DATA OF THE WEBSITE’S OWNER

  • NAME: BUCKETS CHOCOLATE SLU
  • NIF: B65980849
  • Postal adress: c/Banyoles, n2. 17850 Besalú. (Girona). Spain.
  • E-mail: info@bucketschocolate.com
  • Phone: +34 872200490
  • Company registration: Tomo 3286, folio 148, hoja GI-66998, e inscripción 2021/945.
  • Main purpose: Handmade chocolate.

 

DATA PROTECTION

Pursuant to current applicable regulations on the protection of personal data, we inform you that your data will be included in the processing system owned by BUCKETS CHOCOLATE SLU with Tax Identification Number B65980849 and registered office located at BANYOLES, N 2 17850, BESALU (GIRONA), and that their respective purposes, storage periods and legal bases are listed below. For the processing that requires this, we also inform you of the possibility of profiling and automated decision-making, as well as the possible disclosures and international transfers that BUCKETS CHOCOLATE SLU plans to make:

PROCESSING PERFORMED

Website management

  • Purpose: Process and manage the data required for the website’s functionality
  • Storage period: Until withdrawal of the consent given
  • Legal basis: The data subject’s consent
  • Type of data: Only identifying data
  • Disclosures: Not expected
  • International transfers: Not expected
  • Profiling: Not expected

Web form:

  • Purpose: To attend to your queries and/or requests
  • Storage period: For such time as the consent is given.
  • Legal basis: The data subject’s consent
  • Type of data: Only identifying data
  • Disclosures: None
  • International transfers: Not expected
  • Profiling: Not expected

Regulatory compilance

  • Purpose: Manage and process the obligations and duties arising from compliance with the regulations which apply to the organisation
  • Storage period: Copies of the documents will be kept until the actions for claiming a possible liability have lapsed
  • Legal basis: Compliance with a law
  • Type of data: Only identifying data
  • Disclosures: Your data will be disclosed, if necessary, to bodies and/or public administrations with jurisdiction in the matter in order to comply with the obligations established in applicable legislation. In addition, you are informed that the legal basis for the disclosure is to comply with the obligations set forth in applicable legislation.
  • International transfers: Not expected
  • Profiling: Not expected

Newsletters

  • Purpose: Collect, record and process data for marketing purposes in order to send you the Newsletter you have subscribed to
  • Storage period: For such time as the consent is given
  • Legal basis: The data subject’s consent
  • Type of data: Only identifying data
  • Disclosures: None
  • International transfers: Not expected
  • Profiling: Not expected

Marketing actions

  • Purpose: Collect, record and process data for advertising and market prospection activities for our products and/or services
  • Storage period: For such time as the consent is given
  • Legal basis: The data subject’s consent
  • Type of data: Only identifying data
  • Disclosures: None
  • International transfers: Not expected
  • Profiling: Not expected

Managing purchases and/or service contracting

  • Purpose: Collect, record and process data for the purpose of managing your purchase, and to ensure correct performance, fulfilment and conclusion of the contract between both parties
  • Storage period: During the time necessary to manage purchase of the products or services acquired, including possible returns, complaints or claims associated with purchase of the particular product or service
  • Legal basis: Performance of a contract
  • Type of data: Only identifying data
  • Disclosures: Your data will be disclosed, if necessary, to the Tax Authority, Banks, Savings Banks, Bodies and/or public administrations with jurisdiction in the matter in order to comply with the tax obligations established in applicable legislation. In addition, you are informed that the legal basis for the disclosure is to comply with the obligations set forth in applicable legislation.
  • International transfers: Not expected
  • Profiling: Not expected

Financial and administrative management

  • Purpose: Administrative management, invoicing, accounting and legal obligations
  • Storage period: 5 years in compliance with Tax Law and 10 years for the tax documentation in compliance with Basic Law 7/2012
  • Legal basis: The data subject’s consent
  • Type of data: Only identifying data
  • Disclosures: Compliance with a law
  • International transfers: Not expected
  • Profiling: Not expected

 

DATA SUBJECTS’ RIGHTS

BUCKETS CHOCOLATE SLU informs you that you can exercise the rights of access, rectification, restriction, erasure, portability and objection to processing your personal data before the Data Controller, and also withdraw the consent given.

  • Right of Access: This is your right to obtain information about your specific personal data and what processing has been or is being carried out on them, and also the information available about the source of such data and the disclosures made or planned.
  • Right of Rectification: This is your right to correction of inaccurate or incomplete data.
    Any such correction can only be made for the information that is under the APP’s control, for example, deleting comments published on the page itself, images or web content that contain your personal data.
  • Right to Restriction of Processing: This is the right to restrict the purposes of the processing originally intended by the data controller.
  • Right of Erasure: This is the right to erase your personal data, except as provided in the GDPR itself or in other applicable regulations where obligatory storage periods and formats are specified.
  • Right of Portability: The right to receive the personal data that you have provided, in a structured, commonly used and machine-readable format, and to transmit them to another data controller.
  • Right of Objection: This is your right to prevent or stop processing of your personal data by BUCKETS CHOCOLATE SLU.

In order to exercise any of the rights described above, you must comply with the following requirements:

  • Send a letter to the address BANYOLES, N 2 17850, BESALU (GIRONA) (for the attention of BUCKETS CHOCOLATE SLU) or by e-mail to bas@bucketschocolate.com
    • The letter sent by the data subject requesting exercise of a given right must comply with the following legal requirements:
      The data subject’s full name and a copy of the Spanish National Identity Document or Foreigner Identity Document or any other identifying document.
      In the exceptional cases where representatives are accepted, these will also have to identify themselves in the same manner, in addition to the document confirming their status as representative. The photocopy of the National Identity Document may be replaced by other documents that prove identity by any other means valid under the law.
    • The specific content of the request. (In which you request the information you wish to access). If you do not make any reference to a specific file, you will be given all the information held with your personal data. If you request information from a particular file, only the information in this file will be given. If you request information about a third party, this will be refused in all cases. If you request the information over the phone, you will be asked to request the information in writing; you will be told how you can do this and the address you must send your request to. You will never be given information over the phone.
    • Address for notices.
    • The date and the requesting person’s signature.
    • Supporting documents for the request made.
    • The data subject must use any medium that provides proof of you sending the request and us receiving it.

Lastly, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency if you know or consider that a particular event may involve a breach of applicable data protection regulations.

BUCKETS CHOCOLATE SLU undertakes to take the necessary technical and organizational measures, matched to the level of risk entailed by the processing carried out by it and explained in the section on the terms and conditions of use, with the goal of guaranteeing their completeness, confidentiality and availability.