Privacy policy

This is the data protection notice of selingerbarbacoas.com. It explains how we process the personal data of people who visit the website, ask us for a quote or buy from us, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

1. Data controller

Detail	Information
Controller	Alberto Oscar Selinger Suárez (Selinger Barbacoas)
Privacy contact	info@selingerbarbacoas.com · +34 634 787 502
Tax details and address	In the Legal notice

We do not have a data protection officer because we are not required to appoint one (Article 37 GDPR and Article 34 LOPDGDD).

2. What data we process, what for and on what basis

Processing	Data	Purpose	Legal basis	Retention
Quote form	Name; WhatsApp or email; type of project; city and country; project description; desired date; optional attached file; configurator summary, if you use it	Deal with your request, assess the project and send you a quote	Pre-contractual measures you request (Article 6.1.b GDPR)	If no contract follows, up to 12 months from the last communication. If one does, see ‘Contracting’
Attached files (plans, photos)	The content of the file and its metadata	Measure and quote the project	Article 6.1.b GDPR	The website deletes the file from its server as soon as it sends it to our email. In the email, the same as the form
WhatsApp	Telephone number, profile name, messages and files you send us	Deal with enquiries, quotes and accessory orders that you start through that channel	Article 6.1.b GDPR, or legitimate interest in dealing with your enquiry (Article 6.1.f)	For as long as the matter lasts and, if no contract follows, up to 12 months
Email and telephone	The data you give us when you write or call	Reply to you	Article 6.1.b or 6.1.f GDPR	The same as WhatsApp
Contracting, invoicing, delivery and guarantee	Identification, tax ID where applicable, delivery and invoicing addresses, telephone and proof of payment. The website does not store card or bank account details	Perform the contract, issue invoices, coordinate transport and handle the guarantee	Article 6.1.b GDPR and legal obligations (Article 6.1.c)	During the relationship and then for the legal periods: generally 4 years for tax purposes and 6 years for commercial purposes
Web analytics (Google Analytics 4)	Cookie identifiers, pages viewed, device and browser, approximate location and source of the visit	Understand how the website is used so we can improve it	Your consent (Article 6.1.a GDPR and Article 22.2 LSSI-CE). It is activated only if you accept analytics cookies	Up to 14 months. Cookies, as set out in the Cookie policy
Website security	An irreversible digest of your IP address when you submit the form, and the server’s technical logs (IP, date and page)	Stop automated submissions and protect the website against attacks	Legitimate interest in protecting the website (Article 6.1.f GDPR)	The digest, one hour. The logs, for the limited time the hosting provider keeps them

We do not take automated decisions or build profiles with legal effects. We do not send you advertising by email or message unless you ask for it or expressly consent to it.

3. About the form and attached files

• The fields marked as compulsory are needed in order to reply to you. Without them we cannot deal with your request.
• The form checkbox confirms that you have read this policy. We do not use your data for anything other than what is stated here.
• You can attach PDF, JPG and PNG files of up to 10 MB.
• Attach only what is needed for the quote. Avoid including other people’s data, bank details or sensitive data. Photographs may carry location metadata: you can remove it before sending them.
• Your request reaches our email. The website does not keep a copy in its database.

4. WhatsApp

The WhatsApp button is a link that opens the WhatsApp app or website with a message already written. The website does not load any third-party plugin or chat. Until you send the message, we receive none of your data. Once it is sent, we receive your number and the content, and WhatsApp also processes your data as an independent controller, under its own terms and privacy policy (WhatsApp Ireland Limited, part of the Meta group).

5. Who can access your data

We do not sell your data or pass it to third parties for their own purposes. The following may access it, only in order to provide the service and, when they act as processors, under a contract in accordance with Article 28 GDPR:

Recipient	Service	Notes
IONOS	Website hosting and email for the domain	Processor
Google Ireland Limited / Google LLC	Google Analytics 4	Only if you give your consent. There may be a transfer to the USA, covered by the EU-US Data Privacy Framework (European Commission adequacy decision)
WhatsApp Ireland Limited / Meta	Messaging	See section 4. There may be a transfer to the USA, covered by the same Framework
Transport and parcel companies	Delivery of your order	Delivery name, address and telephone
Tax and accounting advisers, and invoicing software	Tax and accounting obligations	Processors
Public authorities, banks and insurers	When required by law or needed to handle a transport claim	As appropriate

There are no other international transfers. Our Instagram and Facebook profiles are also governed by the policies of those platforms.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability (Articles 15 to 22 GDPR) by writing to info@selingerbarbacoas.com. State which right you are exercising and, if necessary, prove your identity. We will reply within one month, which can be extended in the cases covered by Article 12 GDPR.

If the processing is based on your consent, you can withdraw it at any time, without affecting processing carried out before. For cookies, use the ‘Cookie settings’ link in the footer of the page.

If you believe we have not dealt properly with your rights, you can complain to the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid; www.aepd.es).

7. Security

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), form validation, protection against automated submissions, restricted access and backups. If there were a breach posing a risk to your rights, we would act in accordance with Articles 33 and 34 GDPR.

8. Children

This website is not aimed at children under 14 and we do not knowingly collect their data.

9. Where the data comes from

You give us the data yourself. The exception is data of a person who receives an order on behalf of someone else: whoever gives it to us must have informed that person beforehand.

10. Changes

This policy may be updated. Each version shows its date.