PRIVACY POLICY

Last updated: May 7, 2026.

 

DATA CONTROLLER

NANDO JUBANY, S.L., with registered address at Carretera Sant Hilari s/n (08506) Calldetenes, Tax ID No. B-62834270, and contact email address info@canjubany.com

 

PERSONAL DATA

The data controller will exclusively collect personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed, as applicable in each case.

 

The user guarantees the authenticity of the data provided and shall be solely responsible for any false or inaccurate statements.

 

This website may contain links to external websites. The data controller assumes no responsibility for the content or any other aspect related to such external websites.

 

The data controller reserves the right to modify this Privacy Policy at its own discretion or due to legal, jurisprudential or doctrinal changes issued by the Spanish Data Protection Agency or the corresponding European authorities. Continued use of the website after such changes have been implemented shall imply acceptance of those changes.

 

PURPOSES OF DATA PROCESSING

The personal data received will be processed for the following purposes, as applicable in each case:

 

• – Contacting individuals who may have a potential interest in becoming clients, distributors or suppliers of NANDO JUBANY, S.L.
• – Administrative management related to the existing contractual relationship.
• – Maintenance of the existing contractual relationship with the data subject or with the company or organisation for which they work or collaborate.
• – Management of reservations and related invoicing, including reservation processing and control, communication with the customer, and management and control of the corresponding invoice payment.
• – Management of the purchase of the Jubany Experience, including purchase processing and control, communication with the customer, and management and control of the corresponding invoice payment.
• – Management of special requests, preferences or dietary intolerances communicated through the reservation.
• – Sending communications related to news, updates, promotions and events of Grup Jubany.
• – Interaction with users of social media profiles providing information through Can Jubany’s active social media accounts.
• – Reviewing, investigating and, where appropriate, responding to messages sent by users to NANDO JUBANY.
• – Review and assessment of the information and/or documentation provided for the purpose of participating in a recruitment process for any of the businesses within Grup Jubany. If deemed of interest, the data subject may be contacted in order to assess their application.
• – Retention of the information and/or documentation provided in the databases of Grup Jubany in order to consider the candidate for future vacancies for a period of 1 year from the date the data was collected. If deemed of interest, the data subject may be contacted in order to assess their application.
• – Prevention, detection and control of abuse and fraud committed on or through the website.
• – Management of compliance with legally established obligations.

LEGAL BASIS FOR PROCESSING

The legal basis for the processing of personal data shall be the user’s consent, where provided, for the following purposes:

 

• – Management of special requests, preferences or dietary intolerances communicated through the reservation.
• – Sending communications related to news, updates, promotions and events of Grup Jubany.
• – Interaction with users of social media profiles providing information through Can Jubany’s active social media accounts.

The user shall have the right to withdraw consent at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.

Furthermore, the legal basis for the processing of personal data shall be the implementation of requested pre-contractual measures, the intention of the data subject to enter into a contract with the data controller, or the performance of a contract, where applicable, for the following purposes:

 

• – Review and assessment of the information and/or documentation provided for the purpose of participating in a recruitment process for any of the businesses within Grup Jubany. If deemed of interest, the data subject may be contacted in order to assess their application.
• – Retention of the information and/or documentation provided in the databases of Grup Jubany in order to consider the candidate for future vacancies for a period of 1 year from the date the data was collected. If deemed of interest, the data subject may be contacted in order to assess their application.
• – Management of reservations and related invoicing, including reservation processing and control, communication with the customer, and management and control of the corresponding invoice payment.
• – Management of the purchase of the Jubany Experience, including purchase processing and control, communication with the customer, and management and control of the corresponding invoice payment.
• – Administrative management related to the existing contractual relationship.
• – Contacting individuals who may have a potential interest in becoming clients, distributors or suppliers of NANDO JUBANY, S.L.
• – Review and assessment of the information and/or documentation provided for the purpose of participating in a recruitment process for any of the businesses within Grup Jubany. If deemed of interest, the data subject may be contacted in order to assess their application.

The processing of personal data for the aforementioned purposes is necessary for the data controller to fulfil its pre-contractual or contractual obligations.

The legal basis for the processing of personal data shall also be compliance with a legal obligation, where applicable, for the following purposes:

 

• – Management of reservations and related invoicing, including reservation processing and control, communication with the customer, and management and control of the corresponding invoice payment.
• – Management of the purchase of the Jubany Experience, including purchase processing and control, communication with the customer, and management and control of the corresponding invoice payment.
• – Administrative management related to the existing contractual relationship.
• – Reviewing, investigating and, where appropriate, responding to messages sent by users to NANDO JUBANY, when acting as consumers in accordance with applicable legislation.
• – Management of compliance with legally established obligations.

