Privacy Policy
1. Data controller
The controller responsible for the processing of personal data collected through nopales.eu is:
ASOCIACIÓN AGROALIMENTARIA DELPUEBLO
Tax ID: G22694269
Registered address: Avda. Santa Ana, 12, 45643 Garciotum, Toledo, Spain
Email: hello@nopales.eu
2. Personal data we may collect
We may collect personal data that you provide directly when placing an order, contacting us or using forms on the website, including:
- First and last name.
- Billing and delivery address.
- Postal code, city and country.
- Email address.
- Telephone number.
- Information related to orders placed.
- Information necessary to process payments, although complete card details are handled by external payment providers.
Certain technical information may also be collected automatically, such as IP address, browser type, device information, pages visited, access date and time, and cookies used.
3. Purposes of processing
We process personal data in order to:
- Manage and prepare orders.
- Process payments and invoicing.
- Manage shipments and provide carriers with the information required for delivery.
- Respond to enquiries, incidents, returns or complaints.
- Comply with legal, tax and accounting obligations.
- Prevent fraud, abuse and misuse of the website.
- Improve the operation and security of the website.
- Send commercial communications only where there is a valid legal basis, such as your consent.
4. Legal basis
The processing of your data may be based on:
- The performance of a contract when you make a purchase.
- Compliance with legal obligations.
- Our legitimate interest in maintaining the security and proper operation of the website.
- Your consent where required, for example for certain marketing communications or non-essential cookies.
5. Data retention
We will retain personal data for as long as necessary to fulfil the purposes for which it was collected and, afterwards, for the periods required by applicable tax, accounting, commercial or data protection legislation.
6. Recipients and service providers
We may disclose or provide access to certain personal data to service providers that are necessary to operate our business, including:
- Transport and courier companies.
- Payment service providers.
- Website hosting and ecommerce service providers.
- Technology, administrative or accounting service providers.
These third parties should only process personal data for the purposes necessary to provide their services and in accordance with applicable data protection legislation.
7. International data transfers
Some technology or payment service providers may operate from countries outside the European Economic Area.
Where international transfers of personal data take place, they will be carried out using the safeguards required under applicable data protection legislation.
8. Your rights
You may exercise the rights granted to you under applicable data protection legislation, including:
- Right of access.
- Right to rectification.
- Right to erasure.
- Right to restriction of processing.
- Right to data portability.
- Right to object.
- Right to withdraw consent where processing is based on consent.
To exercise these rights, you can contact us at:
We may request additional information in order to verify your identity before responding to your request.
You also have the right to lodge a complaint with the competent supervisory authority. In Spain, the relevant authority is the Agencia Española de Protección de Datos.
9. Cookies
nopales.eu may use cookies and similar technologies that are necessary for the operation of the website, as well as analytics, preference or marketing cookies where applicable.
Non-essential cookies will be subject to the consent options available on the website.
10. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse or disclosure.
However, no data transmission or storage system over the Internet can guarantee absolute security.
11. Links to external websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices of external websites. We recommend reviewing their own privacy policies.
12. Changes to this Privacy Policy
We may update this Privacy Policy when necessary to reflect legal, technical or operational changes.
The current version will always be the version published on nopales.eu.
13. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, please contact us at: