Privacy policy

Last updated: 12/17/2025

1.1 Privacy Policy

1. Object

The purpose of this Privacy Policy is to inform individuals (hereinafter, users or data subjects) who visit our Website (hereinafter, website, site, or web) about how we collect, process, and protect the personal data they decide to provide us through any means (forms, emails, telephone, contracts, etc.) and, after reading it, to freely decide if they wish for us to process them. Additionally, it serves to expand on the information previously provided to data subjects in the information clauses included in the data collection processes.

Likewise, this policy aims to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR) and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (hereinafter LOPDGDD).

2. Who is responsible for the processing of your personal data?

  • Identity – Entity: RESTAURACION MEDITERRANEA SOSTENIBLE, S.L.

  • VAT ID (CIF/NIF): B40519670

  • Postal Address: C/ Almazora, 37, A, pta. 10, CP 46009, Valencia - Spain

  • Telephone: +34 661 573 284

  • Email: hola@mesamediterranea.com

  • Corporate Purpose: Business consultancy in the gastronomic sector

  • Website: https://mesamediterranea.com/

  • Registry Data: Commercial Registry of Valencia Volume 10549, Book 7830, Folio 96, Sheet V-183690

3. What personal data will we process and how do we obtain it?

For the development of our business activity, it is essential to process personal data, which may be collected through digital means (e.g., email, web forms, or questionnaires), by filling out paper documents (e.g., contracts or forms), or through in-person or telephone conversations. In any of these cases, the data will be processed fairly, lawfully, and transparently.

The categories of data that our entity will process regarding data subjects are:

  • Identification data: Name and surname, ID card or equivalent document, and signature (handwritten or digital).

  • Contact data: Telephone, email, postal address.

  • Commercial data: Quotes, purchase conditions, management and history of services and/or purchases, results of contacts (telephone, email, messaging, and other communication channels).

  • Accounting data: Control of income and expenses, billing data.

  • Bank data: Bank accounts and cards.

  • Transaction of goods and services: Bank transfers and direct debits, amounts, and concepts.

Our entity will not collect special category data (e.g., health data, ethnic origin, political opinions, or religious beliefs), but if it were necessary to process them, we would inform you and request your prior express consent.

Consequently, the requested data will be adequate, relevant, limited to what is strictly essential and necessary, processed solely by personnel and/or collaborators authorized by our entity, who will have signed a confidentiality agreement and commit to complying with the necessary security standards to guarantee the confidentiality, integrity, and availability of the processed data and other requirements legally established in the GDPR. Therefore, they will be processed lawfully.

The data to be processed is provided by the data subject themselves or by their legal representative, although we may delegate some functions to certain collaborators who may be in charge of collecting your data, but it will always be processed with your prior express consent.

In the event that a data subject does not provide the data we request or provides incomplete or incorrect data, it will not be possible to fulfill and maintain the relationship with them.

The categories of data we may process about a person will depend on the relationship they maintain with our entity, as shown below:

  • Clients: Identification, contact, commercial, accounting, banking, goods and services transaction, and financial data will be processed and may only be collected if you provide them to us.

  • Information seekers: Whether the requested information is by telephone or in writing (e.g., email or web forms), we will request and process your identification, contact, and commercial data.

  • Suppliers and collaborators: Identification, contact, commercial, accounting, banking, goods and services transaction, and financial data will be processed. These data may be processed during all stages of the commercial relationship.

  • Job applicants: For this category of data subjects, curricular, identification, contact, and other data related to their professional or personal characteristics will be processed when sending us their application by any means (e.g., in person, email, web forms). They may also be collected in personnel selection interviews (in person or by videoconference), and your job application may even reach us through a collaborator to whom we have delegated certain functions.

  • Claimants: Identification and contact data, as well as personal information of their own or third parties related to the claim submitted, will be processed.

  • Web users: Our entity does not use any type of cookies.

More information for data subjects: The information legally established in the corresponding information clauses included in the different data collection means will be made available to data subjects so that you may freely and expressly decide if you want the requested personal data to be processed by our entity.

All categories and types of personal data processed will be duly identified in the corresponding processing activities owned by our entity.

