Privacy Policy

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), we inform you of the following:

1. Data controller

2. Purposes of processing

The personal data you provide through this website is used solely for the following purposes:

• Booking management for the paella workshop, through our booking platform (Acuity Scheduling).
• Invoicing of the services contracted.
• Handling enquiries submitted through the contact form or by email.

We do not use your data for direct marketing purposes, nor do we subscribe you to any newsletter unless you expressly request it.

3. Legal basis

The processing of your data is based on:

• Performance of a contract (Art. 6.1.b GDPR), when you make a booking.
• Your consent (Art. 6.1.a GDPR), when you contact us through the contact form.
• The legitimate interest of the controller (Art. 6.1.f GDPR), for the use of Google Analytics to improve the website, always subject to your prior consent via the cookie banner.

4. Data retention

Your data will be kept for as long as necessary to fulfil the purpose for which it was collected and, where applicable, for the legally required periods (for example, tax and accounting regulations require invoices to be kept for a minimum of 6 years).

5. Recipients and international data transfers

To provide the service, some of your data is shared with the following providers, who act as data processors:

• Squarespace, Inc. (USA) — hosting and management provider of this website.
• Acuity Scheduling, Inc. (USA) — booking management platform for the paella workshop.
• Google LLC (USA) — through Google Analytics, if you accept analytics cookies.

These providers are subject to international data transfer mechanisms recognised by European regulations (such as the Standard Contractual Clauses approved by the European Commission), which guarantee an adequate level of protection for your data outside the European Economic Area.

No data is shared with third parties other than those indicated here, except where legally required.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by writing to info@ricetomeetyou.fun, enclosing a copy of a document proving your identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your data does not comply with current regulations.

7. Security measures

P DE PAELLA, S.L. has adopted the necessary technical and organisational measures to guarantee the security and integrity of the personal data it processes, and to prevent its alteration, loss, and unauthorised processing or access.