PRIVACY POLICY

Last updated: April 2025

1. Data controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), as well as Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, users are informed that the personal data collected through the website www.lasastreriadeembassy.com will be processed by:

• Owner: EMBASSY XXI S.L.

• Tax ID (CIF): B16924516

• Registered address: Calle Recalde, 46, 48011, Bilbao (Bizkaia), España.

• Contact email: info@lasastreriadeembassy.com

2. Purpose of Data Processing

The personal data collected through the contact form will be used solely for the following purposes:

• To respond to inquiries or requests for information made by users.

• To manage the professional or commercial relationship with users upon request.

• In the future, with the user's express consent, to send informational or promotional communications (Newsletter).

3. Legal Basis

The legal grounds for processing your personal data are:

• The express consent of the data subject when submitting the contact form.

• Where applicable, the legitimate interest of the controller to maintain professional communication with the user.

4. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purpose for which it was collected, or until the user requests its deletion, and in all cases, for the legally required time periods.

5. Data Recipients

No data will be shared with third parties unless legally required. No international data transfers will be made.

6. User Rights

As a user, you have the right to:

• Access your personal data

• Request the rectification or deletion of your data

• Request the restriction of processing

• Object to the processing

• Request data portability

To exercise these rights, you may send a written request, including a copy of your ID or legal identification document, to: info@lasastreriadeembassy.com

You may also file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es if you believe your rights have been violated.

7. Data Security

EMBASSY XXI S.L. applies the necessary technical and organizational measures to guarantee the security, confidentiality, and integrity of the personal data processed, preventing its alteration, loss, or unauthorized access.

8. Changes to the Privacy Policy

EMBASSY XXI S.L. reserves the right to modify this Privacy Policy to comply with new legal requirements or changes to the website. We recommend reviewing this page periodically.