Privacy policy

1 — Identity of the data controller

Restauración Mesas S.L., owner of the Website www.ciano.coffee, hereinafter “The Company”, informs the users of the Website that it is responsible for the processing carried out on this Website, unless otherwise stated in the specific processing concerned.

Through this Privacy Policy, “Restauración Mesas S.L.” describes to the users of the Website what data it collects, how it uses it and the options users have regarding that data, including how to access and update it.

Owner: Restauración Mesas S.L.
Registered office: Carrer Tramuntana 8 Alcover, Tarragona, 43460
CIF: B43567718
Telephone: 977846464
E-mail: hola@ciano.coffee

The user expressly and fully accepts the conditions set out in this Privacy Policy for the use of the Website of Restauración Mesas S.L. and of any of the services incorporated in it.

2 — Data collection and consent

In compliance with Law 15/1999, of 13 December, on the Protection of Personal Data (LOPD), and with the General Data Protection Regulation (hereinafter “GDPR”) 2016/679 of the European Parliament and of the Council of 27 April 2016, you are informed that the personal data requested, or that may be provided to us by any other electronic means, will be included in our personal data files, of which the company is the controller and owner.

Likewise, when a user completes any of the forms with the personal data requested, under the GDPR, they must give unambiguous and explicit consent, which is revocable and without retroactive effect.

The company is not responsible for the processing of personal data by the Websites that the user may access through the various links contained on our website.

The User guarantees that the Personal Data provided is true, accurate, complete and up to date, and undertakes to notify any change or modification to it. Where Personal Data of third parties is provided, the user is responsible for having informed them and obtained their consent for it to be provided, for the purposes indicated in the corresponding sections of this Privacy Policy. In the event of any loss or damage caused to the Website, to its controller or to any other third party through the communication of erroneous, inaccurate or incomplete information via the forms on the Website, and in particular via the Registration section, the liability arising from such act will be attributed exclusively to the user.

3 — Purposes of processing

The data we request is adequate and necessary for the purpose for which it is collected, will not be used for any purpose other than that for which it was provided, and will under no circumstances be transferred to third parties without the consent of the data subject.

The user is not obliged to provide us with their personal data; however, it is absolutely necessary in order to provide the services we offer.

In accordance with Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, the purposes for which personal data is collected are:

To deal with the various matters raised through the contact email address.
To provide a personalised service to the user, in order to have the information available.
To design various services that may be of interest to users.
To contact the user by email in order to respond to the contact form, by telephone calls, by SMS or by other electronic means, such as notifications that may be sent through the Website, if enabled.
To produce anonymous statistical reports on users’ access habits and activity on the Website.
To provide, manage, administer, extend and improve the services and/or content offered by the company by analysing the user’s use of the services.
Management of registration as a user of the Website. The data provided by the user to the company for Registration on the platform will be processed for the purpose of identifying the user within the community and enabling access to it.
Sign-up to the “featured subscriptions” receipt in order to keep the user up to date on its services.

Under no circumstances will the following actions be carried out in relation to the personal data provided by users:

International transfers to other States without obtaining the prior consent of the data subject.
It will not rent or sell personal information, nor share your personal information with any advertiser or advertising network for advertising purposes without explicit permission.
Disclosure to third parties, whether natural or legal persons, without obtaining the prior consent of the data subject.

Unless specifically stated otherwise, all fields of each form will be considered mandatory, for which the user must provide us with true, accurate, complete and up-to-date data.

The user will be solely responsible for any damage or loss, direct or indirect, caused to the company or to any third party by completing the forms with false, inaccurate, incomplete or out-of-date data, or with third-party data.

The company reserves the right to decide whether or not to include the personal data of such persons in its files.

4 — Data hosting

For technical and service-quality reasons, the website www.ciano.coffee and its subdomains are hosted on the servers of the company Shopify. That company provides only hosting, database maintenance and/or data processing services for the company’s activity.

5 — Types of data processed

The company may collect information and personal data from our customers or users, which may vary depending on the technology available or the nature of the service, among other factors.

6 — Minors

As a general rule, the company will not knowingly process personal information of children under the age of thirteen.

Should the company, in the course of any monitoring activity, discover the unintentional collection of information relating to children under the age of thirteen, it will take all measures that, as a content provider and host, it is obliged to take in order to delete such information as soon as possible, except in those cases where applicable legislation requires it to be retained.

In accordance with the European Data Protection Regulation, persons over the age of thirteen are entitled to give their consent, except in those cases where the law requires the assistance of the holders of parental authority or guardianship.

7 — Confidentiality of data

The data collected in all private communications between the company and users will be treated with absolute confidentiality. The company undertakes to keep personal data secret, to safeguard it and to adopt all necessary measures to prevent its alteration, loss and unauthorised processing or access, in accordance with the new European regulations on personal data protection. The legislation applicable to the collection and processing of personal data is as follows:

Organic Law 15/1999, of 13 December, on the Protection of Personal Data (LOPD).
Royal Decree 1720/2007, of 21 December, approving the Regulation implementing Organic Law 15/1999, of 13 December, on the Protection of Personal Data.
Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

In addition, any information of any kind exchanged between the parties, any information they agree is of such a nature, or any information that simply concerns the content of such information, will also be considered confidential. Viewing data over the Internet will not entail direct access to it, unless its owner expressly consents on each occasion. The company will not be responsible for any information leaks resulting from poor management of information by the user.

We recommend that the user does not give any third party their identification, password or reference numbers that the company may provide. Likewise, to ensure that professional secrecy between the company and the user is preserved in all communications, the user must not disclose confidential information to third parties.

Our files are registered in the General Register of the Spanish Data Protection Agency (Agencia Española de Protección de Datos) under the aforementioned legislation, with the corresponding security measures.

8 — Data integrity

The company complies with current legislation on personal data protection, user privacy and the secrecy and security of personal data, in accordance with the applicable data protection legislation, specifically Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, adopting the technical and organisational measures necessary to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data provided, taking into account the state of technology, the nature of the data and the risks to which it is exposed, whether from human action or from the physical or natural environment, and it will only record personal data in files that meet the conditions set out in the aforementioned Regulation with regard to their integrity and security and those of the processing centres, premises, equipment, systems and programs.

Likewise, the company guarantees the user compliance with the duty of professional secrecy regarding the user’s personal data and the duty to safeguard it. The user may access the Website’s Privacy Policy at any time, and may configure their profile to ensure their privacy.

9 — Availability of data

The availability of data on the internet may be limited by many external factors which cannot be controlled or foreseen; the company will not be liable for any damage or loss these may cause when attempting to provide the services by means other than the internet.

The company will maintain the highest security standards to ensure its confidentiality, integrity and availability.

Your cart is empty

All coffees