Privacy policy

1. Data Controller

Gozo CheeseCake S.L.
Tax ID (N.I.F.): B75319483
Registered office: AVDA ALFONSO EL SABIO 4 BAJO - DERECHA, 03001 Alicante
Email: info@quierogozo.com
Phone: +34 635 731 149

2. Applicable Legislation

Data is processed in accordance with:

  • Regulation (EU) 2016/679 (GDPR)
  • Ley Orgánica 3/2018 (LOPDGDD, the Spanish data protection act)
  • UK GDPR
  • Data Protection Act 2018
  • Privacy and Electronic Communications Regulations (PECR – UK)

3. Categories of Data

  • Identification data (name)
  • Contact data (email, phone)
  • IP address
  • Browsing data
  • Information provided in forms

No special categories of data are processed.

4. Purposes

  • Managing enquiries.
  • Sending commercial communications (with prior consent).
  • Improving the user experience.
  • Complying with legal obligations.

5. Legal Basis

  • Consent of the data subject.
  • Legitimate interest.
  • Legal compliance.

6. Recipients

Data is not disclosed to third parties, except where required by law. The following may process data as data processors:

  • Hostinger (hosting of the website and its database, and email for the domain)
  • Necessary technology providers

This website does not use third-party analytics or advertising tools.

7. International Transfers

As global technology services are used, transfers outside the European Economic Area and the United Kingdom may take place.

These are carried out under:

  • Standard Contractual Clauses approved by the European Commission.
  • Adequacy decisions.
  • Equivalent safeguards under the UK GDPR.

8. Retention

  • Contact data: until the enquiry is resolved.
  • Commercial data: until consent is withdrawn.

9. Rights

You may exercise the following rights:

  • Access
  • Rectification
  • Erasure
  • Objection
  • Restriction
  • Portability

By sending a request to: info@quierogozo.com

Spain: complaint to the AEPD (Agencia Española de Protección de Datos, the Spanish data protection authority).
United Kingdom: complaint to the ICO (Information Commissioner's Office).

10. Security

Appropriate technical and organisational measures are applied in accordance with Article 32 of the GDPR and the UK GDPR.