This privacy policy was last revised on 27th May 2024

Xarcuteria Ferran (“we”, “us”, “our”) is the operator of the website https://www.xarcuteriaferran.com – For our address, CIF etc. please visit our terms page.

We collect, use and are responsible for certain information about you.  When we do so, we are regulated under the laws of Catalunya, Spain and the European Union. We are responsible as “controller” of that personal information for the purposes of those laws.

We comply with the provisions of the GDPR in processing personal data and adhere to the principles described in article 5 in particular the processing of personal data in a lawful, fair, limited and transparent manner.

We respect your privacy and are committed to protecting your personal information, which we call “personal data”. This Privacy Notice summarises how we look after your personal data and your privacy rights.  It supplements any other privacy notices and our privacy policy and is not intended to override them.

We have tried to be brief and clear. We are happy to provide additional information or explanation.

When you make enquiries about our products and services before you become a customer, we may need to collect personal information about you so that we can provide a quotation for services. Once you become a customer, we need to collect and use personal information to provide services to you.

We use your personal data to send you marketing communications from us if you have requested information from us and have provided us with your details to do so. You can ask us to stop sending marketing material to you at any time by unsubscribing from our marketing emails or by contacting us.

We do not allow any other companies to use your personal data for marketing purposes.

We may collect and use your personal information to:

  • Provide a quotation for services
  • Manage any accounts you hold with us
  • Contact you in relation to the service you have ordered or to provide information you have requested
  • Deal with payment for our services
  • Notify you of changes that may affect you or be of interest to you
  • Resolve disputes or collect and recover overdue payments.

We may also collect personal information to:

  • Enable us to follow up on enquiries made by you
  • Improve our services
  • Detect and prevent fraud and money laundering
  • Prevent offensive, inappropriate or objectionable content being sent to or posted on our websites and stop any other form of disruptive behaviour.

You can tell us at any time that your enquiry is no longer active. You can do this by email ferran@xarcuteriaferran.com or by using our contact form.If you do so, we will immediately stop contacting you about your enquiry.

We gather and use information from our customers, suppliers, business contacts, advisors, contractors, job applicants, employees and other people with whom we have a relationship or many need to contact in the course of business.

We rely on different lawful bases for collecting and using personal data in different situations.

In the course of operating our business, we may collect personal information when you provide it to us, such as full contact information including name, postal address, email address, phone numbers, identity verification and payment details.

If you apply for a job with us, or are interested in working for us as a contractor, we collect and use personal information through the application, recruitment, appointment and employment processes and we check references.

We operate CCTV in our shop and tasting room which includes the collection and processing of CCTV images. We may also take photos and video & audio footage.

We don’t knowingly collect personal data relating to children.

We have put in place security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We don’t transfer your data outside the European Economic Area and United Kingdom except if you subscribe to our email newsletter service. In that case, we transfer the data you provide at that time to MailChimp which is owned by Intuit, a company based in California which serves more than 100 million customers worldwide with various products including MailChimp and QuickBooks. They store, on our behalf, a record containing your email address, and name. Their Global Privacy Statement outlines their conduct regarding data they hold for entities such as ours located within the European Union. Here is Intuit’s Global Privacy Statement.

To enable our website to be delivered to you at optimal speed, we use CloudFlare. CloudFlare is a content delivery network that replicates our website content on highly optimised servers close to your location. Here is Cloudflare’s privacy policy. We do not use CloudFlare to store your personal data, however Cloudflare’s privacy policy states that in our use case they may store “extremely limited personal data, most often in the form of IP addresses.”  and “process this type of information on behalf of our customers in our data centers in the U.S. and Europe for a limited period of time.”

Please also see the section below regarding “Our website and infromation relating to cookies” as it discusses for example how we use Google reCAPTCHA to protect our forms and embedded Instagram content and provides links to those companies privacty policies.

What are cookies?

