessary to meet your requests related to the Company's services will be kept for the time necessary to meet and process said requests, in accordance with the applicable legal provisions and the prescription periods for actions provided for in the regulations.
When you have consented to receive commercial communications, they will be kept as long as you do not revoke your consent and notify us of your desire not to continue receiving them, in accordance with the applicable legal provisions and the prescription periods for actions provided for in the regulations.
When cookies are installed on your device, the data will be kept in accordance with the applicable legal requirements and the recommendations issued by the competent authorities.

11. What are your rights regarding the processing of your personal data?

In accordance with the applicable regulations, you have a series of rights in relation to the collection and processing of your personal data. The exercise of these rights will be free for you, except in cases where manifestly unfounded or excessive requests are made, especially repetitive ones.

These rights are the following:

Information right. You have the right to be informed in a concise, transparent, intelligible and easily accessible manner, in clear and simple language, about the use and processing of your personal data.
Right of access. You have the right to ask us at any time to confirm whether we are processing your personal data, to provide you with access to it and information about its processing, and to obtain a copy of such data. The copy of your personal data that we provide to you will be free of charge, although the request for additional copies may be subject to the charge of a reasonable amount based on administrative costs. For our part, we may ask you to prove your identity or require more information that is necessary to manage your request.
Right of rectification. You have the right to request the rectification of inaccurate, outdated or incomplete personal data concerning you. You may also request that incomplete personal data be completed, including by means of an additional declaration.
Right of suppression -right to be forgotten-. You have the right to request the deletion of your personal data when, among other reasons and as long as a proportionality judgment is made, the data is no longer necessary for the purposes for which it was collected and it is not about facts or events of actuality and prioritize the right to information. However, this right is not absolute so that the Company may continue to keep them duly blocked in the cases provided for by the applicable regulations.
Right to limit treatment. You have the right to request that we limit the processing of your personal data, which means that we may continue to store it, but not continue to process it if any of the following conditions are met:
- That you challenge the accuracy of the data, for a period that allows the controller to verify the accuracy of the data;
- the treatment is unlawful and you oppose the deletion of the data and request instead the limitation of its use;
- the Company no longer needs the data for the purposes of the treatment, but you need it for the formulation, exercise or defense of claims;
- You have opposed the treatment, while it is verified if the legitimate reasons of the Company prevail over yours.
Right to data portability. You have the right to have your data transmitted to another data controller in a structured, commonly used and machine-readable format. This right applies when the processing of your personal data is based on consent or the execution of a contract and said processing is carried out by automated means.
Right of opposition. This right allows you to object to the processing of your personal data, including profiling. We will not be able to attend to your right only when we process your data in the event that we prove compelling legitimate reasons for the treatment or for the formulation, exercise or defense of claims.
Right to revoke consent. In cases where we have obtained your consent to process your personal data in relation to certain activities (for example, in order to send you commercial information), you can withdraw it at any time.
Right to file a claim with a control authority. You have the right to file a claim with the Spanish Data Protection Agency, whose data you can consult at http://www.agpd.es.

You can exercise your rights by sending us a communication to info@roqueartesanos.com, attaching a document proving your identity and providing the necessary details to process your request.

12. Use of cookies and other tracking technologies

Cookies and other tracking technologies, among other purposes, allow us to remember your preferences and recognize you on subsequent visits. It does this by storing certain information on your computer.

What is a cookie?

A cookie is a device that is downloaded to a user's terminal equipment in order to store data that can be updated and retrieved by the entity responsible for its installation.

Cookies are part of the website. When you access the website, it causes the browser to create small files on your device (computer, tablet, telephone, etc.) with information necessary for the website to function. These files (which are cookies themselves) are part of the technology necessary for the proper functioning of the website and are not inherently harmful.

Cookies are installed and stored on your device and allow you to track your Internet activity.

You can completely disable the use of cookies in the configuration section of your browser. You can disable cookies, but the website or some of its sections may not function properly.

What kind of cookies do we use?

