Privacy Policy

1. Data controller

Responsible party: CANAYAS CATERING
Contact email: canayascatering@gmail.com
Activity: Private chef services, catering, and cooking courses through the sale of gift vouchers

2. Personal data collected

The following personal data may be collected through this website:

• First name and surname

• Email address

• Postal address

• Phone number

• Billing details

• Information regarding orders and reservations

• Data required for payment management (without access to full bank details)

Under no circumstances are complete bank card details stored; these are managed directly by the corresponding payment platforms.

3. Purpose of data processing

The personal data collected will be processed for the following purposes:

• Manage the purchase of gift vouchers and the provision of contracted services.

• Process payments and invoicing

• Manage bookings, changes, and returns

• Send communications related to the order or the contracted service.

• Respond to queries or requests made by the user

• Comply with legal and tax obligations

4. Legitimacy for processing

The legal basis for data processing is:

• The execution of a contract for the sale of goods or provision of services

• The user's express consent by ticking the corresponding boxes

• Compliance with applicable legal obligations

5. Recipients of the data

The data may be communicated to third parties only when necessary for the proper functioning of the service, including:

• Secure payment platforms (e.g. Stripe)

• Technology and web hosting service providers

• Email service providers and order management providers

• Public administrations when there is a legal obligation

Under no circumstances will personal data be sold or transferred to third parties for commercial purposes.

6. Data retention

Personal data will be retained:

• For as long as necessary to fulfil the purpose for which they were collected.

• As long as there is a business relationship

• During the periods required by tax and accounting regulations.

7. User rights

The user has the right to:

• Access your personal data

• Correct inaccurate data

• Request the deletion of your data when it is no longer necessary

• Request restriction of processing

• Object to processing

• Request the portability of your data

To exercise these rights, the user may send a request to the email address indicated above, clearly stating the right they wish to exercise and attaching a copy of an identification document.

8. Data security

The necessary technical and organisational measures have been taken to ensure the security and integrity of personal data and to prevent its loss, alteration or unauthorised access.

The website uses secure connections via SSL certificates.

9. Cookies

This website uses its own and third-party cookies to improve the user's browsing experience.

For further information, users may consult the Cookie policy, available on this website.

10. Changes to the privacy policy

The controller reserves the right to modify this privacy policy to adapt it to new legislation or changes in activity.

The modifications will be published on this page and will be applicable from the moment of their publication.

11. Acceptance of the privacy policy

The use of this website and the completion of a purchase imply acceptance of this privacy policy.