Home >Privacy Policy
Privacy Policy
Privacy Policy
The purpose of this document is to establish the Privacy Policy of the Website owned by Ecilandia Fast Food S.L
This Privacy Policy has been developed taking into account the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, "LOPD GDD"), as well as Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons (hereinafter, "GDPR").
Ecilandia Fast Food S.L reserves the right to modify this Privacy Policy.
1. Who is the Data Controller of your personal data?
Identification
Corporate Name: Ecilandia Fast Food S.L
Trade Name: Pizzatti de Pizzello Nueva Tradición
CIF: B01967298
ADDRESS: CALLE PINSAPO, nº5, Écija
Phone: 955903870
2. How do we obtain your personal data?
Browsing our Website.
Placing orders through our Website and/or by phone.
Forms or interactions enabled on the Website.
Cookies and similar technologies.
3. What personal data do we process?
Identification data: first name, last name and username.
Contact data: address, phone number and email.
Transaction data: orders placed, products and amounts.
Payment data: information associated with payment (managed, in many cases, by external payment gateways).
Browsing data: IP address, online identifiers, Cookies and Website usage data.
Preference data: consumption habits or orders.
4. For what purposes do we process your personal data?
Management and tracking of orders placed through our Website and/or by phone.
Handling complaints, claims or suggestions.
Analyzing the use of our Website to improve the quality of our services.
Compliance with legal obligations.
Sending commercial communications and personalized offers.
5. What are the legal bases that legitimize the processing of your personal data?
Performance of the contractual relationship: management and tracking of orders and handling of complaints, claims or suggestions.
Legitimate interest: analysis and improvement of service quality.
Legal obligation: compliance with applicable regulations.
Express consent: non-essential Cookies and sending of commercial communications and personalized offers.
6. Who has access to your personal data?
Third-party service providers (financial institutions, home delivery operators, technology and analytics service providers, and marketing and advertising service providers and collaborators), as Data Processors, strictly following the instructions of Ecilandia Fast Food S.L and under contract in accordance with Article 28 of the GDPR. These providers may only access personal data that is strictly necessary for the provision of the service.
For service efficiency, some of these providers are located in territories outside the European Economic Area. In such cases, we inform you that we transfer your data with adequate guarantees and always maintaining the security of your data, as we use the most appropriate tools for international data transfer, such as Standard Contractual Clauses or any other relevant complementary measure. You can consult the content of the Standard Contractual Clauses at the following link: https://commission.europa.eu/law/law-topic/data-protection_en
Public Administrations, in case there is a legal obligation.
7. How long do we keep your personal data?
Your personal data will be kept as long as you do not request its deletion or cancellation and as long as it remains adequate, relevant and limited to what is necessary for the purpose for which it was collected, so that, once the purpose has been fulfilled, the data will be cancelled. Such cancellation will result in the blocking of the data, kept only at the disposal of Public Administrations to address possible responsibilities arising from the processing during the limitation period. Once the aforementioned period has elapsed, the information will be destroyed.
8. What are your rights regarding Data Protection and how can you exercise them?
-
Right of access: you may contact us to find out whether your data is being processed and, if so, obtain the following information: copy of the personal data being processed, purpose of the processing, category of data being processed, recipients or categories of recipients, retention period, exercise of your rights, right to file a complaint with a Supervisory Authority, origin of such data, and existence of automated decisions, including profiling.
-
Right of rectification: you may request that we rectify any inaccurate personal data we hold, as well as complete any incomplete personal data.
-
Right of objection: you may object to us processing your personal data in the following cases:
When the data is processed based on a public interest mission or legitimate interest.
When the processing is for direct marketing purposes, including profiling.
In such case, we would stop processing your personal data, unless there are compelling grounds or the data is necessary for the defense of legal claims.
-
Right of erasure: you will also have the right to obtain the erasure of data when any of the following circumstances apply:
When the data is no longer necessary for the purpose for which it was collected.
When you withdraw your consent, provided that the processing is not based on another legitimate cause.
When you object to the processing.
When your personal data has been unlawfully processed.
When the data must be erased to comply with a legal obligation.
When your data has been collected in relation to the offer of information society services pursuant to Article 8 of the GDPR.
-
Right to restriction of processing: you may request the restriction of processing while we process your request or challenge regarding the accuracy of your personal information or the legality of the processing of your personal information and our legitimate interests in processing this information, or if you need the personal information for litigation.
-
Right to data portability: you may request the portability of your data so that it is sent directly to the entity designated by you in a structured, commonly used, machine-readable and interoperable format, provided that the processing is based on consent or within the framework of the performance of a contract and provided that it is technically feasible.
To exercise these rights, you may contact Ecilandia Fast Food S.L by writing to the following email address: , indicating "Data Protection" in the reference.
Furthermore, please note that, as the data subject, you may contact the Spanish Data Protection Agency at any time, located at C/ Jorge Juan, nº 6, 28001, Madrid.
We will respond to your request as soon as possible and, in any case, within a maximum period of one month from receipt thereof. This period may be extended by a further two months in case of high complexity or volume of requests, in which case, we will inform you within one month from receipt of the request, indicating the reasons for such delay.
9. How do we protect your personal data?
The security measures adopted by Ecilandia Fast Food S.L are those required in accordance with Article 32 of the GDPR.
In this regard, Ecilandia Fast Food S.L, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, has established the appropriate technical and organizational measures to ensure a level of security appropriate to the existing risk.
In any case, Ecilandia Fast Food S.L has implemented sufficient mechanisms to:
Ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services.
Restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.
Regularly test, assess and evaluate the effectiveness of technical and organizational measures.
Pseudonymize and encrypt personal data, where appropriate.