Privacy policy
This policy explains what personal data is collected on chocomelivaliente.com, what it is used for and what rights you have over it. It is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights.
1. Data controller
| Controller | CHOCOMELI Y VALIENTE, S.L. |
|---|---|
| Tax number (NIF) | B75711671 |
| Address | C/ Zaidía, 1 — 46009 València (Valencia), Spain |
| Telephone | +34 657 919 025 |
| info@chocomelivaliente.com |
2. What data is processed
Only what you provide voluntarily. This site builds no profiles, uses no analytics or advertising tools, and collects no browsing data for tracking purposes.
Through the contact form we collect:
- Name.
- Telephone (optional).
- Email address.
- Project type.
- The message you write, with whatever data you choose to include in it.
If instead of the form you write to our email address or call us, the data appearing in that communication will be processed.
Please do not include special categories of data in your message (health, beliefs, trade union membership and the like), nor third-party data without their consent.
3. Purpose and legal basis
| Purpose | To deal with your enquiry, reply to you and, where appropriate, prepare a quotation or a proposal for a commission. |
|---|---|
| Legal basis | Pre-contractual measures taken at your request (art. 6.1.b GDPR) and, where the enquiry is not aimed at a commission, your consent when submitting the form (art. 6.1.a GDPR). |
| If you do not provide it | Without a name, an email address and a message we cannot reply to you. The telephone number is optional. |
Your data is not used to send you marketing communications unless you expressly ask for them.
4. How long it is kept
For as long as needed to deal with your enquiry and, afterwards, for the period during which liability may arise from that relationship. If the enquiry does not lead to a commission, the data is deleted within a maximum of one year from the last communication. If it does lead to a commission, it is kept for the duration of the relationship and afterwards for the limitation periods set by tax, commercial and building regulation law.
5. Who it is shared with
No data is sold or transferred to third parties, except where required by law.
It is accessed only by the providers needed for the website and email to work, which act as data processors and with whom the contract required by article 28 GDPR is in place:
- Web hosting: OVH Hispano, S.L.U. (NIF B-83834747), with servers located in Spain. It acts as data processor and accesses the data only as strictly necessary to provide the service.
6. International transfers
No data is transferred outside the European Economic Area. Should this become necessary in future, it would be done with the safeguards set out in Chapter V of the GDPR and reported in this policy.
7. Your rights
You may exercise the following rights at any time:
- Access: to know what data of yours is being processed.
- Rectification: to correct data that is inaccurate.
- Erasure: to ask for data to be deleted when it is no longer needed.
- Objection: to object to a particular processing operation.
- Restriction: to ask that data be kept but not used while a complaint is resolved.
- Portability: to receive your data in a structured, commonly used format.
- Withdrawal of consent previously given, without affecting the lawfulness of processing carried out beforehand.
To exercise them, simply write to info@chocomelivaliente.com or to C/ Zaidía, 1 — 46009 València, stating the right you wish to exercise and enclosing a copy of a document proving your identity.
If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid — www.aepd.es).
8. Security
The site is served over HTTPS and reasonable technical and organisational measures are applied to prevent loss, misuse or unauthorised access to the data, taking into account the state of the art and the nature of the information processed.
9. Minors
This site is not aimed at children under 14 and does not knowingly collect their data. If we find that we have received data from a minor without the authorisation of whoever holds parental responsibility or guardianship, we will delete it.
10. Changes to this policy
This policy may be updated if the way data is processed or the applicable rules change. The version in force is always the one published on this page, with its update date.
Last updated: July 2026