In compliance with the provisions of Regulation (EU) 679/2016 of 27 April 2016, General Data Protection Regulation, and with Organic Law 3/2018 of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, Nobita Gourmet S.L. (hereinafter, “Nobita Gourmet”) hereby informs you that the personal data you provide when using the various services and features offered on our website will be processed by this entity in its capacity as Data Controller.

For the purpose of processing such personal data, Nobita Gourmet informs you that it adopts all the necessary technical and organisational measures to ensure the security of your personal data and to prevent its theft or loss, misuse, alteration or unauthorised access. All such measures are implemented taking into account the state of technology at any given time, the nature of the personal data being processed and the risks to which it may be exposed.

Who are we?

Nobita Gourmet processes your personal data in its capacity as Data Controller, which means that it determines the purposes and means of processing the personal data you provide to us.

What personal data do we collect?

Nobita Gourmet will only collect and process personal data from users that are adequate, relevant, and limited to what is necessary in relation to the purposes established. In this respect, the categories of personal data that may be processed include:

• Contact details: we will process users’ personal, identification, and contact data, such as full name, address, telephone number, home address and country of residence, nationality, tax identification number, or email address.
• Browsing, traffic, location, and social media data: we collect information about how you use our website and about your interactions with the spaces we manage on different social media platforms, as well as any data made available by the social network when you become a follower of our profiles.

For what purpose do we process your data? What legitimises us to do so?

Nobita Gourmet processes the categories of data indicated for the following purposes:

• Maintaining contact with you as a user: we process your personal data in order to manage our relationship with you and to respond to any questions or queries. The legal basis that legitimises the processing of your data for this purpose is your consent, granted when you provide your data through the relevant channel (web form, telephone, social network, etc.).
• Development of the contractual relationship: where applicable, we process your data to formalise and maintain the contractual relationship that binds us to you as a client or interested party, and specifically to manage the services you have requested. In this case, the legal basis for processing is the performance of our contractual relationship.
• Website management: we process user data in order to maintain and manage our website.
• User browsing analysis and advertising services: we process users’ data to analyse their browsing activity on our website and on the spaces we manage on different social media platforms (profiles), in joint responsibility with the owners of those social networks. This analysis allows us to identify interest groups for advertising purposes. You can find more information in the respective notices and privacy and data processing policies of each social network.

For how long do we retain your personal data?

The period for which we will retain your data will depend on the purpose for which we are processing it.

In the event that a contractual relationship is established, we will retain your data until that relationship has come to an end, unless there is a legal obligation requiring us to keep it for a longer period.

In cases where we process your personal data on the basis of consent you have given us, we will process it until the stated purpose has been fulfilled or until you withdraw that consent.

The above will apply without prejudice to our subsequently retaining your data, duly stored and protected, for the purpose of complying with the legal obligations imposed on Nobita Gourmet under applicable regulations, or in order to guard against potential liabilities arising from the processing. Once any possible actions in each case have become time‑barred, we will securely delete your personal data.

Who do we share your data with?

As a general rule, Nobita Gourmet does not envisage disclosing your personal data to any third party.

As an exception to the foregoing, we inform you that Nobita Gourmet may disclose personal data where required to do so by a legal obligation, or in order to respond to any claims and liabilities that may arise.

Nobita Gourmet may only disclose your data in situations not covered in the previous paragraph where it has your express, specific, informed and unambiguous consent, or where another lawful basis for processing applies.

Likewise, we inform you that third parties may process users’ personal data on behalf of Nobita Gourmet in order to provide the services requested by them. Any third party that accesses personal data will be considered a data processor and must offer sufficient guarantees that it will implement appropriate technical and organizational measures to ensure compliance with the data protection regulations in force.

Data protection policy

In accordance with the provisions of Regulation (EU) 2016/679 on the Protection of Personal Data and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, we inform you that the data you provide in this form will be incorporated into a personal data processing register of the company, under the responsibility of Nobita Gourmet, S.L., with registered office at Calle Cervantes 7, 28801, Alcalá de Henares, Madrid, Spain. The purpose of such processing is the management of users of the Website, the management of the services offered through the Website and, where applicable, the management, development and performance of the relationship established between Nobita Gourmet and those who provide their personal data through the Website. If you wish to exercise your ARSOP rights (access, rectification, erasure and objection), as well as your rights to restriction and portability of data, please send a written and signed communication to Nobita Gourmet, S.L. at Calle Cervantes 7, 28801, Alcalá de Henares, Madrid, Spain, or by email to nobitagourmet@gmail.com.

What rights do you have regarding your data?

We undertake to guarantee the confidentiality and security of your personal data and we also guarantee that you can exercise the rights set out below. You may exercise these rights by writing to us at nobitagourmet@gmail.com, stating the reason for your request and the specific right you wish to exercise, and explaining the situation so that we can identify you. You may also exercise your rights by sending us a letter by ordinary post, indicating the same information as in the case of communication by email.

The rights available to you are:

• Right of access: you have the right to obtain confirmation as to whether Nobita Gourmet is processing personal data concerning you and, if so, to access such data. You also have the right to obtain a copy of the data in question.
• Right to rectification: you have the right to request the rectification of inaccurate personal data concerning you.
• Right to erasure: you have the right to request the deletion of your data when, among other reasons, the data are no longer adequate, necessary or relevant for the purposes for which they were collected.
• Right to object: you have the right to object to the processing of your personal data on grounds relating to your particular situation. In such a case, Nobita Gourmet will cease processing those data, unless there are compelling legitimate grounds for the processing, or for the establishment, exercise or defence of legal claims.
• Right to restriction of processing: where certain conditions are met, you may request the restriction of the processing of your data, in which case Nobita Gourmet will only be able to process them, apart from storing them, with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of third parties, or for reasons of important public interest.
• Right to data portability: you have the right to receive your personal data, or to have Nobita Gourmet transmit them to a third party, in a structured, commonly used and machine‑readable format, provided that the processing is based on your consent and is carried out by automated means.

Nobita Gourmet undertakes to respond to all requests within the time limits established in the applicable regulations.

Likewise, we inform you that, as a last resort, you may seek the protection of the Spanish Data Protection Agency (AEPD). You can find the Agency’s contact details on its website at www.aepd.es.

Changes to the Privacy Policy

We may update the information contained in this Privacy Policy when circumstances so require. For this reason, we suggest that you review our Policy from time to time so that you are aware of any changes we may have made.