Depending on the entity that manages them, cookies can be:

Own cookies. They are those that are sent to the terminal equipment of the interested party from a computer or domain managed by the publisher itself and from which the service requested by the user is provided.
Third party cookies. They are those that are sent to the user's terminal equipment from a computer or domain that is not managed by the publisher, but by another entity that processes the data obtained through cookies.

The website uses both its own and third-party cookies.

According to the length of time they remain activated:

Session cookies. They are a type of cookies designed to collect and store data while the user accesses a web page. They are usually used to store information that is only interesting to keep for the provision of the service requested by the user on a single occasion (eg a list of products purchased).
Persistent cookies. They are a type of cookie in which the data is still stored in the terminal and can be accessed and processed for a period defined by the person responsible for the cookie, which can range from a few minutes to several years.

The website uses both persistent cookies and session cookies.

For what purposes can website cookies be used?

Technical cookies. They are those that allow the user to navigate through a web page, platform or application and use the different options or services that exist in it, such as, for example, control traffic and data communication, identify the session, access to restricted access parts, remember the elements that make up an order, carry out the purchase process of an order, make the request for registration or participation in an event, use security elements during navigation, store content for the dissemination of videos or sound or share content through social networks.
Personalization cookies. They are those that allow the user to access the service with some predefined general characteristics based on a series of criteria in the user's terminal, such as the language, the type of browser through which the service is accessed, the regional configuration from where you access the service, etc.
Analysis cookies. They are those that allow the person responsible for them to monitor and analyze the behavior of the users of the websites to which they are linked. The information collected through this type of cookie is used to measure the activity of the websites, applications or platforms and to create browsing profiles of the users of said sites, applications and platforms, in order to introduce improvements in function of the analysis of the usage data made by the users of the service.
Advertising cookies. They are those that allow the management, in the most efficient way possible, of the advertising spaces that, where appropriate, the editor has included in a web page, application or platform from which the requested service is provided based on criteria such as the content edited or the frequency in which ads are shown.
Behavioral advertising cookies. They are those that allow the management, in the most efficient way possible, of the advertising spaces that, where appropriate, the editor has included in a web page, application or platform from which the requested service is provided. These cookies store information on the behavior of users obtained through the continuous observation of their browsing habits, which allows the development of a specific profile to display advertising based on it.

The website uses cookies for the aforementioned purposes.

Log files

Every time you access our website, your Internet browser transmits certain usage data to us for technical reasons, which is stored in protocol files, known as log files. These usage data are the following: date and time of access to our website; name of the website consulted; IP address of your computer or mobile device; web address from which you accessed our website; volume of data transferred and name and version of your browser.

Analyzing log files helps us improve and make our Internet products easier to read, quickly find and remove errors, and monitor server capabilities.

Social plugins

A "plug-in" or add-on is an application (or computer program) that is related to another to add a new and usually very specific function.

Web beacons and embedded scripts

Web beacons (web beacoms, web bugs, web beacons…) and embedded scripts are other technologies we use on the website, as well as in some of our emails and advertisements.

Web beacons (or "tags") are pieces of programming code that are included in the website, emails and advertisements to inform the Company (or companies that help us run our operations) that such web pages, emails or advertisements have been viewed or clicked on.

Embedded scripts are pieces of programming code that are included in the website to measure the use of these web pages, such as which links are clicked. We use this information to improve the website and tailor it to topics that are most likely to interest you, as well as to conduct market research.

You can disable scripting features, such as the JavaScript language, in your browser (see your browser's help function). Please note that if you completely disable scripting features, the website may not function properly.

How can I disable cookies?

You can set your browser to reject all cookies. However, some website features or services may not function properly without cookies. Most browsers allow you to completely disable cookies, so you can at any time choose which cookies you want to work on this website by changing your browser settings. You can find more information in your browser settings. Below, we also provide you with links to the websites of the main browsers:

13. Modifications

The Company may modify the Privacy Policy to adapt it to the modifications that may occur on the website or in relation to the processing of your personal data. In this case, the Company will contact you through the usual communication channels and sufficiently in advance to notify you of the relevant changes and will send you the updated privacy policy.

The updated and previous versions of the Privacy Policy will be available at all times on the website.