In accordance with applicable legislation, Josper S.A.U. (hereinafter, the website) undertakes to adopt the necessary technical and organizational measures appropriate to the level of security required according to the risk of the data collected.
Laws Included in This Privacy Policy
This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the Internet. Specifically, it complies with the following legislation:
- Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
- Royal Decree 1720/2007, of December 21, approving the regulation for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
- Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
The data controller for the personal data collected on jospergrill.com is: Josper S.A.U., with tax ID number: A08277535 (hereinafter, the Data Controller). Contact details:
- Address: c/ Gutenberg, 11 – PINEDA DE MAR (08397) – Spain
- Phone: +34 937671516
- Email: josper@jospergrill.com
Data Protection Officer (DPO)
The Data Protection Officer (DPO) is responsible for ensuring compliance with the data protection regulations applicable to Josper S.A.U. Users may contact the DPO designated by the Data Controller at the following email: josper@jospergrill.com.
Registration of Personal Data
In compliance with the GDPR and the LOPD-GDD, users are informed that personal data collected via forms on jospergrill.com will be incorporated into and processed in files owned by Josper S.A.U. in order to facilitate, expedite, and fulfill the commitments between the website and the user or maintain the relationship established in the forms they complete, or to respond to a request or inquiry.
Furthermore, as per the GDPR and LOPD-GDD, unless the exception in article 30.5 of the GDPR applies, a record of processing activities is maintained that specifies the processing activities carried out and other circumstances established in the GDPR.
Principles Applicable to the Processing of Personal Data
Processing of user data shall be subject to the following principles under Article 5 of the GDPR and Articles 4 and following of the Organic Law 3/2018:
- Lawfulness, fairness, and transparency: User consent is required after clear and full information about the purposes of data collection.
- Purpose limitation: Data collected for specific, explicit, and legitimate purposes.
- Data minimization: Only data strictly necessary for the purposes of processing will be collected.
- Accuracy: Data must be accurate and kept up to date.
- Storage limitation: Data will only be kept for as long as necessary for the purposes of processing.
- Integrity and confidentiality: Data will be processed securely and confidentially.
- Accountability: The Data Controller will ensure compliance with the above principles.
Categories of Personal Data
Only identifying personal data is collected on jospergrill.com. No special categories of personal data, as defined in Article 9 of the GDPR, are processed.
Legal Basis for Data Processing
The legal basis for data processing is consent. Josper S.A.U. undertakes to obtain explicit and verifiable consent from the user for one or more specific purposes.
Users may withdraw consent at any time. Withdrawal of consent will not affect the use of the website unless otherwise stated.
Where users are required to provide personal data via forms for inquiries or requests related to the website’s content, it will be clearly indicated if the data fields are mandatory.
Purpose of Data Processing
Personal data is collected and managed by Josper S.A.U. to facilitate, streamline, and fulfill the commitments established between the website and the user or maintain the relationship established in the forms or respond to requests or inquiries.
Data may also be used for commercial purposes, personalization, operation, statistics, and activities related to Josper S.A.U.’s business goals, including data storage and marketing research to tailor the website’s content and improve functionality and user experience.
Users will be informed of the specific purposes of data processing when the data is collected.
Data Retention Periods
Personal data will be retained for the minimum time necessary to achieve the purposes of processing and, in any case, for no more than 12 months, unless the user requests deletion sooner.
Users will be informed at the time of collection of the expected retention period or the criteria used to determine it.
Recipients of Personal Data
Personal data may be shared with the following recipients or categories of recipients: labor and tax consultancies, and other partner companies or entities with which Josper S.A.U. has a confidentiality agreement.
If data is to be transferred to a third country or international organization, users will be informed of the destination and the existence or absence of an adequacy decision by the European Commission.
Minors’ Personal Data
In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only individuals over 14 years old may give valid consent to the processing of their data. For children under 14, parental or guardian consent is required.
Data Confidentiality and Security
Josper S.A.U. commits to implementing technical and organizational security measures appropriate to the risk level to ensure the protection of personal data and prevent accidental or unlawful destruction, loss, alteration, unauthorized access, or disclosure.
However, since internet security cannot be guaranteed, the Data Controller will notify users without undue delay in case of a personal data breach that may pose a high risk to their rights and freedoms, in accordance with Article 4 of the GDPR.
Data will be treated confidentially by the Data Controller, who will ensure that confidentiality is maintained by employees, partners, or any other entity with access to the information.
User Rights
Users may exercise the following rights as recognized by the GDPR and Organic Law 3/2018:
- Right of access: To know whether Josper S.A.U. processes their personal data and to access such data.
- Right to rectification: To correct inaccurate or incomplete personal data.
- Right to erasure: To delete personal data when no longer necessary, consent is withdrawn, data is unlawfully processed, etc.
- Right to restriction of processing: To restrict processing under specific conditions (e.g., accuracy is contested).
- Right to data portability: To receive their personal data in a structured, commonly used, machine-readable format and transfer it to another controller.
- Right to object: To oppose data processing.
- Right not to be subject to automated decisions, including profiling, unless legally required.
To exercise these rights, users must send a written request with the subject “GDPR-inquiry,” including:
- Full name and ID copy (or valid legal representation documentation)
- Specific request
- Contact address
- Date and signature
- Supporting documentation
Requests should be sent to the following email: josper@jospergrill.com
Third-Party Website Links
The website may include links to third-party websites not operated by Josper S.A.U. These third parties are responsible for their own data protection policies and practices.
Complaints to the Supervisory Authority
If a user believes their rights have been violated, they may file a complaint with the appropriate supervisory authority, particularly in their country of residence, workplace, or where the alleged violation occurred. In Spain, this is the Spanish Data Protection Agency (AEPD): http://www.agpd.es.
Acceptance and Changes to the Privacy Policy
By using the website, users acknowledge they have read and agree with this Privacy Policy and consent to the processing of their data under the specified terms.
Josper S.A.U. reserves the right to modify this policy at its discretion or in response to legal, case law, or regulatory updates. Users will be explicitly informed of any changes or updates.
This Privacy Policy was last updated on 21/04/2025 to comply with Regulation (EU) 2016/679 and Organic Law 3/2018.
