Privacy policy
This is a courtesy translation. In the event of any discrepancy, the Spanish version prevails.
Last updated: October 2026.
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you of how we process your personal data.
1. Data controller
- Owner: BAUER LEMANS, S.L.
- Tax ID (NIF): B66336264
- Registered address: C/ Travessia Industrial, 191, 08907 L'Hospitalet de Llobregat (Barcelona), Spain
- Telephone: +34 931 592 650
- Email: hola@bocadofoods.com
For any data protection matter you can write to us at hola@bocadofoods.com.
2. What data we process, why and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering your enquiries by email, phone, WhatsApp or the contact form | Name, contact details and content of the enquiry | Your consent when contacting us and, where applicable, pre-contractual measures (Art. 6(1)(a) and 6(1)(b) GDPR) | As long as needed to reply and, afterwards, for the limitation periods of any possible liability |
| Private label requests and other business relationships | Professional contact and company details | Pre-contractual measures and contractual relationship (Art. 6(1)(b) GDPR); legitimate interest in maintaining business contact (Art. 6(1)(f) GDPR) | For the duration of the relationship and, afterwards, for the legal periods |
| Newsletter: recipes, news and promotions | Email address | Your consent (Art. 6(1)(a) GDPR and Art. 21 LSSI-CE) | Until you unsubscribe |
| Managing our social media | Public profile data and messages | See the social media privacy policy | According to the settings of each network |
Online purchases are processed at shop.bocadofoods.com. The processing of order data (registration, shipping, invoicing and payment) is explained in the shop’s privacy information and in the terms of sale. Invoicing data is kept for the periods required by tax and commercial law (up to 6 years).
We do not make automated decisions or create profiles that produce legal effects concerning you.
3. Recipients
We do not share your data with third parties unless required by law. To provide our services we work with providers that may access data on our behalf as data processors, with whom we have signed the contract required by Article 28 GDPR: web hosting, email service, contact form service, newsletter tool, courier companies and the online shop’s payment platform.
If any of these providers processes data outside the European Economic Area, it will do so with the safeguards provided for in the GDPR (an adequacy decision of the European Commission, such as the EU-U.S. Data Privacy Framework, or standard contractual clauses).
4. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, without affecting the lawfulness of processing carried out before its withdrawal.
To do so, write to us at hola@bocadofoods.com or by post to C/ Travessia Industrial, 191, 08907 L'Hospitalet de Llobregat (Barcelona), Spain, stating “Data protection” and the right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month.
To unsubscribe from the newsletter, simply use the link at the end of each email.
If you believe we have not handled your rights correctly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of your country of residence.
5. Accuracy of data
We ask that the data you provide be true and up to date, and that you inform us of any changes. If you provide us with data about other people, you must have informed them beforehand.
6. Minors
The services of this website are not aimed at children under 14. If you are under that age, do not provide us with personal data without the consent of your parents or guardians.
7. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, in accordance with Article 32 GDPR.
8. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. We will publish any changes on this page, indicating the date of the last update.