Privacy policy.
This policy explains what personal data Cachitos Realfood, S.L. (Cachitos · Healthy pleasure) processes through this website, for what purpose, and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
| Controller | Cachitos Realfood, S.L. | ||
| Tax ID (NIF/CIF) | B56873193 | ||
| Address | Rambla de Santa Cruz, 44 · 38004 Santa Cruz de Tenerife (Santa Cruz de Tenerife) | ||
| Contact email | Cachitos.laboratoriorepostero@gmail.com | ||
| Visit measurement (GoatCounter, self-hosted) | Page visited, where you came from, browser, screen size and country. Your IP is only used at that moment so you are not counted twice, and is not stored | Knowing which pages get visited so we can improve the site | Legitimate interest (Art. 6.1.f GDPR) |
What data we process
This website is an informational showcase: it has no forms that send data to a server. The "Custom orders", "Workshops", "Birthdays" and "Events" buttons open WhatsApp with a message already drafted from what you type; that message goes directly to our business WhatsApp, it never passes through this website or gets stored on it.
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact forms (Custom orders, Workshops, Birthdays, Events) | Name, phone/WhatsApp number and the details you write (date, order type, number of people, etc.) | Handle your order, booking or enquiry | Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR) |
Cookie notice / localStorage |
Your choice to accept or reject the cookie notice | Remember your decision and avoid repeating the notice | Consent (Art. 6.1.a GDPR) / LSSI compliance |
| Web hosting (Clouding, servers in Barcelona) | IP address and technical connection data (access logs) | Security, operation and availability of the site | Legitimate interest (Art. 6.1.f GDPR) |
We don't use advertising cookies or third-party analytics such as Google Analytics. To know which pages get visited we use GoatCounter installed on our own server: it sets no cookies, does not track you across sites and does not store your IP address. Typefaces are also hosted on our server, and the Google map only loads if you explicitly accept it (see Cookie policy).
How long we keep your data
WhatsApp messages are kept on our own business WhatsApp, for as long as needed to handle your order or enquiry, or while the conversation stays active. Technical server logs (access logs) are kept for a maximum of 90 days and are then deleted automatically. They are only used to keep the site running and secure.
Who we share data with
We don't sell or share your data with third parties for commercial purposes. Only the providers necessary for the site to work access technical connection data:
- Hosting: Cloudi NextGen, S.L. (“Clouding”), tax ID B66356528, registered office at Ronda General Mitre 25, bajos, 08017 Barcelona. It acts as data processor under the data protection clause of its terms of service. The servers are physically located in the data centre of Evolutio Cloud Enabler, S.A.U., in L'Hospitalet de Llobregat (Barcelona), acting as sub-processor. All of it within the European Union: hosting this site does not involve any international data transfer.
- Visit measurement: the statistics server is maintained by Enlace Estudio, the studio that builds and maintains this site, on its own server located in the European Union. It acts as data processor and does not use that data for any other purpose.
- WhatsApp (Meta Platforms, Inc.): if you write to us on WhatsApp, that message is governed by WhatsApp's privacy policy.
- Google Maps: only if you accept the embedded map, as explained in the Cookie policy.
Does your data leave the European Union?
Both the website hosting and the visit measurement run on servers located in Spain, so browsing this site does not involve any international data transfer.
There are two services from US companies, and they only come into play if you choose to use them:
- WhatsApp, if you decide to message us from one of the buttons on the site. That message is governed by WhatsApp's privacy policy.
- Google Maps, only if you accept the map. If you reject it, nothing is sent to Google.
Both companies are certified under the EU-US Data Privacy Framework, which the European Commission considers valid for these transfers. If you'd rather avoid them, you can reach us by phone or email and simply not accept the map.
Your rights
You can exercise, at any time, your right to:
- Access: know what data we process about you.
- Rectification: correct inaccurate data.
- Erasure: request that we delete your data.
- Objection and restriction: object to processing or ask us to restrict it.
- Portability: receive your data in a structured format.
To exercise these rights, write to us at Cachitos.laboratoriorepostero@gmail.com stating which right you want to exercise. You can also file a complaint with the Spanish Data Protection Agency (AEPD) if you believe we haven't handled your request properly.
Changes to this policy
We may update this policy to reflect legal changes or changes to the site itself. The date of the last update appears at the top of this page.
← Back home