1. Data Controller Information

In accordance with Regulation (EU) 2016/679 General Data Protection Regulation (GDPR) and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDGDD), we inform you that the data provided through www.paellaclick.com will be processed by the Data Controller:

2. Data Collection Methods, Purposes, and Legal Basis

There are different ways in which your personal or commercial data is collected and processed on our website, always with your prior consent or in execution of the contractual relationship:

• Newsletter Subscription: Upon registering in the subscription box, your data will be used to send you commercial communications, promotions, discounts, product updates, and corporate news (GENERAL INFORMATION).
  Legal basis: Express consent of the data subject (Art. 6.1.a GDPR).
• Contact Forms or Inquiries: If you submit a contact form or a technical/commercial inquiry, your data will be used solely to respond to the request made. If you do not grant consent for future communications, your data will be deleted once the inquiry is resolved.
  Legal basis: Data subject consent and Legitimate interest (Art. 6.1.a and 6.1.f GDPR).
• User Registration and Purchase Management: When registering as a user or processing an order for paella pans, burners, or accessories, your data is incorporated into our system to identify you via credentials, manage delivery of goods, invoicing, and post-sales customer support.
  Legal basis: Execution of a contract or pre-contract and compliance with legal and fiscal obligations (Art. 6.1.b and 6.1.c GDPR).

Data Retention Period: Personal data will be kept for as long as the commercial relationship is maintained or until the user requests its deletion or revocation of consent. In the case of purchase operations, data will remain blocked for the legally required periods under tax and commercial regulations (minimum 4 to 6 years).

3. Data Recipients and Disclosures

Paellaclick will not transfer your personal data to third parties, except under legal obligation or in necessary cases to fulfill the contracted service:

• Transport and courier companies responsible for the physical delivery of products.
• Banking institutions and payment gateways (Virtual POS, PayPal, Bizum) for order processing.
• Technology service providers (hosting, website management, and email marketing) acting as Data Processors.
• Public Administrations and Tax Authorities in compliance with legal obligations.

4. Exercise of Rights and Unsubscription

The user may exercise their rights of Access, Rectification, Erasure (Right to be Forgotten), Restriction of processing, Data Portability, and Objection at any time.

Right to Complain to the Supervisory Authority: If you consider that the processing of your personal data infringes applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through its electronic portal (www.aepd.es).