4. For what purposes will your data be processed?

In general, the processing of personal data carried out by our entity aims to fulfill and maintain the relationship with different groups of people, such as clients or suppliers. Also with other people who contact us proactively through our web forms, by telephone or personally, by email or post, such as job applicants or information seekers, users of our website/blog or social networks, and interested parties in general.

Depending on said relationship, the processing of your data obeys different purposes, which are detailed below for illustrative and non-limiting purposes:

  • Clients: Your personal data will be processed to identify you, fulfill and maintain the pre-contractual and contractual relationship including sending commercial communications by different means, attend to queries, carry out quality controls and commercial statistics, for the provision of our services and/or sale of goods, for accounting and billing management, the transaction of goods and services, collection management, incident management, claims and exercise of rights, economic solvency queries, as well as for other purposes we are obliged to in order to comply with said relationship, the laws to which we are subject, and to comply with our legitimate interests.

  • Information seekers: We will process your personal data to attend to your requests for general information, to identify you, for sending or delivering quotes and information about goods and/or services of your interest, including commercial information related to the request in our reply (verbal, written, or digital). We will also make follow-up contacts by different means to know the decisions made regarding the commercial proposals we have sent you.

  • Job applicants: Your data will be processed to include you in our selection processes and job bank, to identify you, as well as to contact you and inform you about vacancies, interview coordination, and other matters related to your application.

  • Suppliers and collaborators: Your personal data will be processed for the purpose of maintaining the commercial relationship, whether for requesting quotes, purchasing goods or contracting services, to identify you, for accounting management, carrying out transactions of goods and services, as well as for other purposes necessary to comply with said relationship, our legal obligations, and legitimate interests.

  • Claimants: Personal data will be processed to identify you, manage your claim, and contact you about its status, in addition to complying with our legal obligations and legitimate interests.

More information for data subjects: The information legally established in the corresponding information clauses included in the different data collection means (e.g., forms, recordings, contracts, etc.) and others that we will make available to you (e.g., badges, invoices, legal notices, etc.) will be made available to data subjects so that you may freely and expressly decide if you want the requested personal data to be processed by our entity.

In case you do not provide the data we request or provide incomplete or erroneous data, it will not be possible to attend to your request for information or relate to you.

The data will not be processed subsequently or for purposes other than those accepted by the data subjects.

The purposes motivating the processing of personal data will be duly identified in the corresponding processing activities owned by our entity.

5. Why do we process your data (Legitimation)?

The processing of your personal data by our entity is carried out with one or several of the following legitimizing bases:

  1. When you offer us your express, free, informed, and unequivocal consent, after being informed at the time of collecting your data and more extensively with this privacy policy, that after reading it and being in agreement, you can voluntarily authorize us to process your data for one or several purposes, by checking the boxes provided for this purpose in our web forms, by your consent or signature of the information clauses that we provide at any time when requesting your personal data.

  2. For the execution of a contract in which you are a party or have requested pre-contractual measures.

  3. When the processing is necessary for compliance with a legal obligation applicable to our entity.

  4. When the processing is necessary for the satisfaction of legitimate interests pursued by our entity or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject. In this regard, we inform you that our entity has carried out an analysis weighing our legitimate interests against the rights and freedoms of the data subject, always respecting your fundamental rights.

In the event that the user is under 14 years of age, it will be necessary to have the consent of parents, guardians, or legal representatives to process their data. The user is solely responsible for the veracity of the data sent to us.

6. Data Conservation

The personal data provided will be kept as long as we maintain the relationship with you and for the time necessary to fulfill the purpose for which your data has been collected.

Once said relationship has ended, we will keep them blocked in those cases where it is necessary to keep them until the limitation of liabilities for the exclusive purposes of claims or legal actions, as well as to comply with our legal obligations, for example:

  • Clients, Suppliers (Accounting): 6 years from the last entry (Art. 30.1 Commercial Code).

  • Clients, Suppliers (Tax): General term 4 years. In case of losses during the year: 10 years. Invoices: 5 years (Art. 66 General Tax Law).