The processing of personal data for the aforementioned purposes is necessary for NANDO JUBANY, S.L. to comply with the obligations imposed by applicable legislation.

Finally, the legal basis for the processing of personal data shall be legitimate interest, where applicable, for the following purposes:

 

• – Maintenance of the existing contractual relationship with the data subject or with the company or organisation for which they work or collaborate. The legitimate interest of the data controller is recognised by applicable legislation.
• – Reviewing, investigating and, where appropriate, responding to messages sent by users to NANDO JUBANY, when they are not acting as consumers in accordance with applicable legislation. The legitimate interest is based on the data controller’s intention to respond to individuals who contact them.
• – Prevention, detection and control of abuse and fraud committed on or through the website. The legitimate interest is based on the data controller’s intention to maintain the website as a secure environment.

RECIPIENTS

NANDO JUBANY, S.L. will not disclose personal data to third parties, except where legally required, to subcontracted third parties, or to other companies within Grup Jubany.

Specifically, personal data will be disclosed to other companies within Grup Jubany, in accordance with the legitimate interest of NANDO JUBANY, S.L. recognised by applicable legislation, for internal administrative purposes:

 

• – Management of the purchase of the Jubany Experience when it includes a stay at Mas Albereda.
• – Review and assessment of the information and/or documentation provided for the purpose of participating in a recruitment process for any of the businesses within Grup Jubany. If deemed of interest, the data subject may be contacted in order to assess their application.
• – Retention of the information and/or documentation provided in the databases of Grup Jubany in order to consider the candidate for future vacancies. If deemed of interest, the data subject may be contacted in order to assess their application.

NANDO JUBANY, S.L. may contract services from third parties located outside the European Economic Area, in countries that do not provide legislation equivalent to European standards, thereby carrying out international data transfers. Specifically, the following companies may have access to the personal data necessary to provide the contracted services as data processors:

 

• – The Rocket Science Group LLC (MailChimp): Program used to send communications related to news, updates, promotions and events of Grup Jubany. The standard contractual clauses adopted by the European Commission between controllers and processors apply. A copy can be obtained here: https://mailchimp.com/es/legal/data-processing-addendum
• – La Fourchette SaS (The Fork): Platform used to manage user reservations on the website. The standard contractual clauses adopted by the European Commission between controllers and processors apply. A copy can be obtained here: https://www.thefork.es/legal#PoliticaDePrivacidad

Additionally, social media platforms providing information through Can Jubany’s active profiles carry out international data transfers as independent data controllers. Copies of their privacy policies may be obtained on their respective websites. NANDO JUBANY, S.L. shall not be responsible for any processing carried out by such platforms. NANDO JUBANY, S.L. disclaims any liability arising from the use, exploitation, dissemination, communication or reproduction by third parties of such images or voice recordings without explicit consent.

 

DATA RETENTION PERIODS

Where the legal basis for processing is the user’s consent, the data shall be retained until such consent is withdrawn.

 

Once the recruitment process has concluded, the documentation submitted by the candidate shall be deleted, unless the user has expressly agreed that their curriculum vitae may be retained in the database for future vacancies. In such case, the curriculum vitae shall be retained for a period of 1 year.

 

Where the legal basis for processing is the performance of a contract, the data shall be retained for the duration of the contractual relationship.

 

Where the legal basis for processing is the implementation of requested pre-contractual measures, the data shall be retained for as long as the data subject’s intention to enter into a contract with the data controller remains valid.

 

Where the legal basis for processing is compliance with legal obligations, the data shall be retained for the period established by applicable law.

 

Notwithstanding the foregoing, personal data shall in any case be retained for the period during which liabilities may arise for the data controller under applicable law, with the data being blocked, where appropriate, until the relevant limitation period has expired.

USER RIGHTS

Please note that you may exercise your rights of access, rectification, erasure, restriction, objection and portability regarding your personal data at any time, in accordance with applicable data protection regulations, by sending a written request to Carretera Sant Hilari s/n (08506) Calldetenes or by email to privacitat@canjubany.com.

 

In particular, you may exercise the following rights:

 

• – Access your personal data.
• – Obtain confirmation as to whether the companies within the group to which the data controller belongs are processing your personal data.
• – Rectify inaccurate or incomplete data.
• – Request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• – Request restriction of processing where one of the conditions provided for in data protection regulations is met.
• – Object to the processing of your data, under certain circumstances and for reasons related to your particular situation. In such cases, the data controller shall cease processing the data unless compelling legitimate grounds or the exercise or defence of legal claims apply.
• – Obtain human intervention, express your point of view and challenge automated decisions adopted by the data controllers, where applicable.
• – Request portability of your data.

If you are dissatisfied with the processing of your data, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), the competent supervisory authority in this matter (www.aepd.es)

 

PDF Privacy Policy