Privacy policy

Who we are

HVILA REST — Víctor Madrigal Mesa, Plaza Federico García Lorca, 77 · 08130 Santa Perpètua de Mogoda · Spain, registered in Spain under NIF ES21751031T. We are the data controller for the personal data described here. You can reach us at hello@hvilarest.com.

What we collect, and why

Data	Why	Legal basis	Kept for
Name, delivery and billing address, email, phone	To fulfil your order	Performance of a contract, Art. 6(1)(b) GDPR	6 years, for accounting law
Order history and payment status	To process payment, refunds and returns	Contract, Art. 6(1)(b)	6 years
Email address for our newsletter	To send you email we think you want	Your consent, Art. 6(1)(a)	Until you unsubscribe
Messages you send us	To answer you	Legitimate interest, Art. 6(1)(f)	2 years
Cookies and usage data	To keep the shop working, and to understand it	Necessary cookies: contract. Everything else: your consent	See the cookie banner

We do not sell your personal data. We do not buy it either.

Payment

We never see or store your full card number. Payment is handled by our payment providers, who are independent controllers for that part.

Who else processes your data

Shopify, as the platform this shop runs on. Our payment providers. Our carriers, who need your name and address to deliver. Our email provider, if you have subscribed. Some of these are outside the EEA and the UK; where that is the case, transfers rely on the European Commission's Standard Contractual Clauses and, for the UK, the International Data Transfer Addendum.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to processing based on legitimate interest, and ask for your data in a portable format. Where we rely on consent, you can withdraw it at any time. Write to hello@hvilarest.com and we will answer within one month.

If you think we have got it wrong, you can complain to the supervisory authority in Spain, or to the Information Commissioner's Office if you are in the UK.

Children

This shop is not for people under 16. We do not knowingly collect their data.