Privacy policy

Last updated: October 2026

This policy explains what personal data we process when you contact Exquisitem or visit this website, what we use it for and what rights you have. If you have any questions, write to us at sales@exquisitem.com.

Data controller

MIRÓ PASTISSERIA BOMBONERIA, SL (Exquisitem)
Tax ID (NIF): B63970370
Address: C/ Esplugues, nau 1, P.I. El Vapor, 08183 Castellterçol (Barcelona), Spain
Telephone: +34 938 668 402
Email: sales@exquisitem.com

What data we process

This website has no forms and no customer area. We only process the data you give us directly when you write to us or call us: your name, company and position, email address, telephone number and the content of your enquiry. If you become a customer, we also process the data needed to prepare, deliver and invoice your orders.

In addition, the server hosting the website automatically logs technical data about each visit (IP address, date and time, page requested and browser), which is needed for the service to work and to keep it secure.

Only if you accept analytics cookies, Google Analytics collects data about your browsing: the pages you visit, how long you stay on them, the page you came from, your type of device and browser and your approximate location (country and city, derived from your IP address, which Google Analytics does not store). This data is linked to a random browser identifier, not to your name or email address, and we look at it in aggregate. We explain this in detail in our Cookie policy.

You are not obliged to give us any data, but without your contact details we will not be able to answer your enquiry.

What we use it for and on what legal basis

  • Answering enquiries and preparing quotes. Legal basis: taking pre-contractual steps at your request (Art. 6(1)(b) GDPR) and, for general enquiries, our legitimate interest in answering them (Art. 6(1)(f)).
  • Managing our business relationship with customers: orders, deliveries, invoicing and after-sales service. Legal basis: performance of the contract (Art. 6(1)(b)) and compliance with our legal, tax and accounting obligations (Art. 6(1)(c)).
  • Sending you personalised commercial information about our products, such as new catalogue items or seasonal proposals. Legal basis: if you are a customer, our legitimate interest in telling you about products similar to those you have already bought from us (Art. 21.2 of Spanish Law 34/2002, LSSI); in all other cases, your consent. We do not send bulk mailings or write to addresses that have not contacted us first. You can ask us to stop writing to you at any time by replying to any of our emails or writing to sales@exquisitem.com.
  • Keeping the website secure and working properly through the server logs. Legal basis: our legitimate interest (Art. 6(1)(f)).
  • Understanding how the website is used and improving its content, using aggregate statistics from Google Analytics. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI), which you can withdraw at any time from the “Cookie settings” link in the footer. If you do not give it or you withdraw it, we do not collect this data and you can carry on browsing as normal.

When we process the contact details of people who work for a customer or supplier company, we do so under Article 19 of Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and only to maintain the professional relationship.

We do not make automated decisions or create profiles based on your data.

Who we share your data with

We do not sell or transfer your data to third parties. Only the following have access to it:

  • Dinahosting, SL, which provides our web hosting and email services as a data processor, under the contract required by Article 28 GDPR.
  • Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which provides the Google Analytics service as a data processor under its data processing terms, and only if you have accepted analytics cookies.
  • The transport companies that deliver our orders, which receive only the data needed to do so (name, delivery address and telephone number).
  • The competent public authorities, where there is a legal obligation.

International transfers. Google Analytics data may be processed by Google LLC in the United States. This transfer is covered by the European Commission adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, to which Google LLC is certified. All other data is processed within the European Union.

How long we keep it

  • Enquiries that do not lead to a business relationship: up to one year from the last communication.
  • Customer data: for as long as the business relationship lasts and, afterwards, for the legally required retention periods (six years for commercial records under Article 30 of the Spanish Commercial Code, and those set by tax legislation).
  • Commercial information: until you ask us to stop sending it.
  • Server logs: for the limited time required to keep the service secure.
  • Google Analytics data: 2 months, the shortest period the tool allows; it is then automatically deleted from detailed reports. Analytics cookies last for the period stated in the Cookie policy.

Once these periods have passed, the data is securely deleted.

Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given us, without affecting the lawfulness of processing carried out before its withdrawal.

To do so, write to us at sales@exquisitem.com or by post to the address above, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you to verify it. We will reply within one month.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, including an encrypted connection (HTTPS) across the whole website.

Changes to this policy

We may update this policy when the way we process data or the applicable law changes. The date of the last update appears at the top of this page.

Choose which cookies you want to allow. You can change your mind at any time from the “Cookie settings” link in the footer.

Technical (necessary)

Always active

They make the website work and remember your cookie choice. They cannot be switched off because they do not require consent.

They tell us, in aggregate, how many people visit the website, which pages they view and on what type of device, so we can improve its content. They are not used for advertising or to identify you.

Cookie policy