The owner of the website https://fooh.es is Fidel Bustamante, who is also responsible for processing the personal data provided by its users.

The processing of personal data carried out through this Website complies with the provisions of Regulation (EU) 2016/679, General Data Protection Regulation, Organic Law 3/2018, of December 5, on the Protection of Personal Data, and with the technical and organizational security measures to ensure a level of security appropriate to the risk of the processing.

Information on data protection

If the user decides to request information on our Website, only the data strictly necessary to achieve the purpose for which our Website is intended will be requested, which is the information and promotion of our services, all of which are available on our Website. Under no circumstances will it be used for purposes other than those for which it has been voluntarily entered on the Website.

The personal data provided by the user will be processed, having been previously informed of the purposes of the processing and other information by clicking on the “Accept” button.

Those who voluntarily provide their data to the owner of the website by any of the means established for this purpose have had the following information made available to them in a transparent and clear manner, by clicking on the corresponding box:

1.1 The Data Controller is Fidel Bustamante, with ID number 76919221E.

1.2 The PURPOSE of the processing is as follows

– managing requests, inquiries, or consultations, and maintaining relations between the Website and its users.

– Unequivocal authorization for the data provided to be used to send you, by any means of communication, including electronic means, commercial communications with information of interest and reminders, if you have checked the corresponding box or have given your unequivocal authorization by any means.

– purchase any of the specific products or services

– Information on the use of cookies for specific purposes, which are always disclosed in this privacy policy.

1.3 The LEGAL BASIS for processing is based on the relationship established, compliance with legal obligations, and your unequivocal consent, if you have given it. We inform you that you may revoke your consent at any time, through a simple and easy means. In the case of contact persons for a legal entity, the legal basis for processing is the legitimate interest of that entity in maintaining relations with said legal entity.

1.4 We inform you that the RETENTION PERIOD for your data will be the term of the contract and, after its termination, if so determined by law, for the duration of the retention obligation and, where applicable, for the limitation period of the corresponding actions. WE WILL RETAIN your data if the legal basis is consent, provided you do not revoke your authorization, and once revoked, it will be determined according to the criterion of exhaustion of the limitation periods for the actions.

1.5 RECIPIENTS: No recipients of your data are anticipated, except where legally required.

1.6 We guarantee your RIGHTS to access, rectify, or delete your data, as well as your right to restrict or transfer it, in accordance with the rest of the information provided in this Privacy Policy.

User information

We record your IP (Internet Protocol) data assigned to the subscriber of the telephone line at the time of connection to this website, for security purposes and to cooperate with the law. The data will be kept by the service provider for the period established by current legislation.

Rights of access, rectification, opposition, deletion, limitation, unless they are subject to automated decisions, and portability.

At any time, users have the right to access their data, rectify it if it is incorrect, oppose any type of processing associated with the maintenance of the contractual relationship, revoke the consent given, request the limitation or deletion of its processing, not be subject to automated decisions, and unsubscribe from FOOH.ES services.

These rights may be exercised upon proof of identity in the manner and within the time limits established in the General Data Protection Regulation, by writing to the postal address that appears in the Legal Notice on the Website.

The processing of personal data and the sending of communications by electronic means, where applicable, comply with the regulations established in the General Data Protection Regulation, Organic Law 3/2018, of December 5, on the Protection of Personal Data, and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce.

Additional information on data protection.

The following information is additional information on data protection, available at any time:

If you are a customer:

Information on data protection. The data controller is: Fidel Bustamante. Personal data will be processed for the purposes of CUSTOMER MANAGEMENT, OPERATIONAL ADVICE, FINANCIAL INTERMEDIATION, VIRTUAL POSITION MANAGEMENT, BILLING, AND MAINTENANCE.

The legal basis for processing is the contract entered into, compliance with a legal obligation, legitimate interest in the case of contact persons of legal entities, and consent, where applicable, which may be revoked at any time.

The criterion established for the retention of your data is the statute of limitations. If the basis for processing was consent, the data will be retained until consent is revoked or opposition to processing is expressed, and subsequently for the period during which claims may be filed.

The recipients of your data are the tax authorities and banking institutions, where applicable.

You have the right to exercise your rights of access, including the right to obtain a copy of the personal data being processed, rectification, opposition, deletion or erasure, where applicable, portability, and limitation of processing, by writing to the data controller at the following email address: hola@fooh.es. You have the right to lodge a complaint with the supervisory authority.

2- Data processing agreement.

In the case of the provision of a service for which the personal data of the customer or Contracting Party is processed, the Property will act as the data controller, with the customer or contracting party acting as the data processor, who has decided to choose this CONTROLLER because it offers sufficient guarantees to apply the appropriate technical and organizational measures to the data provided, ensuring that the processing carried out complies with Regulation (EU) 2016/679 on Data Protection (GDPR). In this regard, the data controller will provide the data obtained lawfully, and the data processor undertakes to do the following:

2.1- You will only process the data in accordance with the instructions of the DATA CONTROLLER, and for the purposes of this proposal or contract, without communicating it to any third party, not even for storage. The processing of personal data is necessary for the provision of the service. The type of personal data may be POS transaction data and data derived from such transactions, provided by the CONTROLLER, and the categories of personal data may refer to customers or users (identification data, contact details, mobile phone number, means of payment used, and transaction). The processing operations are: collection, recording, consultation, sending, modification, transfer, storage, erasure, and destruction.

