No products in the cart.
Privacy Policy
1. Data controller
- Controller: HC BIKE-COFFEE, S.L.
- Tax ID: B55331813
- Address: C/ Perill, 3, 17001 Girona (Spain)
- Email: info@horscategoriegirona.cc
- Phone: +34 669 970 758
We process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
2. What data do we process, for what purpose, and on what legal basis?
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Online store orders | Name, address, email, phone number, and order details. Card details are processed directly by the bank; Hors Categorie does not have access to them. | To manage the purchase, payment, shipping, returns and warranty, and to issue the invoice. | Performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal tax and accounting obligations (Art. 6(1)(c) GDPR). | For the duration of the relationship and, afterwards, for the legally required periods (6 years for accounting records and 4 years for tax records). |
| Customer account (if you create one) | Name, email, password, addresses, and order history. | To let you view your orders and check out faster. | Performance of a contract (Art. 6(1)(b) GDPR). | Until you delete the account. |
| Marketing communications to customers | Name and email. | To send you information about products similar to those you’ve purchased. | Legitimate interest (Art. 21.2 LSSI-CE and Art. 6(1)(f) GDPR). You can object at checkout and in every email. | Until you unsubscribe. |
| Newsletter | Email address. | To send you news, promotions, and Hors Categorie events. | Consent (Art. 6(1)(a) GDPR). | Until you unsubscribe. |
| Contact form and emails | Name, email, phone number, and message. | To respond to your enquiry. | Consent (Art. 6(1)(a) GDPR) or pre-contractual steps at your request (Art. 6(1)(b) GDPR). | For as long as needed to handle the enquiry and, at most, 1 year. |
| Restaurant reservations | Name, phone number, email, date, number of people, and notes. | To manage your reservation. | Pre-contractual steps and performance of the service (Art. 6(1)(b) GDPR). | Until the reservation date and, at most, 1 year. |
| Browsing and cookies | See our Cookie Policy. | |||
We do not make automated decisions or create profiles with legal effects for you.
3. Who do we share your data with?
We do not share your data with third parties, except where required by law (for example, the Tax Agency). To provide the service, some providers access it as data processors, under contract and following only our instructions:
- Bank and payment gateway: Banco Sabadell / Redsys, for card payments.
- Shipping company: Mail Boxes (TRANSERVLOG WORLD, S.L.U.), to deliver your order.
- Tax and accounting advisor: Giropunt Assesors, S.L.
- Web hosting and email: Webempresa.
- Newsletter sending tool provider, to send you our communications if you’ve subscribed.
- Restaurant reservation system provider, to manage your reservation.
International transfers: some technology providers may process data outside the European Economic Area (for example, in the United States). In that case, the transfer is carried out with the safeguards provided for in the GDPR: an adequacy decision by the European Commission (such as the EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the Commission.
4. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time, and withdraw any consent you have given, without affecting the lawfulness of processing carried out before you withdrew it.
To do so, email us at info@horscategoriegirona.cc or write to our postal address, stating which right you want to exercise. We’ll respond within a maximum of one month.
If you believe we haven’t handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan, 6, 28001 Madrid.
5. Minors
The online store is intended for people over 18. We do not knowingly collect data from children under 14.
6. Security
We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted access to information, and providers that offer sufficient guarantees.
7. Changes to this policy
We may update this policy to reflect legal or operational changes. We will always publish the current version on this page, with its update date.
Last updated: November 2026.