This is a translation provided for convenience. The Spanish version is the legally binding one and prevails in case of any discrepancy.
1. Data controller
- Controller: Olsen Miga S.L
- Tax ID (CIF): B09931643
- Registered address: Paseo Castellana 143, Piso 10, 28046 Madrid
- Email: hola@olsensandwich.es
2. Data Protection Officer
You can contact our DPO at dpo@olsensandwich.es.
3. Purpose of processing
We process the information you give us fairly, lawfully and transparently:
- Customers: to manage your orders —payment, preparation and delivery— and your account, and to send you marketing only if you asked for it.
- Migueros: to keep your stamp card and its rewards, also at the till in our shops, where we identify you by your mobile number.
- Franchise and catering enquiries: to reply to you.
- Candidates: to manage recruitment processes and speculative applications.
- Suppliers: administrative, accounting and tax management.
4. Retention period
A maximum of 5 years from the last confirmation of interest, or for as long as there is a legal obligation to keep the data.
The technical payment and delivery notifications we receive from Stripe and Jelp are deleted after 90 days.
5. Legal basis
- Your express consent.
- Compliance with legal obligations.
- Our legitimate interest, provided your rights do not override it.
6. Recipients
We do not sell your data. We disclose it to third parties when the law requires it and, to provide the service, to these providers, who process it on our behalf under a contract in accordance with Article 28 of the GDPR:
- Stripe: payment for orders. Your card details are handled by Stripe; we never see or store them.
- LastApp: the till system in our shops. It receives the orders prepared there and, if you are a miguero, your stamp card.
- SEUR: chilled delivery across the peninsula. It receives your name, address and phone number.
- Jelp: home delivery in Madrid. It receives your name, address and phone number.
- maspick: management of our kitchen. It receives the orders to be produced.
- Mapbox: the address search and the maps. It receives the address you type.
- Google: sending our emails and, only if you accept it in the cookie settings, measuring visits with Google Analytics.
- Railway: hosting of the website and its database.
Some of these providers process data outside the European Economic Area, mainly in the United States. In those cases the transfer is made with the safeguards required by the GDPR, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
7. Your rights
You can exercise them at any time by writing to hola@olsensandwich.es with a copy of your ID document:
- Access to your personal data.
- Rectification or erasure.
- Restriction of processing.
- Objection to processing.
- Portability of your data.
- Withdrawal of consent.
- A complaint to the Spanish Data Protection Agency (AEPD).
8. Security
We take the security measures required by data protection law. We are not responsible for any alterations caused by third parties to your computer systems.
9. Cookies
We use cookies. Please see our cookie policy for more information.
10. Marketing communications
We only send communications you have asked for. You can unsubscribe at any time from the email itself.