Privacy Policy

1. Company identification

This policy explains how the personal data of individuals who interact with TRUCO Y TRUFA S.L through its website is processed and protected. The company operates under the GDPR (EU 2016/679) and the Spanish Organic Law on Data Protection (3/2018).

2. Data we collect

• Identification data (first name, last name)
• Contact information (address, email, phone)
• Contractual data (national ID, purchases, payment details)
• Browsing data (IP address, device, browser, activity)

3. Legal basis for processing

Data processing is based on:

• Contract performance for service delivery
• User consent for communications and subscriptions
• Legitimate interest to protect users from fraud

4. Purposes of processing

• Activation of subscriptions and newsletter delivery
• Moderation of comments
• Response to inquiries
• Creation and management of user accounts
• Processing purchases and managing orders

5. Data retention

Personal data is retained for the minimum time required by applicable legal obligations:

• 4 years: tax records
• 5 years: civil claims
• 6 years: commercial records
• 10 years: anti-money-laundering
• Subscribers/registrations: until consent is withdrawn

6. User rights

Users can exercise the following rights:

• Access, rectification and erasure
• Restriction and objection to processing
• Data portability

Contact to exercise your rights: gema.saiz@trucoytrufa.es

7. Security and confidentiality

The company implements appropriate security measures and maintains confidentiality, although absolute security on the Internet cannot be guaranteed.

8. Third-party data

Users warrant that any third-party information shared has the corresponding authorization and has been notified accordingly.