Privacy Policy
AlmaVIP, owned by Escrivacatering SL, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, and Organic Law 3/2018 of December 5 on Personal Data Protection and Guarantee of Digital Rights, informs users of its online platform about the Privacy and Data Protection Policy that will apply to the processing of personal data voluntarily provided by users when accessing the website alma-vip.com or the corresponding mobile application available on Play Store and App Store.
By providing AlmaVIP with personal data through electronic forms on the Website or Application, the User expressly consents to AlmaVIP or any of its affiliates processing such data under the terms of this Privacy Policy and for the purposes stated herein.
Before registering on AlmaVIP, Users must read and accept this Privacy Policy. By clicking the “Create account” button, the form will only be submitted if the privacy policy has been accepted.
Upon registration, Users must provide the following data to create their account: first name, last name, email address, and, where applicable for professional profiles, a profile image.
Additionally, AlmaVIP, with the User’s authorization, will collect location-related data, including real-time geographic location of the User’s device.
Once registration is complete, Users may access, complete, and/or edit their profile at any time. The information provided will always be available in the User’s account and may be modified, except for the email address, which requires contacting contact@alma-vip.com.
The User undertakes to provide truthful and accurate data and will be solely responsible for any damages caused by inaccurate or outdated information.
Data collected by AlmaVIP or its affiliates will be used exclusively to fulfill the purposes defined in the General Terms of Use available at alma-vip.com.
Applicable Legislation
AlmaVIP is committed to complying with data protection regulations, including:
– Regulation (EU) 2016/679 (GDPR)
– Organic Law 3/2018
– Law 34/2002 on Information Society Services and Electronic Commerce
Basic Information on Data Protection
Controller: Escrivacatering SL (Tax ID: B75849349)
Purpose: Management and provision of requested services
Legal Basis: Contract performance, legitimate interest, and user consent
Recipients: Data processors necessary to provide the service
Rights: Access, rectification, erasure, and others as explained below
Data Controller
Escrivacatering SL
Avenida de los Artesanos, 62 Bloque 2, 7-3
28760 Tres Cantos, Madrid, Spain
Email: contact@alma-vip.com
What Information Does AlmaVIP Collect?
a) Profile Image
Professional users must upload a profile image. This processing requires explicit consent and may be withdrawn at any time.
b) Information Provided Directly by Users
– Registration data (name, surname, email)
– Profile data (service address)
– Additional information (photo, date of birth, phone number, ID)
– Communications with AlmaVIP
– Service requests submitted
Providing this data is necessary to deliver services.
c) Information Collected Indirectly
– Platform usage data
– Device and application data (IP, browser, OS, device type)
– User account activity (orders, reviews)
– Browsing history and preferences
– Source of access (external links or social media)
– Incident management data
– Cookies
– Third-party data (e.g., Facebook login)
– Geolocation data (if authorized)
Purpose and Legal Basis of Data Processing
1. Use of the Platform
To provide services, manage orders, and enable communication.
Legal basis: Contract performance (Art. 6.1.b GDPR)
2. Security and Fraud Prevention
To ensure platform safety and prevent illegal activities.
Legal basis: Legitimate interest (Art. 6.1.f GDPR)
3. Marketing and Commercial Communications
– Emails and SMS (with consent)
– Push notifications
– Promotional offers and samples
– Third-party advertising (e.g., Google, Facebook)
Legal basis: Consent (Art. 6.1.a) and legitimate interest (Art. 6.1.f)
4. Sharing Data with Third Parties
Data may be shared with:
– Service providers (caterers)
– Payment providers (MangoPay, Stripe)
– Fraud prevention services
– Customer support providers
– Affiliates
– Authorities when legally required
If ownership changes, users will be informed of data transfer.
Retention Period for Your Personal Data
According to Purpose
1. Use of the AlmaVIP Platform
Data will be retained for the duration of the contract and, once it has ended, for the limitation period of any legal actions that may arise from it.
2. Ensuring Security and a Suitable Environment for the Secure Provision of Services
Data will be retained until the user revokes their consent, for the duration of the requested service, and, once it has ended, for the limitation period of any legal actions that may arise from it.
3. Promotion and Sending of Commercial Offers (Online and Offline)
Data will be retained until the user revokes their consent.
4. Sharing User Data with Third Parties
Data will be retained for the duration of the contract and, once it has ended, for the limitation period of any legal actions that may arise from it.
Does AlmaVIP share the information it
collects?
As indicated in the previous section, the personal data that AlmaVIP collects will be used exclusively for the purpose defined in the “Terms of Use” and this policy.
For the proper development of the contractual relationship and the excellence of the service, as well as for legitimate interest, AlmaVIP will share certain personal data of Users with:
Service providers: AlmaVIP´s third-party service providers who are part of the contractual relationship established between the professional and the user will have access to the Users´ personal information necessary to perform their functions, but may not use it for any other purpose. They must process personal information in accordance with this Privacy Policy and applicable data protection legislation.
The User may also receive emails from AlmaVIP to confirm the service, request a refund, request the User´ feedback on the service, or receive a service summary. Similarly, to carry out these tasks or to make our marketing work more convenient and secure, we may use platforms for sending bulk emails.
When choosing service providers, AlmaVIP may transfer user data outside the borders of the European Economic Area. In these cases, and prior to sending, AlmaVIP will ensure that these service providers comply with the minimum security standards established by the European Commission and that they always process the data according to AlmaVIP´s
instructions. AlmaVIP may have a contractual relationship with these providers, in which the service providers commit to complying with AlmaVIP´s instructions and implementing the necessary security measures to protect user data.
