Privacy policy

Who processes your data

The data controller is PASDULCE, S.L. (tax ID B30155287), C/ Barón del Solar, 47, bajo, 30520 Jumilla (Murcia), Spain. For any question about your data, email us at info@dondulce.com or call us on +34 968 78 26 11.

We apply the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD, the Spanish data protection act).

What data we process and why

If you contact us

Through the contact form, by email or by phone: your name, email, phone, company and type of business (if you give them to us) and whatever you tell us. We use them to reply to you and, if you are a business, to prepare the information or quote you ask for.

• Legal basis: your consent when you send us the message (Art. 6(1)(a) GDPR) and, if you ask us for a quote, the taking of pre-contractual steps (Art. 6(1)(b)).
• Retention period: as long as needed to deal with your enquiry. If a business relationship results from it, for as long as it lasts and, afterwards, for the periods required by law.

If you send us your CV

Your name, town, email, phone and the information in your CV. We use them to consider you for current or future recruitment processes that match your profile.

• Legal basis: your explicit consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Retention period: until you ask us to delete it and, at most, one year from when we receive it. If you would like to stay in our candidate database, send it to us again.
• Please do not include in your CV any data about your health, beliefs, religion or other special categories of data: we don’t need them.

If you buy from the online shop

Your name, email, phone, delivery and billing addresses and your order details. We use them to prepare and ship your order, take payment, issue the invoice and help you with any issue or return. Your card details are processed directly by the payment provider: we never see or store them.

• Legal basis: the purchase contract (Art. 6(1)(b) GDPR) and our accounting and tax obligations (Art. 6(1)(c)).
• Retention period: while the order and its guarantee are being handled and, afterwards, for the time required by law (six years for accounting records, under Article 30 of the Spanish Commercial Code).

If you are a business customer or supplier

The contact details of the people who work at your company and with whom we deal (name, job title, work email and phone), to maintain the business relationship. The legal basis is our legitimate interest in maintaining it (Art. 6(1)(f) GDPR and Art. 19 LOPDGDD).

Marketing

We will not send you marketing communications by email, SMS or messaging apps unless you have expressly requested or authorised them, as required by Article 21 of the LSSI-CE. If you ever authorise them, you will be able to unsubscribe in every message.

Who we share your data with

We do not sell or disclose your data to anyone, except where required by law (for example, to the Spanish Tax Agency, the courts or the police).

To operate, we rely on some service providers who process data on our behalf, always under a contract that requires them to use it only for that purpose and to protect it (Art. 28 GDPR):

• The website and email hosting provider.
• Our bank and Redsys, which handle card payments.
• The courier company that delivers your orders (TIPSA), with the delivery details only.

If any of these providers were to process data outside the European Economic Area, it will do so with the safeguards required by the GDPR: a country covered by a European Commission adequacy decision or the standard contractual clauses approved by the Commission.

Social media and videos

We have profiles on Facebook, Instagram, Pinterest and YouTube. If you follow us or message us there, we will process your data within that network to reply to you, and the network itself processes it in accordance with its own privacy policy. The YouTube videos on this website don’t load until you tap to watch them: see the cookie policy.

Your rights

You can ask us at any time for:

• Access: to know what data of yours we hold and what we do with it.
• Rectification: to correct any inaccurate data.
• Erasure: for us to delete it when it is no longer needed.
• Objection and restriction: for us to stop processing it or only keep it stored.
• Portability: to receive it in a format you can take to another company.
• Withdraw your consent, without affecting what we did with it before.

Write to us at info@dondulce.com or by post to the address above, telling us which right you wish to exercise. We will only ask you for proof of identity if we have reasonable doubts about it. We will reply within one month. We do not make automated decisions or create profiles with your data.

If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) (C/ Jorge Juan, 6, 28001 Madrid).

How we protect your data

The website always runs over an encrypted connection (HTTPS), uses no cookies or tracking tools, and only asks for the essential data in each form. Within the company, your data is only accessed by the people who need it to help you.

The website forms are not intended for children under 14. To buy from the shop or send us your CV you must be 18 or over.

Other legal pages

For cookies, see the cookie policy.

The website terms of use are in the legal notice, and the terms of purchase in the terms of sale.

Our quality and food safety policy is in Quality and certifications.

If we change this policy we will show it with the update date above and, if the change is significant, we will let you know.