Privacy Policy
Last updated: August 2026
Data Controller
Owner: Lorena Analia Bo de la Colina, trading under the business name Namelaka. Spanish tax ID (NIF): 38886049H. Address: Carrer de Cuba, 96, 08302 Mataró (Barcelona), Spain. Activity: artisan pastry shop. Email: info@namelakamataro.com. Phone: +34 930 05 81 61. WhatsApp: +34 662 126 855. No Data Protection Officer has been appointed, as none of the circumstances requiring one apply.
What Data We Process
Only what you provide to us. Through the contact form and the order forms on this site: your name, your phone number, your email address where you supply it, and the content of your message or the details of your order. If you subscribe to our newsletter: your email address. No bank card details are collected, because this site does not process payments.
How Your Data Reaches Us
This is worth knowing: the forms on this site do not send information to a server of our own. Instead they open a WhatsApp conversation with the message already drafted, and you decide whether to send it. Your data therefore travels through WhatsApp and remains in that conversation. The only person with access to it is the owner of the business.
Purposes and Legal Basis
To answer your enquiries and handle the orders you request, including the communication needed to arrange them: the basis is pre-contractual measures and performance of the order (Art. 6.1.b GDPR). To send you our newsletter: only if you subscribe and give your consent, which you may withdraw at any time (Art. 6.1.a GDPR). To measure use of the site and display advertising through cookies: only with your prior consent, requested through the cookie notice (Art. 6.1.a GDPR and Art. 22.2 LSSI). To comply with applicable legal, accounting and tax obligations (Art. 6.1.c GDPR).
Recipients and Processors
We do not sell or transfer your data. The following providers are involved, each limited to its own function: WhatsApp Ireland Limited and Meta Platforms, as the channel through which enquiries and orders are received; Cloudflare, Inc., as the hosting and infrastructure provider for the site; Google Ireland Limited, through Google Analytics, Google Ads and the map embedded on the contact page, always subject to your prior consent except for the map when you choose to load it; and the email provider used for the newsletter, if you subscribe. Your data may also be disclosed where there is a legal obligation to do so.
International Transfers
Some of the providers listed belong to groups headquartered in the United States. In those cases the transfer relies on the safeguards provided for under European law, whether adherence to the EU-US Data Privacy Framework or the signing of standard contractual clauses approved by the European Commission. You may request further information at info@namelakamataro.com.
Retention Periods
Enquiries are kept for as long as needed to deal with them and, afterwards, for as long as liability may arise from the relationship; after that they are deleted. Data linked to invoiced orders is kept for the periods required by tax and accounting obligations. Newsletter subscription data is kept until you unsubscribe or request its deletion. Data collected through cookies is kept for the period stated in the Cookie Policy.
Your Rights
You may exercise your rights of access, rectification, erasure, objection, portability and restriction of processing, and withdraw any consent you have given at any time, by writing to info@namelakamataro.com or to the postal address given above. Tell us which right you wish to exercise; we may ask you to prove your identity. We will reply within the period set by law. If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Automated Decision-Making
We do not make automated decisions that produce legal effects concerning you or similarly significantly affect you, nor do we carry out profiling for that purpose.
Minors
This site is not directed at minors and does not knowingly collect their data. Should it come to light that information from a minor has been collected in error, it will be deleted as soon as possible.
Changes to This Policy
This policy may be updated to reflect changes in the services used or in applicable law. The date shown at the top indicates the most recent revision. We recommend checking it periodically.