Privacy Policy



Responsible SAN SARU, S.L.
Purpose We use your data, among other purposes, to manage the contracting of products and services, answer your queries, as well as, if necessary, to send you personalized communications.
Legitimation The legitimacy for the processing of your data lies mainly in the provision of your consent and the proper development of the contractual relationship with SAN SARU, S.L.
Recipients No data will be transferred to third parties, unless legally required.
Rights You have the right to access, rectify, delete, oppose, limit and request the portability of your personal data.
Additional information Additional detailed information about how we handle your personal data and the rights you have can be found in the full text of the Privacy Policy below, as well as the Cookies Policy.



SAN SARU, S.L. (hereinafter, "the Company") undertakes, as the Controller of the processing of your personal data, to adopt at all times the necessary technical and organizational measures in order to ensure that the processing of your data is in accordance with the provisions of Regulation (EU) 2016/679 (hereinafter, "GDPR") and Organic Law 3/2018. 

The Company treats your personal data in a lawful and fair manner, ensuring that they receive adequate protection and are not subject to misuse. Likewise, the Company's will is to be transparent in the field of the management of the personal data of its customers and users, making available to the former all the necessary information about the collection and processing of their data. 

The purpose of the Privacy Policy is to inform you about who will process your personal data, why we collect this data, how long we will keep the collected data, to whom we will transfer it and what are your rights in this area. 

By providing us with your personal information and using our Website, we understand that you have read and understood the information on personal data protection set out in this Privacy Policy and in the Cookie Policy.



The Responsible for the processing of your personal data is:

 Company name: SAN SARU, S.L.

N.I.F: B-66821919

Phone: 938536044

Mailing Address: Alcalde Josep Abril 23, 1º 1ª, 08302, Mataró (Barcelona)

E-mail address:



Based on the products, services or functionalities requested by customers and users, the Company will need to deal with some data or others, which, in general, will be the following:

  • Identification and contact data: name, surname, contact telephone number, date of birth, postal address, e-mail address and ID card number, among others;
  • Data associated with the execution of a sales or service contract with the Company: identification and contact data, payment data, information about purchases, orders and returns, among others;
  • Automatically collected data: when interacting with our Website, certain navigation data is automatically collected. This information is collected through cookies, whose regulation is detailed in the Company's Cookie Policy;

The information we may automatically collect relates to your use of our Website and the devices you use to access and interact with our Website. Some of the data we collect are: the IP address of the device you are using, the browser software you are using, your operating system, the date and time you access the Website, the Internet address of the website through which you accessed our Website, geolocation data, information about the pages visited by the user within the Website and the time spent browsing each page;

  • Data about your likes and personal preferences.

The personal data collected is processed for the following purposes:

  • Manage the procurement of products and services offered by the Company: to be able to provide you with the product or service you request, to be able to operate our business internally (in terms of accounting, auditing and other internal functions) and to manage payment for products and services;
  • Quality analysis: to conduct customer and user satisfaction surveys regarding the quality of products and services offered by the Company;
  • Customer and user service: channeling and attending to their requests, queries and complaints for their management and resolution;
  • Advertising and marketing actions: mainly includes personalizing the services we offer and making recommendations based on interaction with the Company through its website (e.g., based on purchase and browsing history). In case you give us your consent, your personal data will be used to periodically send you information about new products that may be of interest to you and to offer you promotions;
  • Improve the user's experience on the Website: perform analytical and statistical studies on how users browse the Company's Website.


The legal basis that allows us to process your personal data depends on the purpose for which we process it, as detailed below:

  • Manage the contracting of products and services offered by the Company. The processing of your data is necessary for the correct conclusion and proper development of the contractual relationship with the Company. The legitimacy of the processing of your data also lies in your own consent (when deciding to contract our products or services) and in the legitimate interest of the Company to carry out the relevant checks in order to identify and prevent possible fraud, as well as for security reasons;
  • Quality analysis. The legitimacy of the processing of your data lies in the legitimate interest of the Company to analyze the degree of satisfaction of customers and users, in order to be able to offer them products and services of the best quality;  
  • Attention to users and customers. The legitimacy of the processing of your data lies in the legitimate interest of the Company to respond to your requests and complaints in order to adequately address and resolve your requests. In the case of claims or incidents related to the product or service purchased, the processing of your data is necessary for the Company to fulfill its contractual obligations. In case of queries related to the exercise of your legally recognized rights regarding data protection, the Company requires the processing of your data in order to comply with the legal obligations that bind it in this area;
  • Advertising and marketing actions. The legal basis for processing your data for advertising and marketing purposes is the consent you give us to send commercial communications (which may be personalized) and the legitimate interest of the Company to send you communications similar to those services or products contracted in the past or for which you have shown interest.

Remember that, if you have given us your consent to process your data for any purpose, you have the right to withdraw it at any time.

  • Improve the user experience on the Website. The legitimacy of the processing of your data lies in the legitimate interest of the Company to know the degree of user satisfaction and take appropriate corrective measures to improve the quality of our services.


