Privacy Policy

Last updated: 31 May 2026

1. Data controller

  • Owner: Pan y Pepinillos Café
  • Tax ID (NIF/CIF): B56695588
  • Address: Calle el Escorial 2, 28004 Madrid, Spain
  • Contact email: panypepinillo@gmail.com

2. What data we collect

  • Data you give us when joining our newsletter: your name and email address.
  • Data from your WhatsApp conversation: your phone number and the content of the messages you send us.

3. Why we use it

  • To send you our newsletter with news, special products and café events.
  • To answer the questions you send us through WhatsApp.

4. Legal basis

  • For the newsletter: your consent, which you give explicitly when you accept in the chat. You can withdraw it at any time.
  • To handle your questions: your own request when you message us.

5. How long we keep it

We keep your data for as long as you stay subscribed to the newsletter. If you unsubscribe or ask us to delete it, we will erase it without undue delay, unless the law requires us to keep it for a set period.

6. Who we share your data with

To provide the service we rely on providers acting as data processors:

  • ManyChat, Inc. and WhatsApp (Meta Platforms, Inc.), to manage messaging and chat automation.
  • Square Marketing (Block, Inc.), to send the newsletter.

Some of these providers are located outside the European Union (for example, in the United States). In those cases, international transfers are made with the safeguards required by the GDPR, such as the European Commission’s Standard Contractual Clauses or adherence to the EU-U.S. Data Privacy Framework.

We do not sell or share your data with third parties for purposes other than those described here.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw your consent. To do so, email us at panypepinillo@gmail.com stating the right you wish to exercise.

If you believe we have not handled your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.

8. Changes to this policy

We may update this policy to reflect legal or operational changes. The current version will always be the one published on this page.

Scroll to Top