Privacy policy

Reference regulatory framework

This Privacy Policy is developed and informs users and visitors in accordance with the principles of lawfulness and fairness in the processing of personal data established in the European General Data Protection Regulation 2016/679 and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.

Scope of application of the privacy policy

This privacy policy has as its scope and objective to explain and provide information about the data processing carried out through its website (data collected in forms, cookies, or email), although in some cases we may explain how we carry out processing performed offline.

Who is the data controller?

Identity: Pablo Iglesias Pescados y Mariscos SLU (Tax ID/CIF: B15206204)

Address: Muelle de la Palloza, Alm. 53-B 15006 / A Coruña / España

Telephone: 981 131 000

Email: info@pabloiglesias.com

Purposes for which we process personal data

We use different means to collect data and we also apply different purposes to it.

  1. Contact forms: We process your data through the contact form to address your query or manage an appointment and, unless you authorize it, it will not be used to send you communications.
  2. Notices and commercial communications: Users of our services may receive communications about products and services related to their purchase or service, and may, where appropriate, object to this data processing.
  3. Offline sales processes: We process the contact data necessary for the provision and execution of the service and to be able to carry out the contracted commercial transactions.

Use of cookies on the website

We use the essential cookies necessary to optimize the website service. If you want to know more about cookies, click here. We also use third-party cookies to perform website usage analytics or, in some cases, to be able to link to third-party services necessary to provide the service.

How we legitimize data processing

We carry out processing whose legitimacy is based on the consent of the data subject (art. 6.1 a GDPR), given explicitly or through clearly affirmative actions:

  1. Data collected through contact forms
  2. Data collected through cookies accepted by the user
  3. Data used in commercial communications accepted and authorized by the data subject.

We also process data based on legitimate interest (art. 6.1 a GDPR) when necessary cookies are installed that do not require the user's consent or authorization.

  1. Cookies
  2. Communications relating to service incidents or commercial information about products and services when the person is already a customer with a prior commercial relationship.
  3. Contact data of the legal representatives of legal entities within the framework of the execution of the contract (Art. 19 LOPDgdd).

Periods during which data is retained

Data processing obtained through the data subject's consent, such as commercial mailings, is processed until the data subject deletes it or cancels the associated services. In any case, ex officio, if the data is inactive or we know that it is not up to date, we apply purge procedures on a periodic basis.

Data from commercial transactions is retained for at least 5 years in accordance with accounting regulations.

Data collected by cookies is deleted automatically in accordance with the expiration periods of these cookies, or when the user deletes this data from their browser.

Data received through the contact form will not be retained for more than 2 years unless you authorize the sending of communications, in which case we will retain it until you cancel it.

Who we share your data with

We may share data with third parties that help us provide the services you request, for example, cloud software companies that provide forms or email.

In the case of service providers with access to personal data as data processors, the relationships are regulated in accordance with contracts based on standard clauses appropriate to GDPR 2016/679.

We also work with consultancies and advisory services that may have access to information, mainly of an accounting and tax nature.

We may also communicate your data to third parties in those cases that are legally provided for, such as in the case of Public Administrations acting in the exercise of their competences.

Third parties involved in data processing

Data processing may be carried out by third parties that participate in it at some point in the data lifecycle.

  • Microsoft 365: Microsoft Corporation (Microsoft 365) provides email and corporate communications services used in the management of the queries received through the web form.

International data transfers

No other data transfers are made to third countries or organizations that do not have an adequate level of protection. Microsoft 365 (Microsoft Corporation, USA) has agreements based on standard clauses approved by the European Commission for international transfers.

Rights of the data subject vis-à-vis the data controller

The data owner has the right to:

  • Access their data
  • Rectify their data
  • Erase their data

In some cases, and in accordance with the provisions established in each case, they may also

  • Port their data to another Controller
  • Object to all or part of the processing
  • Restrict the use of their personal data

The data subject may at any time withdraw the consent they have given to carry out data processing.

In order to exercise the rights referred to in the preceding paragraphs, no formality is required, but you may use, if you wish, the forms provided by the Spanish Data Protection Agency

Form for exercising the right of access

Form for exercising the right of rectification

Form for exercising the right to object

Form for exercising the right of erasure (right "to be forgotten")

Form for exercising the right to restriction of processing

Form for exercising the right to data portability

Form for exercising the right not to be subject to automated individual decisions

You may submit your request by any of the following means:

  1. A written request addressed to the Data Controller at the address shown in the header of this notice, indicating "GDPR Rights" in the sender field.
  2. By sending -and, where appropriate, attaching- your request to the email info@pabloiglesias.com, indicating "GDPR Rights" in the subject line.

If your rights are not satisfied, you may file a complaint with the Spanish Data Protection Agency at C/ Jorge Juan 6, 28001, Madrid.

Absence of automated decision-making processes

The data subject to processing is not subjected to automated decision-making processes.

Security measures

The data controller has adopted appropriate organizational and technical security measures so that data processing is carried out with all security measures and guarantees for the data subject.

Update of the data protection policy

The Data Controller reserves the right to update this privacy policy, informing data subjects of any changes thereto where necessary.

 

Last updated: May 28, 2026