This is an English translation provided for your convenience. The Spanish version at lamarujabakery.es/privacidad-marujeo.html is the legally binding text, and both versions say exactly the same thing.
☕ The short version: the data you give us when you join El Marujeo is used solely to run your membership of the club. We do not pass it on to third parties, we do not sell it, and we do not use it for outside advertising. It stays with us.
1. Data controller
Name / company: LaMaruja Hermes S.L.
Spanish tax number (NIF/CIF): B27554583
Registered address: Calle Hermes, 10 · Teatinos · 29010 Málaga
Telephone: +34 614 618 479
Email: info@lamarujabakery.es
Website: lamarujabakery.es
2. What data we collect
When you sign up to El Marujeo we collect only the data you give us voluntarily:
- First name and surname — to identify you within the club.
- Email and/or phone number — at least one is needed to access your profile.
- Date of birth (optional) — so we can wish you a happy birthday.
- Visit history — a record of your check-ins at the bakehouse, used to work out your level and your rewards.
We do not collect bank details, payment details or any special category (sensitive) data.
3. What we use your data for
Your data is used solely and exclusively to:
- Run your account and your level within El Marujeo (Maruja Nueva, de Barrio, VIP or Élite — the club tiers).
- Record your visits and work out your points and rewards.
- Tell you about the discounts you have active and what is new in the club.
- Send you a birthday message on the day (if you have told us the date).
- Send you occasional messages about the state of your account or the prizes available.
4. Your data is not shared with anyone
🔒 A firm commitment: LaMaruja Bakery does not transfer, sell or share your personal data with any third party, outside company, marketing platform or intermediary. Your data stays inside our own systems, and only the LaMaruja team has access to it, purely to run the club.
We do not use external behavioural analytics tools that would receive your data, and we do not feed your information into third-party advertising platforms.
5. Legal basis for processing
The processing of your data is based on the express consent you give us when you sign up to El Marujeo, in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
You can withdraw your consent at any time, without that affecting the lawfulness of the processing carried out before you withdrew it.
6. How long we keep your data
We keep your data for as long as your El Marujeo account stays active. If you ask us to delete your account, we will erase all of your personal data within a maximum of 30 days, unless the applicable law requires us to keep some record for legal reasons.
7. Your rights
You can exercise the following rights at any time by writing to info@lamarujabakery.es:
- Access — to know what data we hold about you.
- Rectification — to correct data that is wrong or out of date.
- Erasure — to ask us to delete your account and all of your data.
- Objection and restriction — to object to certain uses or restrict the processing.
- Portability — to receive your data in a structured format.
If you believe the processing does not comply with the rules, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
8. Security
We apply technical and organisational measures to protect your data against unauthorised access, loss or alteration. Your information is stored on secure servers and access is restricted to the LaMaruja Bakery team alone.
9. Changes to this notice
We may update this notice to reflect changes in the club or in the law. Any change will be published on this same page, with the corresponding update date.
Want your account deleted?
Message us and we will erase all of your data in under 30 days. No fuss, no questions.
✉️ info@lamarujabakery.es 💬 WhatsApp