A cookie is a small file that is sent along with the pages of this website and that your browser stores on the hard drive of your computer or other device. Stored information may be returned to our servers or the appropriate third-party servers during a subsequent visit.

You can delete cookies at any time from within your browser. You can also set preferences before you enter our website to override the set-up that we have configured. Deleting or rejecting cookies may impair your experience of our website. For more information about these options, consult the instructions in your browser’s help section.

Some cookies ensure that certain parts of the website work correctly and that your preferences continue to be remembered. By placing essential functional cookies, we make it easier for you to use our website. This way, you do not need to repeatedly enter the same information when you visit our website and, for example, we’ll aim to remember whether you allowed or refused marketing cookies, to respect what you told us before and not ask you again

Essential Functional Cookies

If your settings allow it, our website uses cookies and other related technologies (for convenience, all technologies are called “cookies”). so that when you visit our website again with the same browser on the same device within a year of your last visit, if you have not since cleared your cookies:

  • we’ll aim to remember whether you allowed or refused Google Analytics, to respect what you told us before and not ask you again

Google’s reCAPTCHA Cookies are used to protect our forms against spam and offensive, inappropriate or objectionable content. This helps ensure our staff can answer your enquiries as quickly as possible. Here are the links for Google’s privacy policy and terms. The information you submit via our forms will only be transmitted to us when these essential cookies are accepted and Google’s reCAPTCHA service determines that your submission is not spam. You can also contact us by emailing ferran@xarcuteriaferran.com or by Whatsapp 637 716 195. During our opening hours you can also contact us by phoning +34 93 318 75 33 or come in and see us in person.

Optional marketing cookies

If you consent marketing cookies such as those relating to Google Analyitcs, or Ads on Google, Facebook or Instagram. These may be used to help better inform our marketing decisions which helps us keep our prices as competitive as possible. When you visit our website for the first time, we will show you a pop-up window with an explanation about cookies. This is how you can agree to our use of the categories of cookies that you have selected in the pop-up window, as described in this cookie policy.

Embedded or linked digital content

On our website we have included Instagram content. This content is embedded with code derived from Instagram and may save cookies although as at 27/05/24 we do not believe our use of Instagram embedded content leads to cookies being saved on user devices. This content may process certain information for personalized ads.

Please read the instagram privacy policy to know what they do with (personal) data that they process. Instagram is located in the United States.

Our website includes links to third party websites as well as embedded content and may include plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy notice of every website you visit.

Embedded YouTube videos may help you better understand our products and services and embedded Google Maps show you the physical location of our premises. Here are links to information on privacy from YouTube and Google Maps. Playing embedded YouTube videos enables YouTube cookies.

We use Google Fonts and Font Awesome to deliver fonts and icons to make our website visually appealing and to help us to communicate clearly. We understand that:

  • no IP addresses nor other privately identifiable data are stored by Google as a result of using Google Fonts.
  • connections to Font Awesome can result in temporary storage of personally identifiable data such as IP addresses for optimisation, diagnostics and debugging, security and compilation of aggregate statistics. We understand that font awesome do not indefinitely store any of your personally identifiable data.

Regardless of whether you allow Google Analytics or not, we may use Fatham Analytics which is a privacy first, cookieless analytics solution. Because it doesn’t use cookies it cannot inform our marketing decisions so fully as Google Analytics but nonetheless it does inform our marketing decisions to an extent which helps us keep our prices competitive. We understand that your IP address is encrypted by Fatham such that there is no way to “unravel” the encryption to reveal it. They are very transparent about how they treat data such as your IP address on their website.

Website data security

To keep your personal data safe we use security measures such as:

Nevertheless, you acknowledge that use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that is transferred from you or to you via the internet.

If you provide us with details of any other person we can contact to discuss your account, we may contact that person and discuss and share the details of your account with that person and deal with that person in relation to your account as if that person was you.  We may particularly want to do this if we are unable to get in touch with you for any reason.  If you change your mind, you can email or write to us and have this person taken off your account as an alternate contact person.

