This translation is provided for information only. In the event of any discrepancy, the Spanish version prevails. Español
This policy explains how we process the personal data we receive through this website and through the contact channels we publish. It is governed by Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPDGDD, the Spanish Data Protection and Digital Rights Act).
This website is aimed at businesses. If you are a private individual, please do not send us any data: we do not accept orders from consumers.
Data controller
Alex Puigdemont Da Silva, trading as A2Z Foods.
Address: Carrer de Sardenya 229, 4ª planta, 08013 Barcelona (Spain).
Email: info@a2z-foods.com. Phone: +34 666 051 193.
Legal reference: Article 13.1.a GDPR.
What data we process
Business form: full name, company, type of business, delivery location, product of interest, approximate volume, email, phone (optional) and message (optional).
Manufacturer form: full name, job title (optional), company, country, website (optional), what the factory makes, whether it already sells in Spain, customers of interest, supply capacity, email, phone (optional) and message (optional).
Email, phone and WhatsApp: the data you send us.
Technical data: date and time of each submission. To prevent abuse, the server keeps a hashed fingerprint of your IP address for 1 hour (an irreversible digest, never the IP address in plain text). For security reasons, the hosting provider logs the requests the server receives.
We do not ask for special categories of data, such as data concerning health or beliefs.
Why we use your data and on what legal basis
To reply to your request for a quote or information and, where appropriate, prepare the quote with the factory. Legal basis: pre-contractual steps taken at your request (Article 6.1.b GDPR).
To assess the commercial representation of your factory, if you contact us as a manufacturer. Legal basis: pre-contractual steps taken at your request (Article 6.1.b GDPR).
To keep a copy of each request in a file on the server, outside the public part of the website, so that no enquiry is lost if the email fails. Legal basis: legitimate interest in handling every request (Article 6.1.f GDPR).
To protect the website against spam and abuse: a honeypot field, a minimum completion time, a proof-of-work challenge solved by your browser and a submission limit. Legal basis: legitimate interest in the security of the website (Article 6.1.f and Recital 49 GDPR).
We do not send newsletters or advertising by email. If we ever did, we would first ask for your express consent (Article 21 of the LSSI, the Spanish Information Society Services Act).
We do not make automated decisions or carry out profiling.
How long we keep your data
While we handle your request and, if no business relationship follows, for up to 12 months from the last contact. We then delete it.
If a business relationship begins, for the duration of the relationship and afterwards for the periods during which liability may be claimed: for example, 6 years for commercial records (Article 30 of the Código de Comercio, the Spanish Commercial Code) and 4 years for tax matters (Article 66 of the Ley General Tributaria, the Spanish General Tax Act).
The hashed IP fingerprint is deleted after one hour.
Legal reference: Article 13.2.a GDPR.
Who we share data with
The factory that makes the product you request, and only the data needed to prepare your quote and fulfil the order (company, product, volume and delivery location). These are currently factories in the Netherlands and the Czech Republic, within the European Union. Legal basis: Article 6.1.b GDPR.
Providers that process data on our behalf: web hosting (Hostinger) and email. Legal reference: Article 28 GDPR.
Public authorities and courts, only when required by law.
We do not sell or disclose your data to anyone else.
Transfers outside the European Economic Area
We do not make international data transfers. If you choose to contact us on WhatsApp, that service is provided by Meta, which may process data outside the European Economic Area under its own policy. If you prefer to avoid this, use the form, phone or email.
Legal reference: Articles 44 to 49 GDPR.
Your rights
You can request access to your data, its rectification or erasure and the restriction of processing, object to processing and request the portability of the data you provided. Write to info@a2z-foods.com stating which right you are exercising; if necessary, we will ask you to verify your identity. We will reply within 1 month.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos (www.aepd.es).
Legal reference: Articles 12, 15 to 22 and 77 GDPR.
Security
The website is always served over HTTPS. Requests are stored in a server folder that cannot be accessed from the internet, and only the controller has access to it.
Legal reference: Article 32 GDPR.
Changes to this policy
If we change the way we process data, we will update this page and its date.