So far, the LOPD for data privacy issues has been complied with, a law that as of May 25, 2018, is replaced by the General Data Protection Regulation (GDPR) of the European Union, which the Government of Spain incorporated into Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights.

This Privacy Policy will be valid only for personal data obtained on the Website, not being applicable to information collected by third parties on other websites, even if they are linked by the Website.

With this, the Website expresses its commitment to maintain and guarantee commercial relationships with the User securely by protecting their personal data and ensuring their right to privacy.

Personal data required by the Website

To provide our services, we need some identifying information depending on the service the Website provides to you:

For the guestbook/ reviews:
● Name: to identify the User.
● Email: to know the email from which the comment was made.

For the private client area:
The client area is a private zone. The person responsible for the Website will provide you with a username and password so that as a User, you can access this restricted service, understanding that you accept all legal conditions.

For the contact form:
● Name and surname: to be able to respond to the inquiry.
● Phone: to be able to respond to the inquiry.
● Email: to be able to respond to the inquiry.

To make online payments:
If using a credit or debit card or a PayPal account to make an online payment for any service or product, the User's banking or financial data involved in the payment are always managed directly by the providers indicated in the section Services offered by third parties. The Website will never have access to the User's banking information.

Additionally, when you visit our Website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet service provider.

Legitimacy

Thanks to consent, we can process your data, which is a mandatory requirement for you to access the Website's services properly.

The user has the right to be forgotten whenever they want all their data to be removed from our databases.

The legal basis on which the processing of data is founded is as follows:

• Unambiguous and express consent from our clients to receive the service provided.
• Execution of a contract or pre-contractual measures.
• Legitimate interest.
• Compliance with legal obligations.

Category of data

The data collected by the Website are not considered sensitive or protected data.

According to article 9.1 of the new general data protection regulation of the European Union (GDPR), sensitive or protected data are personal data that reveal:

● Ethnic or racial origin.
● Political opinions.
● Religious or philosophical beliefs.
● Trade union membership.
● The processing of genetic data.
● Biometric data aimed at uniquely identifying a natural person.
● Data related to health.
● Data related to the sexual life or sexual orientations of a natural person.

We only work with the minimum identifying data necessary to carry out our work: name, surname, address, phone, email, NIF/tax code.

Recipients

Data transfers may be made to providers or for statistical purposes.

Data will be transferred to SANINO LA ANCHA SL for the management of reservations under a data processing contract and for the sending of commercial information from all brands of FAMILIA LA ANCHA (La Ancha, Fismuler, Las Tortillas de Gabino, Armando, Molino de Pez, and any other owned by the business group).

Data retention period

Customer data: name, phone, postal address, email, etc. will remain in our system as long as legally and technically required for the normal operation of the Website unless the User exercises their right to deletion or update.

Applicable regulations

Since May 25, 2018, the Website is governed by the General Data Protection Regulation (GDPR) of the European Union.

https://www.boe.es/doue/2016/119/L00001-00088.pdf

Since December 6, 2018, Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights is applicable:

https://www.boe.es/buscar/doc.php?id=BOE-A-2018-16673

Security measures

The Website is hosted on servers belonging to the company, and the necessary technical and organizational security measures have been implemented to guarantee the safety of the User's personal data and thus prevent its alteration, loss, and treatment and/or unauthorized access. This taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed, whether they come from human action or the physical or natural environment. All this in accordance with the provisions of the GDPR.

Additionally, further measures have been established to reinforce the confidentiality and integrity of the information on this Website. Continuously maintaining supervision, control, and evaluation of processes to ensure respect for data privacy.

Specifically, the measures adopted are:

● Connection with SSL certificate on the Website.
● Encryption of keys and passwords using standard cryptographic algorithms.
● Protection of servers through firewalls, process isolation, and other standard security measures.
● Daily backups geographically distributed to ensure service continuity in the event of an incident.

Exercise of rights

Any User who has provided their data to the Website may contact the owner of the website in order to exercise their right to access their data, rectification or deletion, limitation, and opposition concerning the data included in their files, free of charge.

The method to be used by the User to communicate with the Website will be through their email account registered in our web service, or in writing.

The User may exercise their rights by written communication directed to the Website with the reference “Data Protection,” specifying their data, proving their identity, and the reasons for their request at the following address:

dpd@sic-consulting.es

Any information that we need to store due to a legal, fiscal, or contractual obligation will be blocked and only used for such purposes instead of being deleted.

Modification of the privacy policy

The Website reserves the right to modify the Privacy Policy, motivated by a legislative, jurisprudential, or doctrinal change from the Spanish Agency for Data Protection.

Any modification of the Privacy Policy will be published at least ten days before its effective application.

Data controller and data processor

The data controller is the owner of the Website.

Services provided by third parties

To provide strictly necessary services for its proper functioning, the Website uses the following service providers under their corresponding privacy conditions:

● Google Analytics, for statistics. https://policies.google.com/privacy?hl=es
● Facebook Pixel, for statistics. https://www.facebook.com/privacy/explanation

Social plugins

On our Website, we offer links and services related to different social networks. If the User is a member of a social network and clicks on the corresponding link, the social network provider may link their profile data with the information of their visit to the Website.

Therefore, the User should be informed about the functions and policies regarding the processing of their personal data of the respective social network, whether they access one of our web pages with one of their social media profiles or share information through them.

The User can access the privacy policies of the different social networks at any time, as well as configure their profile to ensure their privacy.

● Facebook: https://www.facebook.com/help/323540651073243/
● Instagram: https://help.instagram.com/155833707900388
● Twitter: https://twitter.com/privacy
● Youtube: https://policies.google.com/privacy?hl=es&gl=es
● Linkedin: https://www.linkedin.com/legal/privacy-policy
● Pinterest: https://policy.pinterest.com/es/privacy-policy
● TikTok: https://www.tiktok.com/legal/privacy-policy?lang=es

Acceptance, consent, and revocability

The User declares to have been informed of the present conditions regarding the protection of personal data, accepting and consenting to the processing of the same by the Website in the manner and for the purposes indicated in the Legal Notice.

At any time, the User may revoke their data, but without affecting actions already taken in the past, that is, without retroactive effect.