Last updated: 2026-09-29
This is a translation. If it differs from the Spanish version, the Spanish version applies.
01Who is responsible
The data controller is Povarino S.L. (trading as Brococo), tax ID (NIF) B01794932, registered at Calle Rosella 24, Altea la Vieja, 03599 Altea (Alicante).
For anything about your data, email brococo2023@gmail.com or message us on WhatsApp at +34 643 41 85 18.
02What data we handle
- When you write to us (contact form, email or WhatsApp): name, email, phone, company and whatever you tell us in the message.
- When you order a meal plan or dishes: name, phone, delivery address and times, food preferences, and payment and invoicing details.
- Only with your explicit consent: health data such as allergies, intolerances, weight, height, age, activity level or goals, to work out and adapt your menu.
- When you fill in one of our forms, on this website, on Facebook or on Instagram: name, phone and your answers about the plan you want and where you live.
- When you browse and accept analytics cookies: usage data such as pages visited, device and approximate location. More in the cookie policy.
03Why we use it, and on what legal basis
- To answer your enquiry and send you a menu and a quote when you ask for them. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR).
- To prepare, deliver and charge for your orders and plans. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legal obligations such as tax rules (Art. 6(1)(c) GDPR).
- To adapt your menu to your allergies, intolerances or goals. Legal basis: your explicit consent (Art. 9(2)(a) GDPR). You can withdraw it at any time; without that data we cannot personalise your menu in that respect.
- To send you news, menus and offers. Legal basis: your consent (Art. 6(1)(a) GDPR), which we only have if you ticked the box or asked for it. You can unsubscribe at any time.
- To measure how the website is used and improve it. Legal basis: your consent in the cookie banner (Art. 6(1)(a) GDPR and Art. 22.2 of Spain's LSSI).
We make no automated decisions and build no profiles that affect you.
04How long we keep it
- Enquiries that don't become an order: up to 12 months after the last contact.
- Customers: for as long as the relationship lasts, then for the periods the law requires (for example, 6 years for accounting records).
- Health data: while you are an active customer. We delete it when the relationship ends, or earlier if you withdraw your consent.
- Marketing messages: until you unsubscribe.
05Who else sees your data
We don't sell your data or pass it to anyone for their own use, except where the law requires it (for example, to the Spanish tax authority).
To run the service we use providers who access your data only to provide their service to us:
- Vercel Inc., which hosts this website.
- Resend, which emails us what you send through the forms on the website.
- Google, which provides our email and the spreadsheet where we log requests.
- WhatsApp (Meta), the channel we use to talk to you and confirm orders.
- Telegram, if you would rather talk to us there.
- Microsoft Ireland Operations Ltd., for Microsoft Clarity, only if you accept analytics cookies.
If you contact us through a Facebook or Instagram form, Meta Platforms Ireland Ltd. also processes that data under its own privacy policy.
06Transfers outside the European Union
Some of these providers may process data in the United States. Those transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
If you choose Telegram, Telegram handles your messages outside the European Union. That transfer is necessary to deal with the request you make through that channel (GDPR article 49(1)(b)).
07Your rights
You can ask us at any time to access, correct or delete your data, to object to or restrict its use, or to receive it in a portable format. You can also withdraw any consent, without affecting what we did with it before.
Email brococo2023@gmail.com and tell us which right you want to exercise. We reply within one month at the latest.
If you think we have mishandled your data, you can complain to the Spanish Data Protection Agency (www.aepd.es).
08Children and your family's data
This website and our forms are not aimed at children under 14. If you give us data about your children or other people for a family plan, such as their allergies, you do so as their legal guardian or with their permission.
09Security and changes
We apply reasonable technical and organisational measures to protect your data. If we change this policy, we will publish the new version here with its date.
