Legal notice and privacy policy
Last updated: 15 October 2026. Information about the website owner and personal data processing under Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Spanish Law 34/2002 (LSSI-CE).
1. Website owner and data controller
SPANISHTASTE EUROPE, S.L., trading as SpanishTaste. Spanish tax ID (NIF): B85354413. EU VAT number: ESB85354413.
Registered address: Calle Peñalara de Aravaca 33, Esc. 4, planta 4, puerta A, 28023 Madrid, Spain.
Madrid Commercial Registry: volume 25348, folio 31, section 8, sheet M456472, entry 1.
Email: contact@spanishtaste.com. Telephone and WhatsApp: +34 617 330 425. These details identify the owner of the Spanish, French, English and Italian versions of the store.
2. Data we process and its sources
We process information you provide when buying, creating an account or contacting us: your name, contact details, billing and delivery addresses, necessary tax information, orders and correspondence. We use the necessary delivery details to create carrier shipping labels. Payment services process the information needed for the transaction according to your chosen payment method.
Google Ads tags and the Meta pixel may process online identifiers, IP addresses, browser or device information, and browsing or purchase events, depending on the service configuration and applicable consent choices.
3. Purposes and legal bases
Orders, deliveries, payments, returns and purchase-related support: performance of the contract and precontractual steps you request (Article 6(1)(b) GDPR).
Invoicing and tax and accounting obligations: compliance with legal obligations (Article 6(1)(c) GDPR).
Enquiries: precontractual steps for prospective purchases; otherwise, our legitimate interest in responding to the communication received (Article 6(1)(f) GDPR).
Advertising measurement, conversion attribution and, where used, remarketing or personalised advertising through Google and Meta: consent for processing and technologies that require it (Article 6(1)(a) GDPR and Article 22.2 LSSI-CE). Making a purchase does not, by itself, constitute consent to these advertising uses.
4. Recipients and third-party services
Necessary information is shared with delivery carriers and your chosen banks or payment providers, including PayPal where used. Hosting, maintenance and other technical or administrative service providers may access information necessary to provide their services, subject to the applicable data protection arrangements.
Where applicable, Google and Meta receive data associated with their tags and pixels for the advertising purposes described. Their role as processors, independent controllers or joint controllers depends on the specific service and processing. Data may also be disclosed to public authorities where legally required. This policy does not authorise unlimited advertising use of personal data.
5. International transfers
Using international providers such as Google, Meta or PayPal may involve processing outside the European Economic Area, including in the United States. Any transfers must rely on a valid mechanism under Chapter V GDPR: an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses and supplementary measures where required. You can request information about transfers and safeguards applicable to your data at contact@spanishtaste.com. Providers’ privacy policies give additional information about their processing.
6. Retention
Order data is kept during the contractual relationship and afterwards for the periods required for tax, accounting and liability purposes. Enquiries are kept as long as needed to respond and address resulting liabilities. Account information is kept while the account remains active, without affecting legal retention obligations for orders and invoices.
Consent-based processing continues until consent is withdrawn or its purpose ends, as applicable. Cookie and identifier durations depend on the specific technology and provider. Where required, data will be retained with access restricted to legally permitted liability purposes before deletion.
7. Your rights and choices
You may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests and to direct marketing, including related profiling. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
Send your request to contact@spanishtaste.com or the address above, explaining what you request. Additional identity information will only be requested where necessary. The normal response period is one month, subject to legally permitted extensions. You may complain to the Spanish Data Protection Agency or the competent supervisory authority where you habitually reside, work or where the alleged infringement occurred.
Providing information necessary to process and deliver an order is a contractual requirement; without it, we cannot complete the purchase or delivery. Advertising consent is optional. If processing were to involve solely automated decisions with legal or similarly significant effects, the information and safeguards required by the GDPR would be provided.
8. Cookies, pixels and updates
Advertising technologies requiring consent need a prior, informed and freely given choice; it must be possible to reject their use and withdraw consent. You can manage your preferences through the cookie options provided by the website and Google and Meta privacy controls. Blocking cookies in your browser may affect some services.
This information may be updated to reflect legal or processing changes. Relevant changes will be notified where required. Publishing an update does not obtain consent: consent is requested separately when necessary. Purchase, delivery and returns conditions are provided in their respective sections.
Audience measurement
SpanishTaste measures current page activity to administer the website. This tool uses no cookies or browser storage, stores no IP addresses, names or emails, and does not reconstruct journeys between pages. It temporarily keeps a random code for each open page, the page and an approximate country determined locally, and displays grouped counts. The page source is classified without storing referrer URLs and kept only with that page’s temporary signal. Signals stop appearing after two minutes without an update and are removed during automatic cleanup. They are not shared with third parties or combined with campaigns or customer records. The browser’s Do Not Track preference is respected.