Privacy policy
In accordance with the data protection legislation in force, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR), and with Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (hereinafter, LOPD-GDD), the user is hereby informed in accordance with Article 13 of the GDPR and Article 11 of the LOPD-GDD:
RESPONSABLE
Who is the controller of your data?
- Company name: CATERING & EXPERIENCE
- CIF: B13442702
- Domicilio: C/ DOCTOR CASTELLO, 44 1 D
- Email: ADMINISTRACION@LIFEGOURMETCATERING.ES
- Website: HTTPS://WWW.GRUPOLG.ES/.
FINALIDAD
For what purpose will we process your personal data?
CATERING & EXPERIENCE processes your information in order to:
- Maintaining the commercial relationship and providing the contracted service.
- Preparation of a quote tailored to your needs.
- Managing email communications with interested parties.
- Carrying out the company's recruitment processes.
- Management of the company's employees and human resources.
- Sending commercial information related to our sector: catering, hospitality, events and related services.
How long will we keep your data?
The personal data you provide us with will be kept for as long as the commercial relationship remains in force. However, in the interests of complete transparency, we set out below the general retention periods we work with:
- Generic identification data (email address, first name, surname, telephone number, etc.): for as long as the commercial relationship lasts or until consent is withdrawn. In any event, the data will be deleted once it is no longer to be used for the purpose for which it was collected.
- Spanish Act on Offences and Penalties in the Social Order (obligations relating to affiliation, registration, deregistration, social security contributions, payment of salaries…); Arts. 66 et seq. of the Spanish General Tax Act (accounting records…): four (4) years.
- Personal actions with no specific limitation period (article 1964 of the Civil Code): five (5) years
- Accounting, tax and employment records (article 30 of the Commercial Code - accounting books, invoices…): six (6) years.
- Employment: contracts, working time records, payslips and social security contributions, identification documents, four (4) years; in the case of occupational risk prevention reports, sickness or accident files and contracts with prevention services, five (5) years.
- Data subject to the Law on the Prevention of Money Laundering and Terrorist Financing (Article 25): ten (10) years.
- Recruitment processes: two (2) years from submission of the curriculum vitae.
- Likewise, given that commercial information is sent, even if the relationship between the parties comes to an end, the data controller will continue to retain your information in order to send you newsletters linked to our products and services. You may at any time exercise the rights granted to you by current legislation by contacting us through whichever channel suits you best.
- Disaggregated and anonymised data: no time limit
-
Notwithstanding these general periods, we inform you that we will periodically review our systems in order to delete any data that is not legally required.
LEGAL BASIS
What is the legal basis for processing your data?
Depending on the purposes for which we collect data, the processing of your data is necessary:
- To manage the commercial relationship you have entered into and contracted with us.
- Performance of a contract (enabled by Article 6.1.b GDPR)
- Consent of the data subject (enabled by Article 6.1.a GDPR)
- Preparation of a quote tailored to your needs.
- Performance of a contract and/or pre-contractual relationship (permitted under article 6.1.b GDPR)
- Managing email communications with interested parties.
- Consent of the data subject (enabled by Article 6.1.a GDPR)
- Legitimate interest (enabled by Article 6.1.f GDPR)
- Carrying out the company's recruitment processes.
- Consent of the data subject (enabled by Article 6.1.a GDPR)
- Management of the company's employees and internal human resources
- Contractual performance (enabled by Article 6.1.b GDPR)
- Sending commercial communications
- Consent of the data subject (as provided for in Article 6.1 GDPR)
- Consent of the data subject (enabled by article 20 LSSICE)
- Legitimate interest (permitted under article 6.1.f GDPR and 21.2 LSSICE)
- Provision of care or healthcare services.
- Consent of the data subject (enabled by Article 6.1.a GDPR)
- Controlar la seguridad de las instalaciones (videovigilancia)
- Legitimate interest (enabled by Article 6.1.f GDPR)
- Managing training activities
- Performance of a contract (enabled by Article 6.1.b GDPR)
- Consent of the data subject (enabled by Article 6.1.a GDPR)
Likewise, all the data collected is necessary in order to provide the service. However, the data marked with an asterisk (*) is mandatory. Should the mandatory data not be provided , the data controller will not be able to provide you with the contracted service.
Finally, we inform you that only persons over the age of 14 may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14, the consent of their parents or guardians is a mandatory condition for us to be able to process their personal data.
Furthermore, only persons over the age of 18 may contract our services. In the case of minors under 18, the consent of their parents or legal guardians is a mandatory condition for us to provide the services offered, unless the minor is legally emancipated.
RIGHTS OF DATA SUBJECTS
What data protection rights do I have?
In accordance with Article 13 GDPR and Article 11.2.c) LOPDGDD, you may exercise any of the following rights by notifying us at the postal address C/ DOCTOR CASTELLO, 44 1 D or to the email address ADMINISTRACION@LIFEGOURMETCATERING.ES In any event, under current legislation you have the following recognised rights in accordance with articles 15 to 22 GDPR and 12 to 18 LOPDGDD:
- The right to request access to the personal data concerning the data subject.
- The right to request their rectification or erasure.
- The right to request restriction of processing.
- Derecho a oponerse al tratamiento.
- Derecho a la portabilidad.
You may request the forms for exercising your rights from the Controller at the email address given in the controller's details. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD). Further information in Section VII of this document.
DESTINATARIOS
Who will your data be disclosed to?
