Legal information

Privacy policy

What personal data we use, why, and how you stay in control.

Last updated: 2 October 2026

Who is responsible

The controller of the data you give us through this website is:

Owner: COMATIMO SCCL
Tax ID (NIF): F25669268
Address: C/ Afores s/n, 25213 Pavia (Lleida), Spain
Email: comercial@lanostramel.com
Phone: +34 621 292 359
Website: www.lanostramel.com
Trade name: La Nostra Mel

We apply Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on data protection (LOPDGDD).

What we use your data for

We only ask for the data we need for each purpose:

Purpose	Data	Legal basis	How long
Managing your shop orders, payment, delivery and invoicing	Name, address, phone, email, products bought	Sales contract	As long as tax and commercial law requires (up to 6 years)
Managing bookings for apitourism visits and other activities	Name, email, phone, number of people	Contract (your booking)	Up to 1 year after the visit, plus whatever the law requires for invoices
Consent forms for visits and the maze	Name, ID number if needed, age of minors, signature	Consent and legitimate interest (activity safety)	While the consent is valid and up to 1 year afterwards
Answering your enquiries (email, phone, WhatsApp, forms)	Name, contact details, message	Consent	While the conversation lasts and up to 1 year afterwards
Sending you news and offers (newsletter, waiting lists)	Email address	Consent (you can withdraw it at any time)	Until you unsubscribe
Measuring website visits and showing advertising	Browsing data, cookies	Consent (cookie banner)	See the cookie policy

We do not make automated decisions or build profiles with legal effects on you.

Who we share it with

We never sell or hand over your data. Some providers help us run the business and only use it to provide their service to us:

Payments: Redsys and your bank (shop) and Stripe (apitourism bookings). We never see your card details.
Delivery: the courier that delivers your order, only with the data needed to get it to you.
Newsletter: MailerLite.
Analytics and advertising: Google and Meta, only if you accept them in the cookie banner.
Web hosting and email: our technical provider.
Accountants and public authorities, when required by law (for example, the tax office).

Some of these providers (Google, Meta, Stripe) may process data outside the European Union. They do so with the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses.

Minors

If you are under 14, you need permission from a parent or guardian to give us your data. For family activities, children's details are provided by the responsible adult.

Your rights

At any time you can ask us to access, correct or delete your data, restrict or object to its use, or take it with you (portability), and withdraw any consent you have given.

Just email comercial@lanostramel.com saying what you need. We will reply within one month at most. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Security

The website uses an encrypted connection (HTTPS), payments are made on the banks' secure platforms, and only the people at La Nostra Mel who need your data for their work can access it.