This document details the entity responsible for the processing of personal data, as well as the purposes for which your information is processed, the legal basis supporting such processing, the methods of data collection and the reasons behind it, how the information will be used, your rights as the data subject, and the procedures implemented to safeguard your privacy.

We obtain personal data that you provide when purchasing a service or product through our website, filling out forms, or other means. You will be informed about who is responsible for the processing, the purposes of the processing, who will receive the information, and how you can exercise your rights under current data protection regulations.

The categories of data that we may process are as follows:

• Contact data: may include your name, postal addresses, telephone numbers, and email addresses, as well as details of your social media profiles.
• Purchase data: we collect information related to your purchase or order.
Purchase data may include the following, depending on the type of sale and process stage: payment method details, delivery and billing addresses, delivery status, returns, etc.
• Geolocation data: location data derived from your device’s IP address. This address cannot be used to identify your internet connection or device.
• Data for sending commercial and advertising communications by e-mail, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, that allow commercial communications. These communications will be carried out by MAKEAT and will be related to its products and services, or those of its partners or suppliers with whom it has entered into promotional agreements.
• Social networks: MAKEAT has profiles on Facebook, Instagram, and LinkedIn, where it shares content, offers, and product recommendations. We recommend that you review the privacy policies before using these social networks.

• Company name: THINKERSFOOD, S.L.
• Trade name: MAKEAT
• Domain name: makeat.tech
• NIF: B67192138
• Registered address: Ramón Turró, 5. 08018. Barcelona
• Telephone: 690 85 61 14
• E-mail: gestion@makeat.tech
• Registration data: Registro Mercantil de BARCELONA T 46361, F 208, S 8, H B 517620, I/A 1 (11.04.18)

Personal data will be processed for the following purposes:

Fulfillment of contracts with MAKEAT:
Processing necessary to handle your purchases and provide the services you request.
Purchases, including deliveries, shipments and returns, warranties, suggestions, inquiries, complaints, incidents, disputes, etc.
Payment management for products and services.
Billing and receipt management, issuance of invoices, and documentation related to the purchase.
Fraud prevention during the purchasing process if inconsistencies are detected in contracts under your name.

Legal basis: Contractual relationship. Consent (for stored payment data for future purchases).
Data retention period: the time necessary to manage the contractual relationship between MAKEAT and the user. Stored payment data will be kept until the user requests deletion.

Customer service:

Data necessary to handle user requests will be processed.

Legal basis: User consent (for MAKEAT website forms or other contact methods), legitimate interest (for user inquiries), legal obligation (to address data protection rights exercised by users).
Retention period: the time necessary to address user requests.

Commercial management:
Data necessary for sending communications, commercial offers, and newsletters subscribed to by the user will be processed.

Legal basis: User consent. Legitimate interest (for sending commercial communications to users who have previously had a contractual relationship with MAKEAT).
Personal data will be retained until the user expresses the wish not to receive further communications from MAKEAT. Users may unsubscribe from newsletters at any time.

Quality surveys:
Conducting quality surveys about products or services offered.

Legal basis: Legitimate interest.
Data will be processed for the time necessary to complete the quality surveys.

User personal data may be shared with third-party partner companies such as information service providers, administrative service providers for MAKEAT, advertising and marketing providers, financial services, and security providers. Personal data may also be shared with Public Administrations when required by current legislation.

In certain cases, to ensure proper service delivery, MAKEAT works with technology service providers who may be located outside the European Economic Area, including in countries with data protection levels not equivalent to those of the EEA. However, all international data transfers carried out by the entity are lawful and supported by one of the protection mechanisms established by the GDPR, such as the adoption of appropriate contractual safeguards according to the standard contractual clauses approved by the European Commission.

Users’ personal information is stored only as long as necessary for its intended purpose and according to the applicable legal basis. MAKEAT will retain personal data while there is a contractual and/or commercial relationship with the user, or until the user exercises the right of deletion or restriction of data processing. In such cases, the information will remain blocked and unused, only retained for the exercise or defense of legal claims, or if any judicial, legal, or contractual liability arising from the data processing requires its recovery.

Appropriate technical and organizational measures are employed to safeguard users’ personal information and privacy, which are periodically reviewed. Protection of personal data is ensured through the implementation of physical and technological security controls, including access controls regulating and managing the processing and handling of personal data. MAKEAT also ensures that staff is properly trained to protect user information.

Users may exercise the following rights via e-mail at gestion@makeat.tech:

• Right of access: Users may contact the controller to find out whether their personal data is being processed and, if so, obtain all related information.
• Right of rectification: Users may request that MAKEAT correct inaccurate data or complete incomplete data without undue delay.
• Right of erasure: Users may request that MAKEAT delete their personal data when the conditions set out in the GDPR and LOPDGDD are met.
• Right to object: Users may object to MAKEAT processing their personal data when such processing is based on public interest or legitimate interest.
• Right to restriction: Users may request MAKEAT to restrict the processing of personal data when the conditions set out in the GDPR and LOPDGDD are met.
• Right to data portability: This right aims to strengthen user control over personal data. When processing is automated, the individual will receive their personal data in a structured, commonly used, machine-readable, and interoperable format, and may transmit it to another controller when processing is based on consent or in the performance of a contract.
• Right not to be subject to automated decision-making: This right ensures that the user is not subject to a decision based solely on the processing of data, including profiling, that may have legal effects or similarly significant impacts.
• Right to lodge a complaint with the Data Protection Authority: If the user has evidence or indications that their data protection rights have been violated, they may file a complaint through the electronic headquarters of the Spanish Data Protection Agency.

For minors under fourteen years of age, parental or guardian consent is required for the processing of their personal data.
MAKEAT is not responsible for the actions of minors. Parents or legal guardians are responsible for the actions of minors on the website.

MAKEAT reserves the right to modify this privacy policy at any time, based on potential changes to the website. Likewise, if the changes are substantial, MAKEAT will inform users of such modifications.