GDPR Information

General Data Protection Regulation Compliance

Panadería Aurora is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.

Data Controller

Panadería Aurora
Calle de la Constitución 47
28014 Madrid, Spain
Email: [email protected]

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to fulfill orders and provide services you request
• Legitimate interests: Improving our services and customer communication
• Consent: Where you have provided explicit consent for specific processing activities
• Legal obligations: Compliance with applicable laws and regulations

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You can request limitation of processing in certain circumstances, such as when you contest the accuracy of your data.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month of receiving your request.

You may need to provide identification to verify your identity before we process your request.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Order fulfillment and customer service
• Legal and regulatory compliance
• Resolution of disputes

Once data is no longer needed, it is securely deleted or anonymized.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Data Transfers

Your personal data is processed within the European Union. We do not transfer data outside the EU/EEA.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos):

Website: www.aepd.es
Address: C/ Jorge Juan, 6, 28001 Madrid, Spain

Updates to This Information

We may update this GDPR information periodically. Changes will be posted on this page with the revision date.

Last updated: August 4, 2026