Privacy policy

Controller

The controller responsible for processing your personal data under the General Data Protection Regulation (GDPR) is datavisibles S.L., Carretera La Romana 114/1, 03680 Aspe (Alicante), Spain, represented by its sole director Andreas Schaal. Contact: campoderafael@datavisibles.com, phone +34 613 17 42 40.

Principles

We only process personal data where it is needed to run this website and our services, or where you have given consent. We name the legal basis for each processing activity. Data is deleted once its purpose no longer applies and no statutory retention period prevents it.

Hosting and server log files

This website runs on the AppCore platform, which is also operated by datavisibles S.L. and hosted by mittwald GmbH & Co. KG in Germany. When you visit, the server automatically collects technical access data such as IP address, date and time, the page requested and your browser, in order to deliver and secure the website. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). A data processing agreement under Art. 28 GDPR is in place with the host.

Cookies

The information pages of this website do not set any cookies that require consent.

Cookieless analytics

To understand which pages are read, we use Plausible Analytics, self-hosted at analytics.appcore.ai. Plausible works without cookies and without user profiles; it only produces aggregated statistics. The legal basis is our legitimate interest in a website that meets our visitors' needs (Art. 6(1)(f) GDPR).

Contact by email, phone or WhatsApp

If you write to us or call us, we process your details to answer your enquiry (Art. 6(1)(b) GDPR for questions about a service, otherwise point (f)). We delete them once the enquiry is settled and no retention obligation applies.

If you message us on WhatsApp, we use WhatsApp Business. We are responsible for the content of your enquiry; WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, processes it on our behalf as our processor. In addition, WhatsApp processes its own data, such as your phone number and connection data, under its own privacy policy. Data may be transferred to the United States; for this, WhatsApp LLC and Meta Platforms, Inc. rely on the EU-U.S. Data Privacy Framework. If you'd rather not, write to us by email or give us a call.

Orders, collection and delivery

If you order from us – pomegranates, for example – we process your name, contact details, your order and, if we deliver, your delivery address in order to fulfil the order (Art. 6(1)(b) GDPR). We keep invoices and accounting records for as long as commercial and tax law requires – six years under the Spanish Commercial Code (Art. 30 Código de Comercio; Art. 6(1)(c) GDPR). All other details are deleted once the order is complete and no retention obligation applies.

Payment

You can pay in cash, by Bizum or by card via Stripe. Paying in cash creates no additional data.

Bizum: the payment runs through your bank and the Bizum service of Bizum, S.L. (Madrid). We receive the details needed to identify the payment and process them to handle your order (Art. 6(1)(b) GDPR).

Stripe: for card payments we use the payment service Stripe. You enter your full card details with Stripe; we do not receive them. Depending on the activity, Stripe acts as our processor or as a controller in its own right, for example to prevent fraud or to meet legal obligations. Data may be transferred to the United States; which Stripe company is responsible and on what basis data is transferred is explained by Stripe at stripe.com/privacy. The legal basis for our processing is the performance of your order (Art. 6(1)(b) GDPR).

Links to other services

“Get directions” is a plain link to Google Maps. Only when you click it does your device connect to Google; Google's privacy policy then applies.

Recipients

We only pass your data on where this is needed to run the website and for your order: to mittwald GmbH & Co. KG for hosting (agreement under Art. 28 GDPR, no transfers outside the EU and EEA) and, if you use them, to WhatsApp, to Bizum and your bank, and to Stripe as described above. With WhatsApp and Stripe, data may be transferred to the United States.

Your rights

You have the right to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

Just write to campoderafael@datavisibles.com.

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. Our lead authority is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain.

Changes

We update this policy when our processing or the law changes. The version in force at the time of your visit applies.

Last updated: 17 October 2026.