Privacy Policy

User privacy is of utmost importance to BLACK AND WHITE.

This section outlines what is and isn’t done with your personal data. This policy explains how the personal information of all individuals interacting with BLACK AND WHITE through this website will be handled and protected. It is important to read all sections of the Legal Notice, the Cookie Policy, and this Privacy Policy before using this website.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), Mónica Martín-Arroyo Amuedo informs that, by accepting this Privacy Policy, you give your express, informed, free, and unequivocal consent for the personal data you provide to be processed by her as the data controller, under the technical and organizational security measures established by current data protection regulations.

Who is responsible for this website?

Data Controller: Mónica Martín-Arroyo Amuedo
Trade Name: BLACK AND WHITE
Tax ID (NIF/CIF): 44962572X
Address: Camino Viejo de Rota, 1 – 11500 Puerto de Santa María (Cádiz)
Email: hola@blackandwhitecafeteria.es
Business Activity: Café offering event and catering services.

What personal data is collected on this website?

For the purposes stated in this Privacy Policy, BLACK AND WHITE collects and processes the following personal data, depending on the products or services requested through this website:

Identification data: first name, last name.

Contact data: postal address, email address, mobile phone number.

What is the legal basis for processing your data?

This website includes different forms, and the information collected in each will be used as follows:

  • Contact Form: Used for inquiries, suggestions, or professional contact. Your email address will be used to respond and provide the information requested through the site.

What will your data be used for?

En esta web, existe diferentes formularios, en cada uno de ellos, la información que recoja se utilizará de la siguiente manera:

Formulario de contacto: También existe un formulario de contacto para consultas, sugerencias o contacto profesional. En este caso se utilizará la dirección de correo electrónico para responder a las mismas y enviar la información que el usuario requiera a través de la web.

Data Retention Period

BLACK AND WHITE processes and retains your data responsibly and in accordance with current data protection laws.

How long do we keep your data?

The retention period depends on the specific processing purpose for which the data was provided. Below are the applicable periods:

  • Purchase data: Stored for as long as required to fulfill legal and tax obligations, plus an additional 5 years for handling potential claims.
  • User account data: Retained while your account is active. Once you close your account, data will be blocked and deleted within 30 days.
  • Contact data: Retained for as long as necessary to respond to your request, plus an additional 1 year for follow-up.
  • Cookies: Stored on your device as per your browser settings. See our [Cookie Policy] for more details.

How and where is your data stored?

Your data is stored on secure servers located within the European Union. No data will be shared with third parties unless legally required or with your express consent.

What are your data protection rights?

Anyone has the right to obtain confirmation about whether BLACK AND WHITE is processing their personal data.

Data subjects have the right to:

  • Request access to their personal data.
  • Request rectification or erasure.
  • Request cancellation.
  • Request restriction of processing.
  • Object to processing.
  • Request data portability.

If you have given consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on prior consent.

If you believe your rights regarding data protection have been violated, especially if you are not satisfied with the exercise of your rights, you can file a complaint with the Spanish Data Protection Authority via: https://www.aepd.es/es

To exercise your rights, please contact: hola@blackandwhitecafeteria.es

Breach Notification and Disclosure

BLACK AND WHITE adopts appropriate security measures proportional to the level of risk to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, if Mónica Martín-Arroyo Amuedo determines that your data has been misused (including by a BLACK AND WHITE employee), exposed in a security breach, or improperly acquired by a third party, she will inform you immediately of such incident.

Who do we share your data with?

Some tools used on this website are provided by third parties. To deliver strictly necessary services for the operation of this website, Mónica Martín-Arroyo Amuedo shares data with the following providers under their own privacy terms:

  • External service providers (e.g., website management, email distribution, and similar services) that perform business functions on behalf of Mónica Martín-Arroyo Amuedo.

 

Occasionally, the web development or hosting company may access this website. These companies are under a service contract requiring them to maintain the same level of privacy as enforced here.

Any international data transfer from tools or service providers is subject to the Privacy Shield framework, ensuring U.S.-based software companies comply with European data protection standards.

Data Secrecy and Security

https://blackandwhitecafeteria.es/ commits to using and processing user personal data in strict confidence, respecting its purpose, and adopting all necessary measures to prevent alteration, loss, or unauthorized access in accordance with data protection laws.

This website includes an SSL certificate, a security protocol ensuring that your data is transmitted securely—fully encrypted between the server and the user.

However, https://blackandwhitecafeteria.es/ cannot guarantee the absolute invulnerability of the Internet or prevent fraudulent access by third parties.

Regarding data processing confidentiality, Mónica Martín-Arroyo Amuedo ensures that any person authorized by her to process client data (including staff, collaborators, or service providers) is under a proper confidentiality obligation (whether contractual or legal).

In the event of a security incident, once aware, Mónica Martín-Arroyo Amuedo will notify the client without undue delay and provide timely information about the incident as it becomes known or as reasonably requested.

Accuracy and Truthfulness of Data

As a user, you are solely responsible for the accuracy and correctness of the data you submit to https://blackandwhitecafeteria.es/, exonerating Mónica Martín-Arroyo Amuedo (BLACK AND WHITE) from any liability.

Users guarantee and are responsible for the accuracy, validity, and authenticity of the personal data provided, and commit to keeping it duly updated. You agree to provide complete and correct information in the contact or subscription form.

Revocability

The consent granted for both data processing and its transfer may be revoked at any time by notifying Mónica Martín-Arroyo Amuedo (BLACK AND WHITE) in the terms established in this Policy for exercising ARCO rights.

Changes to the Privacy Policy

Mónica Martín-Arroyo Amuedo reserves the right to modify this policy to adapt it to legislative or jurisprudential changes, or industry practices. In such cases, changes will be announced on this page in advance of implementation.