Privacy Policy

1. Data Controller

ControllerETOLA S.A.
Trade nameCafe Central Madrid
CIF/NIFA-79400321
AddressPlaza del Ángel 10. Madrid 28012
Privacy emailinfo@cafecentralmadrid.com

This Privacy Policy is provided in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Data Protection Law (LOPDGDD).

2. Data Collected

We collect the following types of personal data:

 

Personal Data

 

  • Identification data - first name, last name
  • Contact data - email address, phone number
  • Payment data - processed exclusively by Paycomet
  • Browsing data - cookies (where applicable)

 

Note: No special categories of personal data are collected.

3. Purposes of Processing

Personal data is processed for the following purposes:

 

  1. Commercial management
    Manage purchases and orders placed through the website

     

  2. Logistics
    Organize in-store pickup

     

  3. Transactional communication
    Send communications related to the order

     

  4. Marketing (only with consent)
    Send marketing communications

     

  5. Service improvement
    Perform web analytics and improve user experience

     

  6. Legal compliance
    Compliance with tax and legal obligations

Legal BasisPurpose
Performance of a contractPurchases and pickups
ConsentNewsletters, cookies and marketing communications
Legal obligationInvoicing and accounting records
Legitimate interestWebsite security

5. Data Recipients

User data may be processed by:

 

  • Paycomet - secure payment processing
  • Technical services - IT and hosting required for website operation
  • Public administrations - when legally required

 

Important: Personal data is not shared with third parties for commercial purposes.

6. User Rights

Users may exercise the following rights:

 

• Access
• Rectification
• Erasure
• Objection
• Data portability
• Restriction of processing

 

To exercise your rights, write to: [privacy email]

We will respond within a maximum period of 30 days.

7. Data Retention

Data TypeRetention Period
Order data6 years (tax obligation)
Marketing communicationsUntil the user unsubscribes
Browsing dataAccording to the Cookies Policy

8. Security

We implement appropriate technical and organizational measures to protect personal data, in accordance with the GDPR.

9. Minors

Purchases are not permitted for individuals under the age of 18 without the consent of their legal guardians.

10. Cookies Policy

If you wish, a complete Cookies Policy can be created and adapted for tools such as Google Analytics, Meta Pixel, embedded YouTube content, etc.