Privacy Policy

In accordance with the new European Data Protection Regulation 679/2016 (GDPR), we are required to inform you of how we process your personal data. In this regard, we would like to remind you that:

Data Controller

Factoria Caramba S.L. (“Grupo Caramba”).
CIF: B76823277
Address: Calle Rubens Marichal López, 70 5B. 38004 Santa Cruz de Tenerife.

Purpose of processing

• To process orders, bookings and purchases made through the website or social media (including WhatsApp and similar messaging applications), to manage, maintain, develop and oversee the relationship with the user, and to handle enquiries.
• To carry out satisfaction surveys.
• Accounting, tax and administrative management.
• To manage CVs received through the “Work with us” section.
• Marketing communications.

Legal basis for processing

• Performance of a contract or the taking of pre-contractual steps.
• Legitimate interest.
• Consent.

Retention of your personal data

The personal data you provide to us will be retained for as long as necessary to fulfil the purposes for which it is processed.

Recipients

Service providers who assist or support us, or those with whom we have a legal obligation.

Your rights

You may exercise your rights of access, rectification, erasure, restriction or objection to the processing of your data, as well as data portability, as set out in this “Privacy Policy”.

1. Who is responsible for processing your personal data?

Grupo Caramba is the data controller responsible for processing the personal data collected through the websites https://www.kon-tiki.es/ including any of their subdomains or sections, as well as the social media accounts linked to them, including WhatsApp and similar messaging applications (hereinafter, the “Website”), and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), and Spanish Organic Law 3/2018 of 5 December (“LOPDGDD”, the Spanish data protection act).

Access to and use of the Website imply that the user has read and fully accepts this Privacy Policy. The date at the beginning of this Privacy Policy indicates the date of its last revision, which shall apply from the date of its publication. Grupo Caramba may amend this Privacy Policy, and it is therefore recommended that you review the Privacy Policy regularly.

Likewise, with regard to access to and use of the Website, the Legal Notice applies and, in the event of the purchase of products, the General Terms and Conditions of Sale.

You may contact Grupo Caramba through any of the following means of contact:

• The “Contact” section of the Website.

2. What are the purposes of processing and their respective legal bases?

2.1 Processing orders, bookings and purchases through the Website; managing, maintaining, developing and overseeing the relationship with the user; and handling enquiries.

Purpose: To manage, fulfil and oversee the relationship with the user in connection with the purchase of catering products and merchandising, both available through the Website (including any possible returns), as well as to respond to enquiries or any type of request made by the user through any of the means of contact made available on the Website. If the user has made purchases from Grupo Caramba, we may send them communications with news and discounts on Grupo Caramba products.

Should the user register on the Website, Grupo Caramba will process their personal data in order to identify them as a Website user and to grant them access to the various features available to registered users. You may cancel your registered user account by contacting [*]-

By ticking the relevant boxes and entering data in the fields marked with an asterisk (*) in the corresponding forms, users expressly and freely give their unequivocal acceptance that their data is mandatory and necessary in order for Grupo Caramba to handle their request, while the inclusion of data in the remaining fields is voluntary. The user guarantees that the personal data provided to Grupo Caramba is accurate and is responsible for notifying any changes to it. Should all data not be provided, the information and services provided cannot be guaranteed to fully meet the user's needs.

Categories of data processed: first name, surname, mobile telephone number, email address and postal address.

Legal basis: performance of the contractual relationship between the user and Grupo Caramba or the taking of pre-contractual steps, as applicable.

2.2. Carrying out satisfaction surveys and analysis

Purpose: To carry out satisfaction and statistical analysis in order to gain insight into the products offered, their sales and how their performance can be maximised, and thereby to offer users the best product deals. We will consult the information we hold in relation to the views and purchases of the products you have acquired.

Categories of data processed: contact data, browsing data, purchase history data.

Legal basis: legitimate interest.

2.3. Accounting, tax and administrative management.

Purpose: To record sales made through the Websites in order to keep accurate accounts, register financial transactions and report to the finance department.

Categories of data processed: data on sales made through the Website.

Legal basis: performance of the contractual relationship between the user and Grupo Caramba.

2.4. Managing CVs received through the “Work with us” section.

Purpose: To manage the receipt of your CV via email, as well as any personal data that may be generated as a result of participation in selection processes, in order to assess your professional profile and to enable you to take part in the recruitment processes organised by Grupo Caramba in respect of the vacant or newly created positions that arise from time to time, as well as to process your possible incorporation into Grupo Caramba's workforce.

Categories of data processed: personal data contained in the CV provided by the user, or in the various interviews conducted.

Legal basis: the taking of pre-contractual steps.

2.5. Marketing communications.

Purpose: To send Grupo Caramba advertising communications by email, SMS, social media messaging or any other electronic or physical means, whether present or future, that makes commercial communications possible. These communications will be sent by Grupo Caramba and will relate to its products and services, or those of its partners or suppliers with whom it has reached a promotional agreement. In such cases, third parties will never have access to the personal data.

Categories of data processed: contact data.

Legal basis: The sending of commercial communications to Grupo Caramba customers is based on legitimate interest. The sending of commercial communications to non-customer users will be based on the consent that they must necessarily have given beforehand.

3. For how long will we retain your personal data?

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods established by applicable regulations for the fulfilment of legal obligations. By way of example only:

• Data provided for contact requests will be processed for as long as necessary to handle your request or query.
• Data provided in order to send you commercial communications will be processed until you request to unsubscribe from receiving such commercial communications.
• Where the legal basis for processing your personal data is the performance of a contract, we will process your data for as long as necessary to manage the order for the products you have purchased, including any possible returns, complaints or claims associated with the purchase of the product.
• Data provided through the “Work with us” section will be retained for a period of no more than one year, in case we consider in the future that it matches one of the existing job profiles.

Once the retention periods have ended, the data will be kept blocked in accordance with the provisions of the LOPDGDD, for the period of time necessary to address any type of liability (e.g. until the lapsing of any liability that may arise from data protection regulations).

4. Who do we share your personal data with? Recipients

Grupo Caramba works with certain third-party service providers who have access to personal data and process it on behalf and for the account of Grupo Caramba as a result of the provision of services. In its commitment to the user's privacy and data protection, Grupo Caramba will only choose companies that offer sufficient guarantees to implement appropriate technical and organisational measures, so that the processing complies with applicable data protection legislation and safeguards the protection of the User's rights. In addition, Grupo Caramba will enter into the corresponding data processor agreement with its providers, imposing on them, among others, the following obligations: to implement appropriate technical and organisational measures; to process personal data for the agreed purposes and solely in accordance with the documented instructions of Grupo Caramba; and to delete or return the data once the provision of services has ended.

Specifically, Grupo Caramba will engage the provision of services by third-party providers that carry out their activity, by way of example and not limitation, in the following sectors: logistics services, booking management, IT and technology service providers, courier service providers and digital marketing service providers.

5. What are my rights as a user?

We inform you that, in accordance with the legislation in force, you have the right to exercise your rights of access, rectification, cancellation and objection, as well as the right to erasure, the right to restriction of processing, the right to data portability and the right to withdraw at any time the consent you have given to the processing of personal data, by proving your identity (by means of a copy of your ID document or equivalent) at the following address: Calle Rubens Marichal López, 70 5B. 38004 Santa Cruz de Tenerife, or through the Website, in the “Contact us” section.

If you consider that Grupo Caramba has not respected any of the rights mentioned above, you have the right to contact the Spanish Data Protection Agency (https://www.aepd.es/es) at Calle de Jorge Juan, 6, 28001 Madrid.