Basic Information on Data Protection

Controller	CAL CABRÉ S.L.
Purpose	– Provision of online services. – Management of website users. – Processing of personal data to manage customer registration. – Electronic and telephone communications (WhatsApp, email). – Commercial communications related to our services via WhatsApp, email, and telephone.
Lawful Basis	Express consent and legitimate interest.
Recipients	Data will not be disclosed to third parties except where required by law.
Rights	Access, rectify and erase data, as well as other rights explained in the additional information.
Additional Information	You can consult additional and detailed information on Data Protection in the annexed clauses available at: https://pinaysabarcelona.com/privacy-policy

At CAL CABRÉ, S.L., we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this goal. Your privacy matters to us, and we believe we must be transparent about it.

Therefore, and in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter “GDPR”) regarding the protection of natural persons with respect to the processing of personal data and the free movement of such data, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (hereinafter “LSSI”), CAL CABRÉ, S.L. informs users that, as the data controller, it will incorporate the personal data provided by users into an automated file.

Our commitment begins by explaining the following:

• We collect your data to improve the user experience, taking your interests and needs into account.

• We are transparent regarding the data we collect about you and the reasons for doing so.

• Our aim is to offer you the best possible experience. When we use your personal information, we will always comply with the law and, when required, request your consent.

• We understand that your data belongs to you. Therefore, if you decide not to authorize us to process it, you may request that we stop processing it.

• Our priority is to guarantee your security and to process your data in accordance with European regulations.

For more information about how we process your data, please refer to the different sections of the privacy policy below:

---

Who is responsible for processing your personal data?

Identity: CAL CABRÉ, S.L.
Registered office: PASSEIG DEL CENTENARI, 3, VILANOVA DEL VALLÈS
Tax ID (C.I.F.): B61165767
Email: jaume@calcabre1910.com

CAL CABRÉ, S.L. has appointed an internal contact person for data protection matters. If you have any queries regarding the processing of your personal data, you may contact them at jaume@calcabre1910.com.

What personal data do we collect?

The personal data you may provide includes:

• Name, address, and date of birth.

• Telephone number and email address.

• Location.

• Payment and refund information.

• IP address, date and time of access to our services, the internet browser you use, and data regarding the operating system of your device.

• Any other information or data you choose to share with us.

In some cases, completion of the registration form is mandatory to access and enjoy certain services offered on the website. Failure to provide the requested personal data or to accept this data protection policy will make it impossible to subscribe, register, or participate in any promotions that require personal data.

Why and for what purpose do we process your data?

At CAL CABRÉ, S.L., we process the information provided by interested parties for the following purposes:

• Managing orders or contracts for any of our services, whether online or in physical stores.

• Managing the sending of information you request.

• Carrying out commercial actions and maintaining and managing the relationship with the user, as well as managing services offered through the website and information tasks. We may perform automated assessments, create profiles, and segment clients to personalize the processing according to their characteristics and needs and to improve the online customer experience.

• Organizing and managing contests, sweepstakes, or other promotional activities.

• In certain cases, providing information to authorities or third-party companies for auditing purposes, as well as handling personal data on invoices, contracts, and documents to respond to customer or public administration claims.

The personal data obtained as a result of your registration as a user will form part of the Record of Processing Activities (RAT), which will be updated periodically in accordance with the GDPR.

What is the legal basis for processing your data?

The processing of your data may be based on the following legal grounds:

• Consent of the data subject for the contracting of services and products, completion of contact forms, requests for information, or subscription to e-newsletters.

• Legitimate interest for the processing of our clients’ data for direct marketing actions and express consent of the data subject for automated evaluations and profiling.

• Compliance with legal obligations for fraud prevention, communication with public authorities, and claims from third parties.

How long do we keep your data?

Data will be processed for the time necessary to fulfill the purpose for which it was collected (for example, as long as the business relationship lasts), as well as to comply with legal obligations arising from data processing.

Who receives your data?

In some cases, and only when necessary, CAL CABRÉ, S.L. will provide user data to third parties. However, data will never be sold to third parties. External service providers (for example, payment providers or delivery companies) with whom CAL CABRÉ, S.L. works may use the data to provide the corresponding services, but they will not use the information for their own purposes or share it with third parties.

CAL CABRÉ, S.L. ensures the security of personal data when it is sent outside the company and guarantees that third-party service providers respect confidentiality and implement appropriate measures to protect personal data. These third parties are required to ensure that the information is processed in accordance with data privacy regulations.

