Privacy Policy

www.landessa.es

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, Landessa Coffee (hereinafter, also Website) is committed to adopting the technical and organizational measures necessary, according to the level of security appropriate to the risk of the data collected.

Legislation incorporated in this privacy policy

This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it complies with the following standards:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free movement of such data (GDPR).
  • Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007, of December 21, which approves the Regulation for the development of Organic Law 15/1999, of December 13, on Personal Data Protection (RDLOPD).
  • Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The data controller of the personal data collected on Landessa Coffee is: ENNSTAL IBERIA. SL, with NIF/CIF: B87423463 and registered in: Madrid Commercial Registry with the following registration details: , whose representative is: (hereinafter, Data Controller). Contact details are:

  • Address: Calle Espronceda, 27 – 1 D, Madrid, 28003, Madrid.
  • Contact phone: 635661658
  • Contact email: rrss@ennstaliberia.com

Personal Data Registry

In compliance with the GDPR and LOPD-GDD, personal data collected by Landessa Coffee through the forms on its pages will be incorporated into our file to facilitate, expedite, and fulfill the commitments established between Landessa Coffee and the User or maintain the relationship established in the forms filled out by the User, or to respond to a request or inquiry. Furthermore, in accordance with the GDPR and LOPD-GDD, unless otherwise provided by Article 30.5 of the GDPR, a record of processing activities is maintained that specifies, according to their purposes, the processing activities carried out and the other circumstances established in the GDPR.

Principles applicable to the processing of personal data

The processing of User personal data will be subject to the following principles as outlined in Article 5 of the GDPR and Articles 4 and subsequent articles of Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights:

  • Principle of lawfulness, fairness, and transparency: User consent will always be required with complete transparency regarding the purposes for which personal data is collected.
  • Principle of purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
  • Principle of data minimization: Only strictly necessary personal data will be collected in relation to the purposes for which it is processed.
  • Principle of accuracy: Personal data must be accurate and always updated.
  • Principle of storage limitation: Personal data will only be kept for as long as necessary for the purposes of its processing.
  • Principle of integrity and confidentiality: Personal data will be processed in a way that ensures its security and confidentiality.
  • Principle of proactive accountability: The Data Controller will be responsible for ensuring compliance with the above principles.

Categories of personal data

The categories of data processed at Landessa Coffee are only identification data. No special categories of personal data, as defined in Article 9 of the GDPR, are processed.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is consent. Landessa Coffee undertakes to obtain explicit and verifiable User consent for the processing of their personal data for one or more specific purposes. The User may withdraw their consent at any time, and this withdrawal will not affect the legality of prior processing based on consent before its withdrawal.

Purposes of processing personal data

Personal data is collected and managed by Landessa Coffee to facilitate, expedite, and fulfill the commitments established between the Website and the User or to maintain the relationship established in the forms filled out by the User, or to respond to a request or inquiry.

Retention periods of personal data

Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in all cases, only for the following period: [specify], or until the User requests its deletion.

Recipients of personal data

User personal data will not be shared with third parties. If shared, Users will be informed about the recipients or categories of recipients of personal data.

Personal data security

Landessa Coffee is committed to adopting technical and organizational measures to ensure the security of personal data, preventing its accidental or unlawful destruction, loss, or unauthorized access.

Rights derived from personal data processing

The User has the following rights under the GDPR:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

Landessa Coffee reserves the right to modify its Privacy Policy in compliance with legislative, jurisprudential, or doctrinal changes.