SUME Hand Roll Bar
Privacy Policy
Last updated: July 2026
In the event of any discrepancy between versions, the Spanish version shall prevail.
In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPD-GDD), FALCO LIVING, S.L. informs you about the processing of your personal data.
Data Controller
Legal Name: FALCO LIVING, S.L.
Tax ID: B44567014
Address: Urb. Alcaidesa, Núm. 2, Planta 1, Puerta 106, 11360 San Roque (Cádiz)
Email: info@sumehrb.com
1. Data We Collect
We collect only the personal data necessary to provide the requested service:
- Full name
- Phone number
- Email address
- Delivery address (only for home delivery orders)
- Payment transaction data, managed securely by Stripe and not stored by FALCO LIVING, S.L.
2. Purposes, Legal Basis and Retention Periods
| Purpose | Legal basis | Retention |
|---|---|---|
| Order management and fulfilment | Art. 6.1.b GDPR - contract performance | 5 years (General Tax Law) |
| Payment processing via Stripe | Art. 6.1.b GDPR - contract performance | 5 years (financial records) |
| Order confirmation by email | Art. 6.1.b GDPR - contract performance | Duration of commercial relationship |
| Reservation management | Art. 6.1.b GDPR - contract performance | Duration of service + 1 year |
| Customer service and complaints | Art. 6.1.b and 6.1.c GDPR | Until resolved + 2 years |
| Commercial communications to existing customers | Art. 6.1.f GDPR - legitimate interest | Until opt-out |
| Compliance with legal obligations | Art. 6.1.c GDPR - legal obligation | As required by law |
3. Data Processors
FALCO LIVING, S.L. does not share personal data with third parties except where required by law. The following service providers act as data processors under Article 28 of the GDPR:
Stripe Payments Europe, Limited
The Stripe Building, 1 Grand Canal Street Lower, Dublin 2, Ireland
Purpose: Secure card payment processing
Country: Ireland (EEA)
Vercel Inc.
340 Pine Street, Suite 701, San Francisco, CA 94104, USA
Purpose: Web application hosting and deployment
Country: USA
Microsoft Corporation
One Microsoft Way, Redmond, WA 98052, USA
Purpose: Email communications (Microsoft 365)
Country: USA
4. International Data Transfers
Vercel Inc. and Microsoft Corporation are located in the United States. Transfers are covered by the Standard Contractual Clauses approved by the European Commission (Decision 2021/914) and the EU-US Data Privacy Framework (Adequacy Decision of 10 July 2023).
5. Security Measures
FALCO LIVING, S.L. has implemented the technical and organisational measures required by Article 32 of the GDPR, including HTTPS protocol with SSL/TLS encryption across the entire Website.
6. Minors
This Website is not directed at persons under 14 years of age. FALCO LIVING, S.L. does not knowingly collect data from minors. If it becomes aware that a minor has provided personal data, it will be deleted immediately.
7. Your Rights
You may exercise the following rights at any time:
- Access: obtain confirmation and a copy of the data being processed
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of data when no longer necessary
- Restriction: suspend processing in certain circumstances
- Portability: receive data in a structured, commonly used format
- Objection: object to processing based on legitimate interest or direct marketing
To exercise these rights, contact info@sumehrb.com with your name and a copy of your identity document. You will receive a response within one month. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.