Select Page


Identification and details of the data controller

GUADALUPE PARDO LÓPEZwith registered address at Calle Gándara 41 C.P.18818 Boimorto (A Coruña) - Spain, with NIF 78792058S, is responsible for the processing of personal data processed through this website. This clause provides information on the use that the Company will make of your personal data. Likewise, the purpose of this Privacy Policy is to provide information on the rights of both registered and unregistered Users in accordance with the RGPD 2016/679 and Organic Law 3/2018, on Personal Data Protection. If you have any questions regarding the processing of your personal data, please contact the owner at the following address: Calle Gándara 41 C.P.18818 Boimorto (A Coruña) - Spain.

Where it reports

On the following website:

Data treatment

GUADALUPE PARDO LÓPEZ, informs through this website about its privacy policy regarding the processing and protection of personal data of any owner with whom it maintains a relationship that requires the processing of their data. The operations, management and technical procedures that are carried out in an automated or non-automated way and that make possible the collection, storage, modification, transfer and other actions on personal data, are considered personal data processing, and in this case we inform of a joint treatment in those cases necessary for the management of services and/or products contracted to any of the companies indicated above, without prejudice to what is indicated in section 4 of this policy.

Data controller

In compliance with current legislation on Data Protection, we inform you that the personal data that you provide voluntarily by any of our means of collecting information will be incorporated into automated and/or manual processing, being GUADALUPE PARDO LÓPEZ, with whom the contractual relationship is maintained, the party responsible for such processing. The data will not be transferred to third parties except in cases where there is a legal obligation. GUADALUPE PARDO LÓPEZ also declares and guarantees that it maintains the levels of security for the protection of personal data in accordance with current legislation, and that it has established all the technical means at its disposal to prevent the loss, misuse, alteration, unauthorised access, theft of data provided by interested parties and for its employees to observe these requirements, as well as the duty of secrecy regarding the data subject to protection and other confidentiality obligations in force:

What data do we process?

The personal data we process are: Data that you voluntarily choose to provide us with. The data derived from the communications that you maintain with us. The information corresponding to your own browsing in the case of Online Services, (IP address or information derived from cookies or similar devices (you can see our Cookies Policy on the web) Any information that is available in publicly accessible sources, to which we can legitimately access. The data derived from the contractual or pre-contractual relationship you have with us, including your image, always informing you in this case of the possibility of capturing your image. The data that third parties provide us with about you, where there is a legitimate basis for doing so or where we have obtained your consent to do so.the data of third parties that you provide us with, subject to the consent of the third party in question.

How do we treat them?

We always treat your personal data in strict compliance with current legislation. Furthermore, we inform you that we have the appropriate technical and organisational measures in place to guarantee an optimum level of security, thereby ensuring that only authorised persons have access, that we will keep them intact, preventing any intentional or accidental loss, and that we have reinforced our data processing systems and services. The operations, management and technical procedures that we carry out in an automated or non-automated way and that make possible the collection, storage, modification, transfer and other actions on personal data, are considered as personal data processing.

Legitimation of the processing

The basis for the legitimisation of the processing of Personal Data shall be that resulting from the contractual or pre-contractual relationship, the employment relationship or any other relationship required for the processing of data, such as express consent.


Minors under 14 years of age may not use the services available through the website without the prior authorization of their parents, guardians or legal representatives, who will be solely responsible for all acts performed through the website by minors in their care, including the completion of the forms with the personal data of such minors and marking, where appropriate, of the boxes that accompany them. In this regard, and to the extent that GUADALUPE PARDO LÓPEZ has no ability to control whether or not users are minors, we warn that parents and guardians should be those who enable the necessary mechanisms to prevent minors from accessing the Website and / or provide personal data without their supervision, GUADALUPE PARDO LÓPEZ not admitting any responsibility in this regard.

