Privacy Policy

1. Data controller

Franquette Ltd, trading as Franquette, tax identification number [to be completed], with registered address at Carrer de Santiago Rusiñol, 16, Centre, 07012 Palma de Mallorca, Illes Balears, Spain (hereinafter, "Franquette"). Email: franquette.mallorca@gmail.com. Telephone: +34 659 79 70 73.

For any matter relating to personal data, please contact franquette.mallorca@gmail.com.

2. Legal framework

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and Law 34/2002 (LSSI-CE).

3. Data we process

• Identification and contact data: name, email address, telephone and WhatsApp number, preferred language.
• Billing data: postal address and, for companies, legal name, tax identification number, billing email and contact person.
• Transaction data: orders, bookings, event and catering enquiries, membership details, payments and invoices.
• Delivery and collection data: address, postcode, date and time, and any notes you provide.
• Dietary and allergen information you choose to share for an order or event.
• Communication data: messages, emails and records of our contact with you.
• Technical data: IP address, device and browser information and, subject to your consent, cookie data.

Card payments are processed directly by our payment service provider. Franquette does not store full card numbers.

4. Purposes and legal bases

• Managing orders, bookings, events, catering, privatisations and memberships, and providing customer service: performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR).
• Invoicing, accounting and tax obligations: compliance with a legal obligation (Article 6(1)(c) GDPR).
• Handling allergen and dietary information you provide: your explicit consent (Article 9(2)(a) GDPR), which you may withdraw at any time.
• Sending newsletters and commercial communications by email or WhatsApp: your consent (Article 6(1)(a) GDPR), or, for existing customers and similar products, our legitimate interest under Article 21 LSSI-CE, always with an easy way to opt out.
• Website security, fraud prevention and protection against abuse: our legitimate interest (Article 6(1)(f) GDPR).
• Analytics and marketing cookies: your consent, as described in the Cookie Policy.

5. Retention

We keep personal data for as long as necessary for the purpose for which it was collected. Contract and invoicing data are retained for the periods required by law, in particular six years for accounting records under the Spanish Commercial Code and four years for tax purposes. Marketing data are kept until you withdraw your consent. Consent records are kept for as long as needed to demonstrate compliance.

6. Recipients

Data may be shared with service providers acting as processors under a data processing agreement, including hosting, email delivery, payment processing, messaging and delivery providers; with partner companies where a booking was made under a partner code and is invoiced to that partner; and with public authorities where required by law. We do not sell personal data.

7. International transfers

Some providers may process data outside the European Economic Area. In such cases we ensure an adequate level of protection through an adequacy decision of the European Commission or standard contractual clauses.

8. Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time, by writing to franquette.mallorca@gmail.com or using the privacy request form on this website. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration.

10. Changes

We may update this Privacy Policy. The version in force is always published on this website with its effective date.