If you provide us with details of a person we can contact for a job reference, we may contact that person in connection with your job application. We also make other enquiries in relation to the role you are applying for.

If you give us information on behalf of someone else as an alternative contact, referee or next of kin, you confirm that the other person has agreed that you can:

  • Give consent on his/her behalf to the processing of his/her personal data
  • Receive on his/her behalf any data protection notices
  • If relevant, give consent to the transfer of his/her personal data abroad.

We may disclose your personal data to:

  • Service providers under contract with us to support our business operations
  • Providers of warranties for products we’ve supplied to you.
  • Our insurers and insurance brokers
  • Law enforcement or government agencies in connection with any investigation to help prevent or detect unlawful activity
  • Any person or agency if we need to share that information to comply with the law or to enforce any agreement we may have with you or to protect the health and safety of any person
  • Any person you’ve named as a person we can contact to discuss your account
  • Any person who is your agent or representative, such as the holder of a power of attorney, a legal guardian or person administering a will
  • Any person we have negotiated with in the event that we are selling our business or property
  • Credit reference agents
  • Credit card associations if specifically required
  • Utility providers.

If we pass data on to insurers, they may enter your data on to a register of claims which is shared with other insurers to prevent fraudulent claims.

We may also share your personal data with any third parties to whom we may choose to sell, transfer, or merge parts of our business or assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.

We require any third parties that we allow to process your data to respect the security of your personal data and treat it in accordance with the law. We do not allow our third party service providers to use your personal data for their own purposes and only permit them to process your personal data for the specified purposes and in accordance with our instructions.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

You can ask us about the retention periods for different aspects of your personal data.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Under the General Data Protection Regulation you have a number of important rights. These include the following rights:

  • Require us to correct any mistakes in your information that we hold though we may need to verify the accuracy of the new data you provide to us;
  • Require the erasure of personal information concerning you in certain situations;
  • Require us to stop contacting you for marketing purposes;
  • Object in certain other situations to our continued processing of your personal information;
  • Restrict our processing of your personal information in certain circumstances;
  • Request a copy of your information which we hold (subject access request);
  • Object to decisions being taken by automated means which produce legal effects concerning you or which affect you significantly; and
  • Receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have a right to transmit those data to a third party in certain situations.
  • You have the right to make a complaint at any time to the Spanish Data Protection Agency if you are not happy or have a problem with how we are dealing with your personal information.  We would appreciate the opportunity to resolve the matter with you first.

If you would like to exercise any of these rights, we may need to request specific information from you to help us confirm your identity and to ensure you have the right to access your personal data (or exercise any of your other rights).  This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.  We may also contact you to ask you further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests.  In this case, we will notify you and keep you updated.

Please:

  • Email, call or write to us
  • Let us have proof of your identity and any other relevant details
  • Let us know the information to which your request relates, including any account or reference numbers, if you have them.

No fee is usually required. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively we may refuse to comply with your request in these circumstances.

By checking the corresponding boxes and entering data in the fields, marked as mandatory in the forms, expressly and freely and unequivocally accept that their data is necessary to attend to their request. the inclusion of data in the remaining fields being voluntary however the more data that is provided, the more we can tailor information and services to your needs. The User guarantees that the personal data provided is true and is responsible for communicating any modification thereof. Please notify us of any significant changes to important information, such as your contact details.

If you do not provide personal data to us and this would prevent us from providing services you have contracted, or place us in breach of the law, we may have to cancel our contract. We will notify you if this is the case.

Any substantial changes that affect how we process your personal data will be notified on our websites so please revisit our Privacy Notice when you visit our website.

Do you have any questions or concerns?

If you have any questions about this Privacy Notice, the use of your personal information, or are concerned that any information we hold on you is incorrect, do please get in touch with us by emailing ferran@xarcuteriaferran.com or by using our contact form