top of page

LEGAL NOTICES & PRIVACY

Arte Bianca · Mangiamo Bene Gourmet SL

Last updated: 26 May 2026

 

This page contains the three mandatory legal texts for this website.

 

Contents:
 

  • Legal Notice (LSSI)

  • Privacy Policy (GDPR)

  • Cookie Policy
     

1. Legal Notice (LSSI)

​

In compliance with Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), Mangiamo Bene Gourmet SL states that it is the owner of this website.

​

General Conditions of Use
 

Access to this website is free of charge and implies acceptance of these conditions. The user agrees to use the website and its services in accordance with the law, morality and public order.
 

Intellectual and Industrial Property
 

All content on this website (logos, texts, photographs, etc.) is the property of Mangiamo Bene Gourmet SL or its licensors and is protected by intellectual and industrial property laws. Unauthorised reproduction, distribution or transformation of such content is prohibited.
 

Limitation of Liability
 

Mangiamo Bene Gourmet SL is not responsible for possible errors in the content, for the unavailability of the site or for the transmission of viruses. As this is a purely informational website, the company is not responsible for decisions taken on the basis of the information provided, nor for any resulting damages.
 

Applicable Law and Jurisdiction
 

These conditions shall be governed by Spanish law. Any dispute shall be submitted to the Courts and Tribunals of the city of Bilbao.

 

 

2. Privacy Policy (GDPR)

​

Last updated: 26 May 2026

In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation or “GDPR”) and Spanish Organic Law 3/2018 (LOPDGDD), we inform you how Mangiamo Bene Gourmet SL processes the personal data it collects.

​

2.1 Who is the data controller for the processing of your data?
 

  • Identity: Mangiamo Bene Gourmet SL

  • Tax ID (NIF): B75841296

  • Registered office: CL Alameda de Recalde 23 1 DC, 48009 Bilbao, Vizcaya

  • Email: artebianca.zubiarte@gmail.com

For any matter relating to the protection of your data, you can contact us at the postal or email addresses indicated.

​

2.2 What data do we process and for what purpose?
 

We collect and process your personal data for the following purposes:

​

A. Customers (Loyalty Programme and POS)

  • Data processed: Identifying and contact data (e.g. name, email, phone, date of birth) and purchase history associated with your customer account.

  • Purpose: To manage your registration and participation in our loyalty programme (managed through Revo Systems), accrue points, apply discounts, send birthday communications and process your payments.

  • Legal basis: Your express consent when voluntarily joining the programme (Art. 6.1.a GDPR).

B. Customers (Commercial Communications and Marketing by Email, SMS and WhatsApp)

  • Data processed: Name, email and/or mobile phone number.

  • Purpose: To send you, by email, SMS or WhatsApp, our newsletter, promotions, special offers, prize draws, news and loyalty communications from Arte Bianca.

  • Legal basis: Your express, free, specific, informed and unambiguous consent (Art. 6.1.a GDPR), obtained at the point of collection (web form, loyalty programme sign-up, confirmation reply to a WhatsApp message, etc.).

  • Withdrawal: You may withdraw your consent at any time, free of charge, by replying “BAJA” to any WhatsApp message, “STOP” to any SMS, clicking the unsubscribe link in any email, or writing to artebianca.zubiarte@gmail.com.

C. Participants in Prize Draws and Promotions

  • Data processed: Name, phone number (WhatsApp), email and, where applicable, order details.

  • Purpose: To manage participation in the prize draw or promotion, communicate the result, deliver the prize and, if the participant expressly consents, add them to the commercial communications list (section B).

  • Legal basis: Performance of the pre-contractual and contractual relationship arising from participation (Art. 6.1.b GDPR) to manage the draw; your express consent (Art. 6.1.a GDPR) for any subsequent commercial communications.

D. Online Orders (Bookings and Orders for Collection or Delivery)

  • Data processed: Name, phone, email, order details, payment details.

  • Purpose: To manage and process your order or booking, charge the corresponding amount, communicate with you about the order status and comply with associated tax and accounting obligations.

  • Legal basis: Performance of the contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).

E. General Enquiries (Email, WhatsApp, Contact Forms)

  • Data processed: Your email address, phone number and any personal information you provide in your message.

  • Purpose: To handle and respond to your requests for information, questions or suggestions.

  • Legal basis: Our legitimate interest (Art. 6.1.f GDPR) in assisting you.

F. Employees (HR Management)

  • Data processed: Identifying, academic, banking, social security data, etc.

  • Purpose: To manage the employment relationship, prepare payroll and comply with legal obligations.

  • Legal basis: Performance of the employment contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).

G. Employees (Internal Video Surveillance)

  • Data processed: Image.

  • Purpose: To ensure the security of the premises, goods and staff within the work areas (bakery, storeroom).

  • Legal basis: The company's legitimate interest (Art. 6.1.f GDPR) and workplace oversight powers (Art. 20.3 of the Spanish Workers' Statute).

H. Website (Browsing and Analytics)

  • Data processed: Technical data (e.g. IP address, device identifier) and browsing analytics data (performance and analytics cookies).

  • Purpose: To enable the correct technical functioning of the website and to analyse the performance and use of our site in order to improve it (via Wix Analytics and Google Analytics 4).

  • Legal basis: Our legitimate interest (Art. 6.1.f GDPR) for strictly necessary technical cookies and your express consent (Art. 6.1.a GDPR) for analytics and third-party cookies.
     