Your personal data will be duly stored for the time necessary to use them for the purpose for which they were collected. 

Personal data will be stored, using appropriate security measures to ensure their accuracy and integrity, for as long as their processing is necessary for the purpose for which they were collected or as long as you do not exercise your right to erasure or restriction of processing.

In such cases, we will keep your personal information blocked, without any processing, for the periods provided by law to meet any liabilities and to be able to prove compliance with our legal and contractual obligations. Subsequently, the Company will definitively delete your personal data.



In some cases, in order to fulfill the purposes set forth in this Privacy Policy, the Company needs to share your personal data with other Group companies and with the following third parties:

  • financial institutions;
  • technology and analytical service providers;
  • suppliers and partners of logistics, transportation and delivery services, and/or establishments collaborating with them;
  • providers of services related to customer service;
  • providers and collaborators of services related to marketing and advertising;
  • authorities and public bodies in order to: comply with a court order, subpoena or investigation, or for any other reason required by law; deal with possible liabilities arising from the processing of personal data; prevent illegal uses of our Website or violations of our Website policies; deal with third-party claims; contribute to the prevention and investigation of alleged fraud, among others.

These third-party collaborators only have access to the personal information necessary to perform the corresponding services and are required not to use it for any purpose other than the one requested. The Company also requires the same level of protection and confidentiality from these third parties that we apply in the management of your personal information. They are also subject to the obligations set forth in their respective data processing agreements with the Company. 

Certain third-party partners are located in countries or territories outside the European Union. In these cases, the Company transfers your data to them in accordance with the guarantees legally required for this type of situation:

  • we verify whether the third party is located in a country or territory that has been declared by the European Commission to have an adequate level of protection;
  • failing this, we verify whether any of the following safeguards are met:
    • conclusion of a contract containing standard data protection clauses approved by the European Commission;
    • implementation of binding corporate rules approved by the competent supervisory authority;
    • the adherence of the third party to a Code of Conduct or certification mechanism;
  • In the absence of the above, in order to carry out the transfer of your data, we ask for your express consent, or we request the express authorization of the competent supervisory authority.


You are entitled to exercise the following rights in relation to the processing of your personal data:

  • Access (art. 15 RGPD): allows you to obtain certain information on the purposes for which your data are being processed, the recipients to whom they are communicated or the categories of data being processed, among others.
  • Rectification (art. 16 RGPD): allows you to contact the Data Controller to modify any inaccurate personal data and to complete any incomplete data.
  • Deletion (art. 17 RGPD): allows you to request the deletion, without undue delay, of your personal data being processed by the Controller, in the following cases:
    • the Data Controller no longer needs the data for the purposes for which they were originally collected;
    • the processing of the data is based on your consent, and you decide to withdraw it, provided that there are no other processing operations based on a legitimate basis other than consent;
    • you object to the processing of your data and the interests of the Controller do not prevail, provided that there are no other processing operations that do not admit of objection;
    • the personal data has been processed unlawfully;
    • the personal data must be deleted due to legal obligation;
    • the data has been obtained within the framework of the offer of information society services.
  • Limitation of processing (art. 18 RGPD): allows you to obtain from the Data Controller the limitation of the processing of your data when one of the following conditions is met:
    • when you contest the accuracy of your personal data, for a period of time that allows the Controller to verify the accuracy of the data;
    • the processing is unlawful, and you object to the deletion of your personal data and request instead the limitation of their use;
    • the Responsible no longer needs your personal data for the purposes of the processing, but you need them for the formulation, exercise or defense of claims;
    • you have objected to the processing, while it is being verified whether the legitimate reasons of the Controller prevail over yours.
  • Data portability (art. 20 RGPD): allows you to receive your personal data or have them sent to a third party, in a structured, commonly used and machine-readable format, provided that the following conditions are met cumulatively:
    • when the Data Controller's legitimation for the processing of your data is the provision of your consent or the execution of a contractual relationship; 
    • the data processing is carried out by automated means.
  • Opposition (art. 21 RGPD): allows you to oppose the processing of your data by the Responsible. However, you can only exercise this right against processing operations that are based on a legitimate public interest or a legitimate interest of the Responsible. 
  • Opposition to automated processing (art. 22 RGPD): allows you not to be subject to decisions based solely on automated processing of your data, including profiling, which produce legal effects on you or significantly affect you similarly.



In order to exercise your data protection rights, the Company makes the following means available to you:

  • By written and signed request addressed to the Company Alcalde Josep Abril 23, 1º 1ª, 08302, Mataró (Barcelona), indicating the reason for your request and the right you wish to exercise, and attaching a photocopy of the ID card or equivalent document proving the identity of the applicant;
  • Sending the completed and signed form, enclosing a photocopy of the ID card or equivalent document proving the identity of the applicant, to the following email address:

The forms for exercising the various rights are provided below:

Likewise, you have the right to address any claim derived from the processing of your personal data to the corresponding data protection supervisory authority: the Spanish Data Protection Agency. (Claim Submision Form).