  • Workers (Labor): 4 years (Art. 21 Royal Legislative Decree 5/2000).

  • Job Applicants: 1 year.

  • Workers (Risk Prevention): 5 years.

7. Profiling

We do not create profiles nor will automated decisions be made using your personal data, but in case of doing so, you will be informed and prior authorization will be requested. Likewise, you have the right to object to this type of processing at any time by writing to our entity at hola@mesamediterranea.com.

8. Data Assignment

As a general rule, our entity does not assign personal data to third parties without prior consent, although it will be necessary to do so in the following cases:

  • If you are a client or supplier, your personal data may be assigned to third parties by legal obligation (e.g., Tax Agency), or in those cases and entities necessary to provide our services or pay invoices (e.g., Banking entities).

  • Likewise, your personal data as a client or supplier may be processed by certain providers to whom we delegate some of our obligations (e.g., accounting advisors), and all of them have committed through a data processor contract to comply with the same security measures implemented by our entity, as well as to submit to the duty of secrecy and confidentiality regarding the personal data processed, among other obligations regarding personal data protection.

  • If you are a job applicant, your data will not be assigned to third parties, unless we are legally obliged to do so.

  • If you are an information seeker or user of our website, your data will not be assigned to third parties, unless we are legally obliged to do so.

In general terms, we may assign your personal data to Judges, Courts, Public Prosecutor's Office, and/or competent Public Administrations regarding possible claims when we are obliged to do so.

9. International Data Transfer

In case of assignments to third parties located in countries outside the European Economic Area, we will inform you and request your prior and express consent.

10. Security Measures

Our entity has implemented all necessary technical and organizational measures to protect the processed personal data, avoiding its loss, theft, or unauthorized use.

These measures have been created based on the type of data processed and the purposes motivating said processing. These are verified periodically in our internal controls of compliance with personal data protection regulations and through external audits.

11. Your Rights

You, as the owner of your personal data and acting on your own behalf or through your legal representative (e.g., persons under 14 years of age), may address our entity at any time and request to exercise your rights regarding personal data protection.

We explain what these rights are:

  • Right of Access: To know if we are processing your data, the purposes, categories of data, origin, recipients, conservation period, and obtain a copy.

  • Right of Rectification: To request the correction of inaccurate data or complete incomplete data.

  • Right of Opposition: To oppose the processing of your data when incorrect or no longer necessary.

  • Right of Suppression (Erasure): To request that your data be deleted when no longer necessary, consent is withdrawn, processed unlawfully, etc.

  • Right to Limitation of Processing: To request the limitation of the use of your data in certain circumstances (e.g., while verifying accuracy).

  • Right of Portability: To receive your data in a structured, commonly used format and transmit them to another controller.

  • Right not to be subject to automated decisions: Right not to be subject to a decision based solely on automated processing.

To exercise any of your rights, you must write to our entity either by post to the address: C/ Almazora, 37, A, pta. 10, CP 46009, Valencia or by email to hola@mesamediterranea.com, stating the rights you wish to exercise, accompanied by a copy of your ID or equivalent document to know regarding whom we must provide the requested information and your contact details to send our reply.

If you wish to make any suggestion or query about the processing of your personal data, you can contact our data protection consultants at BUSINESS ADAPTER, S.L.

We inform you that you have the right to file a claim with the Spanish Data Protection Agency (AEPD) at C/ Jorge Juan, 6, 28001 Madrid or at www.aepd.es.

12. Commitment to Personal Data Protection

Scope of application: Our commitment will be binding for all departments and employees, as well as third parties acting on our behalf. Object: Protocols have been established for data processing according to European and Spanish regulations. Principles: Lawfulness, fairness, transparency, data minimization, accuracy, limitation of conservation period, integrity, confidentiality, and active responsibility. Special category of data: Processing of sensitive data is prohibited unless legally authorized exceptions and with prior consent. Data subjects' rights: We will respond quickly and diligently to requests. Control: We have external assistance monitoring compliance with regulations.

13. Update of this Policy

Our entity reserves the right to modify this Policy without prior notice. Therefore, we recommend consulting it every time you visit our website.

Text updated on October 4, 2023.