Privacy Policy

In light of the entry into force of the General Data Protection Regulation 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), this privacy policy has been updated. Below is information regarding the data processing carried out by FRESHLEGS, S.L.

1. Data Controller

The Data Controller corresponds to the owner of this website, whose full details appear in the Legal Notice.

2. Notice, Policy and Security Measures

The data controller, taking into account the nature, scope, context and purposes of the processing, has implemented all technical and organisational measures to ensure proper compliance with data protection regulations, in accordance with Articles 24 et seq. of the General Data Protection Regulation and Article 28 of Organic Law 3/2018.

Likewise, appropriate security measures are guaranteed for the processing of personal data, as required by and in accordance with the applicable regulations, to ensure full compliance with them.

3. Category of Data, Purpose and Legal Basis of Processing

This website has the following forms through which different types of data are collected, depending on the purpose:

Contact form: identifying data, contact details and any other data the user may provide. This will be used to respond to enquiries raised.

Registration form: identifying data, contact details, billing and payment details, commercial and service-related data. This will be used to create a user account allowing you to access our website's features as a customer, and to provide you with the services offered. It will also be used for administrative management purposes and after-sales and loyalty services.

Candidate form: identifying data, contact details, academic background, work experience and any other data that may be included in a CV. This will be used in the data controller's personnel selection processes or other processes related to human resources management.

Content subscription form: contact details. This will be used to periodically send newsletters and other information requested by the user.

Booking form: identifying data and contact details. This will be used to make, amend or cancel bookings.

Promotions or giveaways: identifying data and contact details. This will be used to run giveaways and to communicate with winners, as indicated in the specific rules of each promotion.

The legal basis for this processing is the informed and freely given consent that the user must provide before submitting any information through the form. This consent may be withdrawn at any time without affecting the processing carried out prior to its withdrawal.

Other processing may also be carried out on the basis of compliance with legal obligations or the performance of a contract, as applicable.

In addition, the website may obtain information through cookies (see cookie policy).

4. Source and Categories of Data Processed

Personal data comes directly from the data subject. Should it, in any case, be obtained from other sources, appropriate information about such source, as well as the categories of data affected, would be provided.

5. Data Retention Period

Data will be kept for as long as necessary to carry out the procedures and formalities entrusted, as well as to fulfil the other purposes involved, and in any case bearing in mind the legally required periods.

Once no longer active, data will be deleted or, if necessary, blocked, remaining accessible only to Judges and Courts, the Public Prosecutor's Office or the competent Public Administrations for the purpose of establishing possible liabilities arising from the processing, during the applicable limitation period. Once this second period has elapsed, the data will then be destroyed. All of this in accordance, where applicable, with Article 32 of the LOPDGDD.

6. Recipients: Data Transfers and International Transfers

No data transfers are envisaged, except where necessary for compliance with a legal provision or for the performance of a contract.

Data processors who carry out a service on behalf of the controller may have access to your personal data — that is, those service providers who need to access your personal data for the functional or operational development of the service to be provided.

Furthermore, no international data transfers are envisaged. Should such transfers arise, they will be carried out with the necessary authorisation and requirements.

7. Social Networks

The data of friends or followers on social networks may be processed by the controller in order to interact with them and keep them informed of its activities, services and promotions. This data will be processed on the legal basis of consent and will be kept for as long as the person remains a "friend" or "follower", and consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to such withdrawal. Providing data for this purpose is voluntary, although if not provided, the person will not be able to be a "friend" or "follower" on the platforms or media in which the controller operates.

Furthermore, should this website offer a user registration option that allows registration via social networks, the personal data specifically processed for this purpose will come from the relevant social network, to which the data subject will have previously provided such data for the purposes set out in its corresponding privacy policies. The categories of data processed and collected from the relevant social network will be those appearing in the registration form itself and those relating to the data you have provided to that social network. If, in order to register on this website, additional data beyond that supplied by the social network is required, it will be requested and must be completed in the registration form, subject to the applicable privacy conditions.

8. Minors

Minors may not use the services available through the website without the prior authorisation of their parents or guardians as legal representatives, who will be solely responsible for all acts carried out through this website by such minors in their care, including the completion of any forms that may exist and the ticking, where applicable, of any accompanying boxes.

With regard specifically to personal data protection, and in accordance with Articles 8 of the GDPR and 7 of the LOPDGDD, only persons over fourteen years of age may lawfully give their consent for the processing of their personal data. In the case of a minor under fourteen years of age, the consent of parents or guardians as legal representatives will be required for processing, and this will only be considered lawful to the extent that they have authorised it. Under no circumstances will data relating to the professional or economic situation or privacy of other family members be obtained from the minor without their prior consent.

9. Rights and Additional Information on Data Protection

The data subject has the right to obtain confirmation as to whether FRESHLEGS, S.L. processes personal data concerning them, as well as to access their personal data, request rectification of inaccurate data or, where applicable, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, the data subject may request the restriction of the processing of their data, in which case it will only be kept for the exercise or defence of possible claims.

Likewise, in certain circumstances and for reasons relating to their particular situation, the data subject may object to the processing of their data. FRESHLEGS, S.L. will cease processing the data, except for compelling legitimate reasons, or for the exercise or defence of possible claims. Similarly, the data subject holds the right to data portability where technically possible and in certain cases.

In addition, any consent previously given may be withdrawn at any time.

Furthermore, where applicable, the data subject has the right not to be subject to decisions based solely on the automated processing of their data, including profiling. In any such hypothetical cases where decisions are made, the data subject would be duly informed in this regard.

The data subject may raise any questions they consider relevant in relation to this policy, obtain further information on data protection, and exercise their rights under the legally established terms, by sending a communication to: FRESHLEGS, S.L., Av. Ourense, 17 (27200 Palas de Rei), or by email to: alcasasran@gmail.com, indicating the relevant request and accompanied by a copy of their ID card or other document proving their identity for the purposes of exercising such rights. Where acting through representation, a copy of the represented party's ID card (or equivalent document) and documentation proving the representative's authority must also be provided.

You can obtain, on the website of the Spanish Data Protection Agency, the templates for exercising the various data protection rights. You may also request such templates and forms directly from the Agency itself.

If you consider that your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency: www.aepd.es.

Last updated: MAY 2025