This privacy policy explains how Castanya de Viladrau, S.C.P. processes the personal data collected through the website, contact forms and the purchase process.

Data controller

  • Owner: Castanya de Viladrau, S.C.P.
  • Tax ID (CIF): J55051775
  • Address: Carretera de les afores, s/n, 17406 Viladrau (Girona)
  • Email: info@castanyadeviladrau.cat
  • Phone: +34 93 884 83 95

What data we may collect

Depending on the relationship with the user, we may process data such as:

  • first and last name
  • email address and phone number
  • shipping and billing address
  • data necessary to manage an order, a booking or an enquiry
  • information related to incidents, returns or complaints
  • basic technical browsing data and consent preferences

Purposes of processing

Data may be used to:

  • manage enquiries submitted through the website
  • process purchases, payments, shipments or pickups
  • handle returns, incidents and complaints
  • send communications related to the services or orders requested
  • comply with legal, tax and administrative obligations
  • improve user support and the functioning of the website

Legal basis

The processing of data may be based on one or more of the following grounds:

  • the consent of the data subject
  • the performance of a contract or pre-contractual measures
  • compliance with legal obligations
  • the legitimate interest of properly managing the activity, security and customer support

Data recipients

Data will not be shared with third parties except where necessary due to a legal obligation or for the provision of services directly linked to the activity, such as:

  • payment gateways and financial services
  • logistics or courier operators
  • technical, hosting or support providers necessary for the operation of the website
  • public authorities, when required by law

Personal data is never sold to third parties.

Data retention

Data will be kept for as long as necessary to fulfil the purpose for which it was collected and, where applicable, for the legal periods required under tax, administrative or liability regulations.

Rights of data subjects

Any person may exercise their rights of:

  • access
  • rectification
  • erasure
  • objection
  • restriction of processing
  • portability
  • withdrawal of consent, when this is the basis for the processing

To exercise these rights, a request may be sent to info@castanyadeviladrau.cat clearly stating the right to be exercised.

Security

Castanya de Viladrau, S.C.P. applies reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or improper disclosure.

Updates

This policy may be revised to adapt to regulatory, technical or operational changes to the website. The version published on this page is the one in force at any given time.