Privacy.

Data controller

Purposes and legal bases

Professional enquiries

We process data to answer catalogue, product, tasting, or distribution requests and, where appropriate, to prepare a proposal or B2B commercial relationship. The legal basis is taking requested pre-contractual steps and the controller's legitimate interest in answering and reasonably following up professional contacts.

Enquiry data is not added to promotional campaigns or used to send unsolicited commercial communications.

Site operation and security

Hosting may generate technical access logs to maintain security, diagnose incidents, and prevent abuse. This processing is based on the legitimate interest in protecting the site and is limited to the period needed under the provider's operational policy.

Data processed and required fields

The form may collect name, role, company, business type, email, telephone, city or country, product interest, and message content. Name, company, and email are required because they are needed to identify and answer the request. Without them, we cannot handle the request through the form.

Retention

Data is retained while the enquiry is handled and, if a professional relationship begins, for its duration. It is then kept blocked only for the periods needed to address potential legal liabilities and deleted when those periods expire. Enquiries that do not lead to a commercial relationship are deleted when no longer needed for reasonable follow-up.

Recipients and transfers

We do not disclose data to third parties except where legally required. Hosting, email, or technology-support providers may access it solely as processors under the applicable contractual safeguards. No international data transfers are planned. If a provider's configuration required a transfer outside the European Economic Area, information would be provided and the relevant legal mechanism applied before the transfer.

Your rights

You may request access, rectification, erasure, objection, restriction of processing, and portability where applicable. Send your request to info@lecroisebakery.com, stating the right you wish to exercise and the information needed to verify your identity.

You may also lodge a complaint with the Spanish Data Protection Agency.

Analytics, consent, and transfers

With your consent, we use Google Analytics 4 through Google Tag Manager to obtain aggregated statistics about use of the site. No Google resource is loaded and no event is sent before acceptance. The legal basis is consent, which may be withdrawn at any time through Cookie settings in the footer.

Measurement is limited to navigation and usage events defined by LE CROISE. We do not send form contents, names, email addresses, telephone numbers, messages, or other personal data entered by the user to Google. Advertising features, Google Signals, and advertising personalisation remain disabled.

Google may process data outside the European Economic Area under its applicable transfer mechanisms. See the cookie policy for providers, purposes, duration, and available controls.

Last updated: 17 July 2026. Text pending legal review before production.