2.2- It undertakes to ensure that the persons who form part of the structure of the DATA CONTROLLER and who process the data have undertaken to comply with the rules of confidentiality, and the CONTROLLER undertakes to adopt the necessary security measures and to guarantee the rights of the data subjects, in accordance with the provisions of Article 32 of the GDPR, and must establish the following measures

1) pseudonymization and encryption of personal data;

2) the ability to ensure the confidentiality, integrity, availability, and ongoing resilience of processing systems and services;

3) the ability to quickly restore availability and access to personal data in the event of a physical or technical incident

4) have established a process for periodically verifying, evaluating, and assessing the effectiveness of technical and organizational measures to ensure the security of processing

5) make available to the controller all information necessary to demonstrate compliance with the obligations laid down in the GDPR, as well as to enable and contribute to the performance of audits, including inspections, by the controller or another auditor authorized by the controller.

6) Assist the controller, where possible, in facilitating the response to the rights exercised by data subjects and help them comply with the security measures set out in Articles 32 and 36 of the GDPR, taking into account the nature of the processing and the information available to the controller.

7) It shall adopt all other requirements of Article 28 of the GDPR.

2.3- Once the contractual service has been fulfilled, personal data must be destroyed or returned to the CONTROLLER, at their discretion, which must be recorded, unless there is a legal provision requiring its retention. The data, where applicable, must be returned in the same form in which it was obtained and within two months of the effective completion of the service, without the CONTROLLER hindering its receipt. When liabilities may arise between the CONTROLLER and the PROCESSOR, the CONTROLLER may keep the data duly blocked. The CONTROLLER shall forward any request to exercise rights by a data subject to the PROCESSOR within three working days of receiving the request and in the same manner in which the CONTROLLER and PROCESSOR usually communicate, with electronic means being preferred. It is not the responsibility of the CONTROLLER to respond to and deal with requests for these rights.

2.4- If the DATA PROCESSOR uses the data for another purpose, communicates it, or uses it in breach of this contract, it will also be responsible for the processing. If the DATA PROCESSOR decides to subcontract all or part of this service, it must obtain prior written authorization from the DATA CONTROLLER. Once the subcontracting has been authorized, the SUBPROCESSOR of the processing must be subject to the same conditions and in the same written form as the CONTROLLER, responding to the CONTROLLER in the event of non-compliance by the SUBPROCESSOR.

2.5- Professional secrecy is mandatory with regard to the personal data being processed and must be kept secret during processing and after its completion. It is guaranteed that the persons authorized to process the personal data covered by this contract have expressly undertaken to respect confidentiality and the duty of secrecy, a commitment that has been documented and is available to the CONTROLLER.

2.6- The processing that the CONTROLLER will access as a result of this contract is all that is necessary to fulfill the purpose of the contract. The CONTROLLER authorizes the CONTROLLER to transfer the data being processed that is necessary to the third parties referred to in this contract or expressly indicated by the CONTROLLER, in order to comply with the provisions of this contract.

If you are a supplier:

Information on data protection. The data controller is: Fidel Bustamante. Personal data will be processed for the purpose of managing suppliers and payments. The criterion established for the retention of your data is the statute of limitations.

The legal basis for processing is the contract entered into, compliance with legal obligations, and legitimate interest in the case of contact persons for legal entities.

The recipients of your data are the tax authorities and banking institutions, where applicable.

You have the right to exercise your rights of access, including the right to obtain a copy of the personal data being processed, rectification, opposition, deletion or erasure, portability, and limitation of processing, by writing to the data controller at the following email address: hola@fooh.es. You have the right to lodge a complaint with the supervisory authority.

If you are a user of this entity’s social media accounts:

Information about data protection. Your profile data and all the information you provide us with will be processed and you will be considered a data subject in our company. You should be aware that when you become a friend or follower of the company’s profile or account, the data you have made public may be processed by us for the purpose of informing you about the company or the services you may provide. Your data may also be accessed by other members who have become friends or followers of this company, and you can decide your level of privacy on the social network. The data controller is: Fidel Bustamante. The legal basis is consent, which you give once you have decided to become part of the account, consent that you can revoke at any time. Your data will not be kept once you have decided not to be part of this entity’s network, account, or profile. If you wish to exercise your rights of access, including the right to obtain a copy of the personal data being processed, rectification, opposition, deletion or erasure where applicable, portability, and limitation of processing, you can contact us by email at: hola@fooh.es. You have the right to lodge a complaint with the supervisory authority.