Privacy Policy

This section explains how we handle the personal data you provide when browsing our website or getting in touch with us. Our aim is to be transparent and to look after your information responsibly and securely.

In accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, which came into effect on 25 May 2018, Costumes empanadas de Galicia, as Data Controller, confirms that any personal data provided through this website will be processed in compliance with current legislation.

Who we are

  • Data controller: Costumes Gastronómicas de Galicia, S.L.
  • Company reg. no.: B-70444476
  • Registered address: Rúa Estaño Parcela G5 Nave 8.2, 15105 Pol. Industrial Bértoa, Carballo – A Coruña
  • Email: administracion@costumesgalicia.es

Information and consent

By reading this Privacy Policy, you are informed about how Costumes empanadas de Galicia collects, processes and protects personal data provided through this website, as well as data derived from your browsing activity and any future contractual relationship.

You should read this Privacy Policy carefully and decide freely whether you wish to provide your personal data.

Obligation to provide data

The data requested in the forms on this website is generally required. If it is not provided or is incomplete, we may not be able to process your request.

Purpose of processing and data retention

Your personal data will be processed for the following purposes:

  • To manage service requests.
  • To manage newsletter subscriptions and mailings.
  • To send personalised marketing communications, where consent has been given.
  • To manage the delivery of contracted services.
  • To conduct surveys and quality assessments of our services.

Data will be kept for as long as necessary to fulfil each purpose, or until you request its deletion, object to its use or withdraw your consent.

Types of data processed

  • Identification data (name and surname).
  • Contact details (postal address, telephone, email).
  • Login credentials.
  • Personal data (date of birth, gender, nationality).
  • Preferences and geolocation data.

If you provide data relating to third parties, you confirm that you have obtained their consent and informed them of the contents of this policy.

Legal basis for processing

Data processing is based on your consent, compliance with legal obligations, the performance of a contract, or the legitimate interests of the data controller in certain cases.

Data recipients

  • Group companies, for internal administrative purposes.
  • Service providers required to deliver our services.
  • Public authorities, where required by law.

Some recipients may be located outside the European Economic Area; in all cases, the legality of international transfers is ensured.

User responsibilities

  • You confirm that the data you provide is accurate, complete and up to date.
  • You confirm that you have informed and obtained authorisation from any third parties whose data you provide.
  • You will be liable for any harm arising from false or inaccurate data.

Marketing communications

Your data may be used to send marketing communications only where you have given your explicit consent.

You can unsubscribe at any time by emailing administracion@costumesgalicia.es or by clicking the link included in each communication.

Geolocation data

Some features of the website may require access to your device’s location. You can disable this option on your device, although doing so may limit certain features.

Your rights

You can exercise your rights of access, rectification, erasure, restriction, objection and portability by sending a request by post or email, enclosing a copy of your ID.

  • Withdraw any consent you have given.
  • Access and correct your data.
  • Request the deletion or restriction of processing.
  • Request data portability.

Security measures

Costumes empanadas de Galicia implements the technical and organisational measures necessary to ensure the security and confidentiality of personal data, preventing its loss, alteration or unauthorised access.