Security Companies and Law Enforcement Agencies: AlmaVIP may disclose personal information and account data of our customers when it believes such disclosure is necessary to comply with the law, enforce or apply the Terms of Use, or protect the rights, property, or safety of AlmaVIP, its users, or third parties. This includes, therefore, sharing information with other companies and organizations, as well as with law enforcement agencies, for fraud protection and credit risk reduction.
Upon legal request, AlmaVIP may share information with executive authorities and/or third parties regarding requests for information related to criminal investigations and suspected illegal activities.
AlmaVIP Group Companies: In order to provide the services available on AlmaVIP, depending on the geographic area from which users contract the services offered by professionals, certain personal data of Users may be transferred to its subsidiaries. Users are hereby informed that, upon registering on the Platform from any country in which AlmaVIP operates, their data will be stored in AlmaVIP´s database located in Spain and owned by the Spanish company AlmaVIP.
Call Center and Incident Management Services: To provide Customer Service and Call Center support, actions aimed at measuring User satisfaction, and the provision of administrative support services, AlmaVIP may share User data with third-party companies unrelated to the AlmaVIP platform and contracted by AlmaVIP to resolve such issues.
Fraud Control Service Providers: AlmaVIP will share User data with providers that offer fraud control services to assess the risk of transactions.
Web User data is stored on Amazon Web Services servers located in Ireland. AlmaVIP states that these servers comply with applicable data protection legislation and the commitments outlined in this Data Privacy Policy. AlmaVIP Users expressly authorize AlmaVIP Group subsidiaries to access their personal data from any territory for the purpose of providing the service requested by the User.
AlmaVIP User data will not be transmitted to any third party except when (i) necessary for the requested services, in cases where AlmaVIP collaborates with third parties; (ii) when AlmaVIP has the User´s express and unequivocal authorization; (iii) when requested by a competent authority in the exercise of its functions (to investigate, prevent, or take action regarding illegal activities); or (iv) when required by law.
With the User´s consent: In addition to the above, the User will be informed if any information about them is shared with the Platform´s and/or website´s business partners for purposes other than those set forth in AlmaVIP´s Terms of Use, so that they have the opportunity to opt out of having their information shared.
Also with the User´s consent: to third parties who are not business partners and have no connection to AlmaVIP, provided there is prior and unequivocal authorization from the User.
None of the above data communications will include selling, renting, sharing, or otherwise disclosing customers´ personal information for commercial purposes in a manner contrary to the commitments made in this Privacy Policy.
What rights do Users have?
How long will we keep your data?
The personal data provided will be kept until its deletion is requested by the data subject.
If consent is withdrawn or you object to the processing, the data will no longer be processed except in cases provided for by law, and will remain blocked and available to the competent authority.
Users may withdraw their consent for the processing of their data by AlmaVIP at any time.
To withdraw consent, the User simply needs to send an email specifying their wish to withdraw consent to contact@alma-vip.com. Users may withdraw their consent at any time.
Users accept and agree that withdrawing consent will mean that AlmaVIP will not be able to provide the services of its Platform.
Rights of the interested party
AlmaVIP gives the User access to a wealth of information about their account and transactions on alma-vip.com so they can view, and in some cases, update this information.
Every User can access their profile and complete and/or edit it as they see fit. The information and data provided by the User will be available at all times in their user account and can be modified by the User through the «edit profile» option, except for the email address, which, as explained above, is subject to a special process.
Rights of access, rectification, and erasure («right to be forgotten») of data, restriction and objection to processing, right to data portability, and the right not to be subject to automated individual decision-making, including profiling.
The right of access is understood as the user´s right to request information from AlmaVIP regarding whether it processes any of their data, along with the information stipulated in Article 15 of the Regulation.
As established in Article 16 of the Regulation, the User may request AlmaVIP to rectify any inaccurate data held in its database.
The right to erasure entitles the User to request AlmaVIP to delete their personal data in the cases provided for in Article 17 of the Regulation.
However, AlmaVIP reserves the right to store, in anonymized form, the data necessary to prevent, if necessary, the user´s registration on the Platform. This will be done in cases where the user violates any of the rules established by AlmaVIP or commits a crime.
If the User so requests, based on the conditions of Article 18 of the Regulation, AlmaVIP will limit the processing of the data to what is established in that article.
The User also has the right to object to the processing of personal data held by AlmaVIP, as established in Article 21 of the same Regulation.
In accordance with Article 20 of the Regulation, the User may request the portability of their data. AlmaVIP will provide the User, within the timeframe established by the regulation, with their personal data in a structured, commonly used, and machine-readable format. If the personal data is transmitted directly to the data controller, whenever technically feasible, the User must specify the controller's name or company name, address, email address, etc., for the transmission.
In accordance with Article 22 of the Regulation, the User may request that AlmaVIP not subject them to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
In any case, data subjects may file a complaint with the Spanish Data Protection Agency if they have not received a satisfactory response regarding the exercise of any of the aforementioned rights.
The exercise of these rights is personal, therefore the data subject must prove their identity. These rights must be exercised in writing, signed by the data subject, indicating their address, and attaching a copy of their National Identity Document or other proof of identity. This request should be sent to AlmaVIP via its official email address (contact@alma-vip.com) or to its offices located at Avenida de los Artesanos, 62, Bloque2, 7-3, 28760 Tres Cantos (Madrid).
How do we protect user data?
AlmaVIP informs users that it has adopted security measures for personal data to prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the data stored, and the risks to which it is exposed.