In some cases, the law may require the disclosure of personal data to public authorities or other parties; only the strictly necessary data will be disclosed to comply with such legal obligations.

Personal data obtained may also be shared with other companies within the group.

Where is your data stored?

In general, data is stored within the EU. If data is sent to third parties outside the EU, we will ensure that they provide a sufficient level of protection, either through Binding Corporate Rules (BCR) or because they adhere to the “Privacy Shield” or equivalent mechanisms.

What are your rights and how can you exercise them?

You may send your communications and exercise your rights by email to: jaume@calcabre1910.com.

Under the GDPR, you may request:

• Right of access: Request information about the personal data we hold about you.

• Right of rectification: Notify us of any changes to your personal data.

• Right of erasure (“right to be forgotten”): Request the deletion of your personal data after prior blocking.

• Right to restriction of processing: Request a limitation on the processing of your personal data.

• Right to object: Withdraw your consent to data processing, objecting to further processing.

• Right to data portability: In some cases, request a copy of personal data in a structured, commonly used, and machine-readable format for transmission to another controller.

• Right not to be subject to automated decision-making: Request not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you.

In certain cases, your request may be denied if it involves deleting data necessary to comply with legal obligations.

If you have a complaint about how we process your data, you may lodge a complaint with the data protection authority.

Who is responsible for the accuracy of the data provided?

The user is solely responsible for the accuracy and correctness of the data submitted, exonerating CAL CABRÉ, S.L. from any liability in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided and commit to keeping it duly updated. The user agrees to provide complete and correct information in the registration or subscription form. CAL CABRÉ, S.L. reserves the right to terminate the contracted services if the data provided is false, incomplete, inaccurate, or not updated.

CAL CABRÉ, S.L. is not responsible for the accuracy of information that is not of its own creation and for which another source is indicated. Therefore, it assumes no responsibility for any hypothetical damages that may arise from the use of such information.

CAL CABRÉ, S.L. reserves the right to update, modify, or delete the information contained on its web pages and may even limit or deny access to this information. CAL CABRÉ, S.L. is exonerated from liability for any damage or harm that the user may suffer as a result of errors, defects, or omissions in information provided by CAL CABRÉ, S.L. when such information comes from outside sources.

Likewise, the user certifies that they are over 14 years of age and have the legal capacity to give consent regarding the processing of their personal data.

How do we process minors’ data?

Our services are not specifically directed to minors. However, if any of them are addressed to children under fourteen, in accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018 of 5 December (LOPDGDD), CAL CABRÉ, S.L. will require valid, free, unequivocal, specific, and informed consent from legal guardians to process minors’ personal data. In such cases, identification of the person giving consent (ID card or equivalent) will be required.

For minors over fourteen, data may be processed with the user’s consent, except in cases where the law requires the involvement of those holding parental authority or guardianship.

What security measures do we apply to protect your data?

CAL CABRÉ, S.L. has adopted the legally required levels of protection for personal data and has implemented additional technical measures to prevent the loss, misuse, alteration, unauthorized access, and theft of the personal data provided to CAL CABRÉ, S.L.

CAL CABRÉ, S.L. is not responsible for any damages that may result from interferences, omissions, interruptions, computer viruses, telephone failures, or disconnections in the operational functioning of this electronic system due to causes beyond CAL CABRÉ, S.L.’s control; nor for delays or blockages in the use of this electronic system caused by deficiencies or overloads in telephone lines, the Data Processing Centre, the Internet system, or other electronic systems, nor for damage that may be caused by third parties through unlawful intrusions beyond CAL CABRÉ, S.L.’s control. Nevertheless, the user should be aware that Internet security measures are not invulnerable.

Links to other websites

The website pinaysabarcelona.com may contain links to other websites. By clicking on one of these links and accessing an external website, your visit will be subject to the privacy policy of that website, and CAL CABRÉ, S.L. is released from any responsibility regarding its privacy policy.

How do we use cookies?

The CAL CABRÉ, S.L. website uses cookies to optimize and personalize your browsing experience. Cookies are physical information files stored on the user’s device. The information collected through cookies is used to facilitate user navigation on the portal and to optimize the browsing experience. Data collected through cookies may be shared with the creators of those cookies, but the information obtained will never be associated with personal data or data that can identify the user.

However, if the user does not wish cookies to be installed on their hard drive, they can configure their browser to prevent the installation of such files. For more information, see our Cookies Policy at: https://www.pinaysabarcelona.com/cookies-policy/.

Can the privacy policy change?

This privacy policy may be modified. We recommend that you review the privacy policy periodically.