See our Privacy Policy
At Sabores Cartaya, we take your privacy very seriously. This policy explains how we collect, use, and protect your information when you visit our website www.saborescartaya.com .
1. INFORMATION TO THE USER
Who is responsible for processing your data?
-
Trade name: Flavors
-
CIF/NIF: 29620026M
-
Address: Av. de el Rompido, 47, 21450 Cartaya, Huelva
-
Email: sabores.cliente@gmail.com
Responsible for technical processing (in charge):
-
Entity: Sphere Studio LLC
-
Entity Type: Limited Liability Company
-
Jurisdiction: Wyoming, USA
-
Purpose of processing: Maintenance, technical administration and digital security of the website www.saborescartaya.com
2. DATA COLLECTED, PURPOSES AND LEGAL BASIS
What personal data do we collect and why?
Data type Purpose Legal basis
-
Name and email Contact via form or WhatsApp User consent
-
IP address and technical cookies Improved browsing experience Legitimate interest
-
Browsing data (analytics) Statistics via Google Analytics/Meta Consent (cookies)
-
Chat historyCustomer service via WhatsApp and formsLegitimate interest/service
Important: No particularly sensitive data (health, beliefs, biometrics, etc.) is collected through this website.
3. LEGITIMATION FOR THE PROCESSING
The legal basis for the processing of data is:
-
The user's free and informed consent when filling out forms or using contact channels.
-
The execution of pre-contractual measures requested by the interested party (e.g. contact prior to request).
-
Compliance with legal obligations (tax, security and data protection).
-
Sabores' legitimate interest in ensuring the usability, security, and improvement of the website.
4. RECIPIENTS OF THE DATA
The data will not be shared with third parties except under legal obligation or to providers strictly necessary for the operation of the site. Specifically, the following may have access:
-
Sphere Studio LLC, as technical administrator (data processor)
-
Meta Platforms (Facebook, Instagram), Google LLC (Analytics, Maps) and WhatsApp Inc. as integrated external platforms
-
Wix.com Ltd., as a web infrastructure provider
-
Public authorities in case of legal requirement
International transfers:
Data may be processed on servers located outside the European Economic Area (EEA), primarily in the USA (Google, Meta, Wix, Sphere Studio LLC). In all cases, appropriate safeguards are applied in accordance with the GDPR, through standard contractual clauses or other measures accepted by the European Commission.
5. DATA RETENTION
Personal data will be retained only for as long as necessary to fulfill the purpose for which it was collected, or for the periods required by law.
-
Criteria applied:
-
Contacts: up to 12 months from the last message or interaction
-
Technical data: between 6 and 24 months (depending on cookies)
-
Administrative and tax data: for 6 years (accounting obligation)
6. USER RIGHTS
You have the right to:
-
Access your personal data
-
Rectify inaccurate or incomplete data
-
Request the deletion of your data when it is no longer necessary
-
Limit or oppose processing
-
Request portability of your data
-
Withdraw consent at any time
-
File a complaint with the Spanish Data Protection Agency (AEPD)
To exercise your rights, you can write to:
📩 sabores.cliente@gmail.com with the subject “Exercise of LOPD rights”.
7. SECURITY MEASURES
Sabores and Sphere Studio LLC implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of data, including:
-
SSL certificates and communication encryption
-
Access control and firewalls
-
Backup and restore
-
Security monitoring
-
Contractual agreements with external data processors
8. POLICY REGARDING MINORS
This website is not intended for minors. If we detect that data from a minor has been collected without the consent of their parents or guardians, it will be deleted immediately.
9. MODIFICATIONS TO THE PRIVACY POLICY
Sabores reserves the right to modify this policy to adapt it to future legislative, jurisprudential, or technical developments. In the event of substantial changes, they will be notified on the website.
10. REFERENCE DOCUMENT
This document has been drafted in accordance with:
Regulation (EU) 2016/679 (GDPR)
Organic Law 3/2018 (LOPDGDD)
Guidelines and recommendations from the Spanish Data Protection Agency (AEPD)