Privacy Policy
Full Proof Bakery
As of: July 2025
1. Data Controller
The controller responsible for data processing in accordance with the General Data Protection Regulation (GDPR) is:
Full Proof Bakery
C. del Carme, 16A
07003 Palma De Mallorca
Spain
Authorized representative: Jo Semola
Phone: (to follow)
Email: imprint@fullproofbakery.es
2. Collection and Storage of Personal Data When Visiting the Website
When you visit our website, the web server automatically collects the following information:
- IP address
- Date and time of access
- Browser and operating system used
- Referrer URL (previously visited page)
- Pages accessed
This data is not merged with other data sources and is used to ensure the technical operation and security of the website. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).
3. Data Processing in the Online Shop
When you place an order through our online shop, we process the following data:
- Name
- Email address
- Phone number (optional)
- Pickup date
- Order details
- Payment information (if applicable, via third-party providers)
This data is processed for:
- Order processing
- Preparing the goods
- Communication in case of questions
- Fulfilling legal obligations (e.g. tax retention requirements)
Legal basis: Art. 6 para. 1 lit. b and c GDPR.
4. Payment Providers
Payments in the online shop may be processed via external payment services (e.g. Stripe, PayPal). In such cases, payment data is processed directly by the provider.
We only receive a payment confirmation.
Please also refer to the privacy policies of the respective providers.
5. Contacting Us
If you contact us via email or a contact form, we store your data to process the request and for any follow-up questions.
Legal basis: Art. 6 para. 1 lit. a (consent) and/or lit. b GDPR (pre-contractual measures).
6. Cookies
Our website uses only technically necessary cookies required for the functionality of the shop. We do not use tracking or marketing cookies without consent.
7. Hosting
Our website is hosted by an external service provider. The host processes access data as part of a data processing agreement in accordance with Art. 28 GDPR.
The servers are located within the EU (Germany).
8. Storage Duration
We store personal data:
- as long as necessary for the respective purpose
- according to legal retention periods (e.g. up to 10 years under commercial or tax law)
9. Your Rights
Under the GDPR, you have the following rights:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent (Art. 7 para. 3 GDPR)
Please send your request by email to: imprint@fullproofbakery.es
10. Right to Lodge a Complaint
If you believe your data is being processed unlawfully, you have the right to file a complaint with a data protection supervisory authority. For example: Agencia Española de Protección de Datos (AEPD) – www.aepd.es
11. Data Security
Our website uses SSL encryption. We implement appropriate technical and organizational measures to protect your data from manipulation, loss, destruction, or unauthorized access.
12. Changes to This Privacy Policy
We reserve the right to update this privacy policy if necessary. The current version is always available on our website.