You will always be informed and, where appropriate, your express consent will be requested in order to transfer your personal data or to make international transfers in accordance with current legislation (arts. 13.1.e) and 44 GDPR, as well as art. 11.1 and 40 LOPDGDD 3/2018). We therefore inform you that the third parties with whom the Controller works have their servers located within the EU, the EEA or Switzerland, with appropriate security measures in place to guarantee suitable and confidential data processing.
Apart from the cases mentioned above, and unless required by law, your data will not be assigned or disclosed to any third party, other than in the cases provided for by law or where strictly necessary in order to provide a service. Generally speaking, the data may be assigned to:
- Technology service providers.
- Proveedores de servicios de pago.
- Courier and parcel delivery companies.
- Third parties or intermediaries, acting as service providers on our behalf (administrative and payroll agencies, consultants, self-employed collaborators…).
- Third-party data processors, partners or parties with a close commercial relationship with the data controller, for the sole purpose of providing our services.
- Group companies operating under the LIFE GOURMET CATERING brand, to which your data may be transferred for the sole purpose of providing our services or as a result of booking a venue managed by any of them.
Any assignment of data will take place in the strictest confidence, applying the necessary measures, such as the signing of confidentiality agreements or adherence to the privacy policies published on their respective websites. The User may refuse the assignment of their data to the Data Processors by written request through any of the channels referred to above. The controller will not transfer or disclose your data to any third party, except in the cases provided for by law or where the provision of a service requires a contractual relationship with a Data Processor. The User therefore accepts that some of the personal data collected may be passed on to these Data Processors (payment platforms, administrative agencies, intermediaries, etc.) where this is necessary for the effective delivery of a contracted service or purchased product. The User also accepts that, where services are provided, these may be subcontracted in whole or in part to other individuals or companies, which will be considered Data Processors, with whom the corresponding confidentiality agreement has been signed, or whose privacy policies, set out on their respective websites, have been accepted. The User may refuse the transfer of their data to the Data Processors by written request, through any of the means referred to above.
SOURCE OF YOUR DATA
How did we obtain your data?
The personal data used by CATERING & EXPERIENCE come from the data subject themselves, thereby complying with the provisions of articles 13 GDPR and 11 LOPDGDD mentioned above, or from group or partner companies, about which you can obtain further information by writing to the email address ADMINISTRACION@LIFEGOURMETCATERING.ES or at the Data Controller's office at the postal address given in this document.
What categories of data do we handle?
The categories of personal data processed:
Identification data
Nombre
Apellidos
DNI / NIE / Pasaporte o documento equivalente
Direcciones postales
Email addresses
Sexo
Date de nacimiento
Lugar de nacimiento
Contact telephone (mobile / landline)
Commercial information: propia y de terceros
Financial data
Bank account number
Credit card number
Curriculum vitae
Academic details
Titulaciones
Aficiones
Pertenencia a asociaciones o clubes
Sensitive data will be processed in accordance with the provisions of articles 9 GDPR and 9 LOPDGDD, informing the data subject in all cases which data will be used by the controller. Where applicable, data on allergens or similar may be collected when necessary in order to provide the services properly.
ADDITIONAL INFORMATION
- Medidas de seguridad: Users of the controller's website are informed that all the technical and organisational security measures within our reach have been adopted to prevent the loss, misuse, alteration, unauthorised access and theft of the data, thereby guaranteeing the confidentiality, integrity and quality of the information they contain, in accordance with the data protection legislation in force. The personal data collected through the forms is processed solely by the controller's staff or by the designated Data Processors. The Website also has SSL encryption, which allows the User to send their personal data securely through the website's contact or registration forms.
- Redes Sociales: the data controller has a profile on some of the main social networks on the Internet (Facebook, Instagram), and in all cases acknowledges itself to be the Controller of the data of its followers, fans, subscribers, commenters and other User profiles (hereinafter, followers) published by the controller.
The purpose of the processing of data by the controller, where not prohibited by law, will be to inform its followers about its activities and offers by any means the social network allows, as well as to provide a personalised customer service to the User. The legal basis for this processing is the consent of the data subject, which may be withdrawn at any time.
Under no circumstances will the data controller extract data from social media, unless the User's specific and express consent has been obtained for that purpose (for example, to run a prize draw).
- Confidencialidad: The information supplied by the User shall in all cases be considered confidential and may not be used for purposes other than those described herein. The controller undertakes not to disclose or reveal information about the User's requirements, the reasons for the advice requested or the duration of its relationship with the User.
- Accuracy of the data: The User declares that all the data provided by them is true and correct, and undertakes to keep it up to date. The User is responsible for the accuracy of their data and will be solely liable for any conflicts or disputes that may arise from any falsity in it. So that we can keep personal data up to date, it is important that the User informs the controller whenever any change has occurred.
- Documentation prepared by LegalDPO (https://legaldpo.es/), based on the information provided by the data controller. The content complies with the legislation in force in February 2023 and may change in line with legislative amendments or case-law criteria; it is the owner's responsibility to check that the legislation is current at any given time.
AUTORIDAD DE CONTROL
We make every effort to comply with data protection legislation, as it is the most valuable asset we have. Nevertheless, we inform you that if you believe your rights have been infringed, you may file a complaint with the Spanish Data Protection Agency (AEPD), at C/ Jorge Juan, 6. 28001 – Madrid. More information about the AEPD. http://www.agpd.es/. Documentation produced by LegalDPO. https://legaldpo.es/