Café Candelas

        PRIVACY POLICY. INFORMATION ABOUT DATA PROTECTION

YOUR RIGHTS

Any customer has a right to confirm whether CAFES CANDELAS SL is handling properly and   lawfully their personal information.
You have a right to access your personal information, delete it or correct any inaccurate or   incomplete personal data. You can also object to handle or transfer your personal information.
You have a right to withdraw your consent to us processing your personal information for any   specific purpose, as well as to submit or make a complaint to any data   controller authority.
You can exercise your Data Protection rights by writing to us at Polígono Industrial do Ceao, Rúa dos Transportes 7, 27003 Lugo, or through our electronic form, which you can fill in by clicking HERE

WHO IS RESPONSIBLE FOR HANDLING YOUR PERSONAL INFORMATION?

Company Name: CAFES CANDELAS SL

Address: POLÍGONO CEAO Street, RUA DOS TRANSPORTES , N.7, 27003-LUGO
Phone Number: 982209025
Email: privacidad@cafescandelas.com

PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA

As a customer:

We handle your personal information to optimize our services, payment management as well as sending marketing communications of our products and/or services.

As a participant in a competition or prize draw:

We handle your personal information to manage the competition properly, the prize draw as well as to send any marketing communications of our products and/or services.

If you have registered on an event or for training purposes:

Your personal information is handled to manage if you partake in an event or in a training course as well as to send marketing communications of our products and/or services. Also pictures taken in marketing events are handled to promote such events in our social networks,  websites, newsletters or mass media.

If you contact us by submitting an online form:
We handle your personal data to manage your query, complaint, suggestion or any claim that you may want to submit.

If you have registered our online shop:
Your personal information is handled to manage such registration, to optimize your services as a customer, to manage payment as well as to send marketing communications or our products and/or services.

If you have submitted an online form to join us:
We handle your personal data to register on our employment exchange.

If you have filled a form to communicate an infringement:
We handle your personal information to manage the claim submitted.

HOW LONG WILL WE KEEP YOUR INFORMATION?

Your personal data provided to us will be kept as long as our business relationship exists, and you do not request to suspend such relationship. If you request to do so, please take into account that the limit of liability will only prescribe during the specific times as established by  law.

LEGAL GROUNDS FOR HANDLING YOUR PERSONAL INFORMATION

We handle your personal information only with your consent or to perform a contract or a  service with you after you have given us permission to do so.

WHO DO YOU SHARE MY PERSONAL DATA WITH?

We may share your personal data with:

          The administrative and accounting Agency to manage accounting, tax and administrative  services.
          The shipping company to manage the delivery of the goods.
          The IT company to manage the maintenance of IT systems and applications.
          The law firm for legal advice or counselling.
          The consultancy and certification company to outline and audit the management systems   implemented in the company.
          The surveillance company to surveil and safeguard people, goods, and facilities.
          Bank companies to manage payments and financial transactions.

HOW ARE YOU PERSONAL DATA COLLECTED?

We have obtained your personal information when you actively provide it to us or through a   legal representative acting on your behalf.
These are the data categories used:

                                    Personal Identifying Information: Name and surname, tax identification number, address,   phone numbers, email, photograph.   
                                    Bank Data: for payment management and direct debit payment.
                                    Personal data required for the business relationship. Payment.

Cafés Candelas S.L fully complies with the current data protection regulations, as well as with   the commitment to confidentiality in this regard.

Cafés Candelas S.L. has taken the appropriate technical actions in order to avoid disclosure,   misuse or an unauthorized or inappropriate use of personal data information.

Personal data collected using the different forms will be used for the purposes stated above.   This information will be also used to send marketing communications too. If users wish to stop   receiving marketing communications from us, please click on the link located at the bottom of   the relevant newsletter.

To keep our customers’ personal information updated, please let us know as soon as possible if   there are changes in your personal information.

The personal information collected from our customers is stored in our database property of   Cafés Candelas S.L, responsible for taking the required technical, security and organisational   actions to guarantee the confidentiality and integrity of the information in accordance with the   data protection regulations in force.

The user will be responsible, notwithstanding, for the veracity of the data provided. Cafés   Candelas S.L may reserve the right to deny use of any registered services to any user providing   untrue or inaccurate information, without prejudice to any other actions applicable under the   Law.

We kindly recommend you to read this policy carefully and regularly to be aware of any news   or changes that may occur.

INTERNAL INFORMATION SYSTEM

Data protection. - CAFES CANDELAS SL processes your data to effectively manage our internal information system and ethical channel. It handles reported irregularities through this system, deciding whether to initiate an investigation into potential offences, avoid any conduct contrary to the entity's internal or external regulations and prevent CAFES CANDELAS, SL from being subject to any type of liability. This obligation is based on the legal requirements outlined in Articles 10 and 13 of Law 2/2023, dated 20 February, which regulates the protection of individuals reporting regulatory violations and combating corruption, mandating the establishment of these internal information systems.

The data will be kept for a maximum period of three months after the notification of an irregularity if the claim has not been proven and provided that they are not necessary for evidentiary purposes relating to the proper control and supervision of crime prevention or for other purposes. In the event that the claims are proven or there is sufficient evidence to support them, the data will be kept as long as necessary for the exercise by the entity of its rights before the courts of justice. When they are no longer needed for this purpose, they will be deleted with adequate security measures to guarantee the anonymisation of the data or their complete destruction.

Except for where legally obliged, your data will only be communicated to the following categories of recipients: Courts and Tribunals, as well as other possible conflict resolution bodies. State Security Forces and Bodies. Notaries and Registrars. We have signed confidentiality and data processing agreements with providers who require access to your personal data for the services we have engaged them for or who may have access to specific personal data due to the operation of our electronic services (website and emails). These agreements are mandated by regulations to safeguard your privacy.

You can exercise your rights at any time by request at Calle POLIGONO CEAO, RUA DOS TRANSPORTES, N.7, 27003-LUGO. Please note that you have the right to file a complaint with the supervisory authority (www.aepd.es) if you believe the data processing does not comply with current regulations. For additional, detailed information go to https://www.cafescandelas.com/es/politica-de-privacidad.