2.3 How long do we keep your data?
 

  • Customer data (Loyalty): For as long as you remain a member of the programme, and in any case deleted or anonymised after 24 months of inactivity. Once you request cancellation, data will be blocked for the mandatory legal periods (in particular 6 years for tax and accounting purposes, under the Commercial Code).

  • Marketing data (Email, SMS, WhatsApp): Until you withdraw your consent, and in any case deleted after 24 months of inactivity without interaction.

  • Prize draw and promotion data: For the duration of the draw and up to 6 months after it ends, unless the participant has consented to receiving commercial communications, in which case the period in the previous section applies.

  • Online order data: For as long as needed to manage the order and, thereafter, for the mandatory legal periods (6 years for tax and accounting purposes).

  • Enquiry data: For the time strictly necessary to resolve your request, up to a maximum of 12 months.

  • Employee data: For the duration of the employment relationship and, thereafter, for the mandatory legal periods (4 years for labour purposes, 6 years for tax purposes, 10 years for anti-money-laundering purposes where applicable).

  • Video surveillance data: A maximum of 30 days.
     

2.4 Who do we share your data with?
 

We do not sell your data. We only share your data with our “Data Processors” in order to provide you with our service:

  • Revo Systems SL (Spain): Our POS and loyalty programme provider.

  • Clantic Consultoría Informática SL (Spain): Our IT consultancy and loyalty system support.

  • Proyecta (Spain): Our tax, accounting and labour advisers.

  • Wix.com Ltd. (Israel/Ireland): Platform hosting our website and providing its analytics tools.

  • Google Ireland Ltd. (Ireland): Google Analytics 4 service for usage analysis of the digital menu site (menu.artebianca.io).

  • WhatsApp Ireland Ltd. / Meta Platforms Ireland Ltd. (Ireland): WhatsApp Business messaging platform used for customer communication and, with consent, sending commercial communications.

  • Tally (Tally Forms, Belgium): Online forms platform used for order management and prize-draw entries.

  • Stripe Payments Europe Ltd. (Ireland): Payment processor for online orders.

  • Netlify Inc. (United States): Hosting platform for the digital menu (menu.artebianca.io).

  • Authorities and Public Bodies: Where legally required (e.g. Tax Agency, Social Security).
     

2.5 International data transfers
 

Some of our Data Processors are located outside the European Economic Area (EEA), in particular in the United States (Netlify) and in countries where their parent companies operate globally. In all cases, these transfers are carried out with the appropriate safeguards provided for by the GDPR:

  • European Commission adequacy decisions, where applicable (for example, the EU-US Data Privacy Framework for certified US providers).

  • Standard Contractual Clauses (SCCs) approved by the European Commission.

  • Additional technical and organisational measures agreed with each provider.

You can request further information about these safeguards by writing to artebianca.zubiarte@gmail.com.
 

2.6 What are your rights?
 

You have the right to:

  • Access your personal data.

  • Rectify inaccurate data.

  • Erase your data when it is no longer necessary.

  • Restrict processing in certain circumstances.

  • Object to processing when it is based on legitimate interest.

  • Withdraw your consent at any time, without affecting the lawfulness of prior processing.

  • Request the portability of your data to another controller.

  • Not be subject to automated individual decision-making.

You can exercise these rights by sending a written request (enclosing a copy of your ID) to our registered office (CL Alameda de Recalde 23 1 DC, 48009 Bilbao, Vizcaya) or to our email (artebianca.zubiarte@gmail.com).

You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

 

 

3. Cookie Policy

Last updated: 26 May 2026

​

3.1 What are cookies?
​

A cookie is a small text file that a website stores in the user's browser. Cookies make it easier to use and navigate a website and are essential to how the internet works.

​

3.2 What cookies does this website use?
 

The Arte Bianca website (Mangiamo Bene Gourmet SL) consists of two main domains: www.artebianca.io (hosted on Wix) and menu.artebianca.io (hosted on Netlify, digital menu).

​

Technical Cookies (Strictly Necessary)

Essential for the site to work. They enable navigation and manage security. They do not require your consent and are always installed.

Legal basis: Legitimate interest (Art. 6.1.f GDPR).

Analytics and Performance Cookies (Non-essential)

  • Wix Analytics: used on www.artebianca.io to understand how visitors interact with the site.

  • Google Analytics 4 (Google Ireland Ltd.): used on menu.artebianca.io to analyse usage of the digital menu.

Legal basis: Your express consent (Art. 6.1.a GDPR).

​

3.3 Cookie consent banner

​

In compliance with Spanish regulations (AEPD), when you first access our website you will be shown a cookie banner.

This banner will offer you clear options:

  • ACCEPT: Allows the installation of all cookies (technical and analytics).

  • REJECT: Allows the installation of only the necessary technical cookies.

  • CONFIGURE: Lets you select which type of non-essential cookies you want to allow.

Analytics cookies will only be installed in your browser if you click “ACCEPT”.

​

3.4 How can you manage cookies in your browser?

​

You can also block or delete the cookies installed on your device through your internet browser's settings.

3.5 Contact
 

If you have any questions about our Cookie Policy, you can contact us at: artebianca.zubiarte@gmail.com.

​

Mangiamo Bene Gourmet SL · Bilbao, Zubiarte Shopping Centre · Basque Country

bottom of page