Privacy Policy
1. Data Controller
| Controller | ETOLA S.A. |
| Trade name | Cafe Central Madrid |
| CIF/NIF | A-79400321 |
| Address | Plaza del Ángel 10. Madrid 28012 |
| Privacy email | info@cafecentralmadrid.com |
This Privacy Policy is provided in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Data Protection Law (LOPDGDD).
2. Data Collected
We collect the following types of personal data:
Personal Data
- Identification data - first name, last name
- Contact data - email address, phone number
- Payment data - processed exclusively by Paycomet
- Browsing data - cookies (where applicable)
Note: No special categories of personal data are collected.
3. Purposes of Processing
Personal data is processed for the following purposes:
Commercial management
Manage purchases and orders placed through the websiteLogistics
Organize in-store pickupTransactional communication
Send communications related to the orderMarketing (only with consent)
Send marketing communicationsService improvement
Perform web analytics and improve user experienceLegal compliance
Compliance with tax and legal obligations
4. Legal Basis
| Legal Basis | Purpose |
|---|---|
| Performance of a contract | Purchases and pickups |
| Consent | Newsletters, cookies and marketing communications |
| Legal obligation | Invoicing and accounting records |
| Legitimate interest | Website security |
5. Data Recipients
User data may be processed by:
- Paycomet - secure payment processing
- Technical services - IT and hosting required for website operation
- Public administrations - when legally required
Important: Personal data is not shared with third parties for commercial purposes.
6. User Rights
Users may exercise the following rights:
• Access
• Rectification
• Erasure
• Objection
• Data portability
• Restriction of processing
To exercise your rights, write to: [privacy email]
We will respond within a maximum period of 30 days.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Order data | 6 years (tax obligation) |
| Marketing communications | Until the user unsubscribes |
| Browsing data | According to the Cookies Policy |
8. Security
We implement appropriate technical and organizational measures to protect personal data, in accordance with the GDPR.
9. Minors
Purchases are not permitted for individuals under the age of 18 without the consent of their legal guardians.
10. Cookies Policy
If you wish, a complete Cookies Policy can be created and adapted for tools such as Google Analytics, Meta Pixel, embedded YouTube content, etc.