Electronic communications

In the case of receiving communications by these means (e-mails, automated response messages from forms, and other communication systems), we inform you that the messages are addressed exclusively to the addressee and may contain privileged or confidential information. If you are not the intended recipient, you are hereby notified that unauthorised use, disclosure and/or copying is prohibited under current legislation. In accordance with the provisions of Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce, and Directive 2002/58/EC, we inform you that in the event that you do not wish to receive communications and information of a commercial nature through this electronic communication system, please inform us by this same means indicating in the subject line BAJA COMUNICACIONES so that your personal data can be removed from our database. Your request will be processed within 10 days of being sent. In the event that we do not receive an express reply from you, we will understand that you accept and authorise our company to continue sending the aforementioned communications.

How long do we keep your data?

The personal data relating to natural persons that GUADALUPE PARDO LÓPEZ collects by any means will be kept as long as the interested party does not request its deletion. Likewise, they will be kept for as long as the relationship that originated the processing of the data is maintained, respecting in any case the legal periods of conservation. At the end of this period, the personal data will be deleted from all GUADALUPE PARDO LÓPEZ systems.

To which recipients will your data be communicated?

There will be no assignment, transmission or transfer of personal data, except for those already informed, except for a legal obligation. If we are required by the Public Administration or the Autonomous Institutions within the scope of the functions expressly attributed to them by law, your data will be transmitted. If there is an assignment, transmission or transfer of personal data outside the above cases, you will be previously informed so that you can give us your consent if necessary. However, in order to be able to organise ourselves correctly, to have good operations and procedures that guarantee the good management of GUADALUPE PARDO LÓPEZ, it may be necessary to hire the services of consultants, professionals or other service companies to process data under our instructions. This treatment on behalf of third parties is regulated in a contract in writing or some other form that allows accredit its conclusion and content, expressly specifying that the data processor will treat the data according to our instructions and will not apply or use them for purposes other than those stated in the contract, nor communicate them, even for storage, to others.

What are your rights when you provide us with data?

Data protection law confers the following rights on the data subject:
Right to revoke any consent previously given.
Right of access: To know what type of data is being processed and the characteristics of the processing carried out.
Right of rectification: To be able to request the modification of data that are inaccurate or untrue.
Right of portability: To be able to obtain a copy in an interoperable format of the data being processed.
Right to limitation of processing in cases where it is not considered necessary.
Right to erasure: To request the cessation of the processing of the data and their erasure when their retention is no longer necessary.
Right to lodge a complaint with the Spanish Data Protection Agency C/Jorge Juan, 6 28001-Madrid - FAX: 914483680- TELF: 901 100 099- E-mail:
If you would like more information regarding the processing of your data, rectify any data that is inaccurate, oppose and/or limit any processing you consider unnecessary, or request cancellation of the processing when the data is no longer necessary, please write to: Calle Gándara 41 C.P. 15818 Boimorto (A Coruña) - Spain, e-mail:, Tel: 679764148.
This communication must include the following information: Name and surname(s) of the user, the request for the user, the request, the address and the accrediting data.
The exercise of rights must be carried out by the user himself/herself. However, they may be executed by an authorised person as the authorised person's legal representative. In this case, documentation must be provided that accredits this representation of the interested party.

Purpose of data processing

The purposes of the data processing carried out by the Data Controller are as follows: ACTIVITY LOGGING: CONTACTS
PURPOSE: To send commercial information, offers, information about products and/or services to customers and/or potential customers.
LEGAL BASIS: Express consent of the interested party.
DESCRIPTION: Category of personal data (identification data: name and surname, telephone, e-mail).
TRANSFER OF DATA: No data will be transferred to third parties.
PERIOD OF DATA SUPPRESSION: Until the resolution of your request for information.

PURPOSE: Customer data necessary to carry out transactions via e-commerce.
LEGAL BASIS: Legitimation: the existing legal or contractual relationship necessary for the provision of the service and the legitimate interest for the development of commercial relations.
DESCRIPTION: Category of personal data (identification data: name and surname, NIF, postal address, telephone, e-mail; Bank details: for direct debit of payments).
TRANSFER OF DATA: Banks and financial institutions, data processors, tax authorities.
PERIOD OF DATA DELETION: Until such time as the interested party requests the cancellation or deletion of their data and once deleted, they will be kept for a maximum period of 6 years at the disposal of the public administration, judges and courts, for the attention and defence of possible liabilities arising from the processing.