Privacy Policy

In compliance with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y Garantía de los Derechos Digitales (Spanish Data Protection and Guarantee of Digital Rights Act, LOPDGDD), we inform you of how we process your personal data.

Data controller

Purpose of the processing

CATERING & EXPERIENCE processes your data for the following purposes:

1. Maintaining the commercial relationship and providing the contracted service.
2. Preparing quotations tailored to your needs.
3. Managing communications by email.
4. Staff recruitment processes.
5. Employee and human resources management.
6. Sending commercial information relating to our sector, always with prior consent.

Data retention

General data will be retained for as long as the commercial relationship lasts or until the data subject withdraws consent. In accordance with the applicable regulations, the specific periods are:

• Employment offences and penalties: 4 years.
• Personal actions: 5 years.
• Accounting, tax and employment records: 6 years.
• Prevention of money laundering: 10 years.
• Recruitment processes: 2 years from submission of the CV.
• Anonymised data: no time limit.

Legal basis

The processing of your data is based on one of the following legal bases:

• Performance of a contract (art. 6.1.b GDPR).
• Consent of the data subject (art. 6.1.a GDPR).
• Legitimate interest of the controller (art. 6.1.f GDPR).
• Compliance with legal obligations (art. 6.1.c GDPR).

Recipients of the data

Your data may be disclosed to the following recipients, always under a confidentiality agreement:

• Technology service providers.
• Payment service providers.
• Courier companies.
• Administrative and advisory firms.
• Data processors that work with the entity.
• Group companies operating under the LIFE GOURMET CATERING brand.

Source and categories of data

The data comes from the data subject themselves or from collaborating group companies. The categories of data we process are:

• Identifying data: name, DNI (Spanish national ID number), postal address, telephone.
• Commercial information.
• Financial data: bank account, credit card details.
• Curriculum vitae and academic data.
• Sensitive data where necessary, such as allergens.

User rights

As a data subject you have the right to:

• Access your personal data.
• Request the rectification or erasure of data that is inaccurate or no longer necessary.
• Request the restriction of processing.
• Object to the processing of your data.
• Request the portability of your data.
• Withdraw the consent given at any time.

To exercise these rights you may write to:

Security measures

We have adopted the technical and organisational measures necessary to prevent the loss, misuse, alteration and unauthorised access of your data. The site has SSL encryption to guarantee the secure transmission of information.

Social media

The controller processes followers' data on Facebook, Instagram and other platforms for the purpose of providing information about activities, news and offers. The processing is based on the consent of the data subject when following or interacting with our profiles.

Confidentiality

The information supplied by the user shall in all cases be considered confidential. No data will be disclosed regarding claims, reasons for an application or the duration of the relationship.

Accuracy of the data

The user declares that the data provided is true and correct, and undertakes to keep it up to date.

Supervisory authority

In the event of non-compliance, you may lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency):

Documentation adapted from the Grupo Life Gourmet policy, in accordance with the regulations in force in Spain and the European Union.