Data protection and privacy policy
UPPER EAT® S.L., hereinafter the data controller of this website, in accordance with current legislation on the protection of personal data, the GDPR (EU) 2016/679 of April 27, and the LOPD 3/2018 of December 5, and with the provisions of the LSSI-CE 34/2002 of June 11, has implemented policies, means, and procedures to guarantee and protect the privacy of its USERS’ personal data.
DUTY TO INFORM DATA SUBJECTS ABOUT DATA PROCESSING. ADDITIONAL INFORMATION.
GDPR (EU) 3/2018, of April 27, and LOPD 3/2018, of December 5
In compliance with Articles 13 and 14 of GDPR (EU) 2016/679, of April 27, and Article 11 of LOPD 3/2018, of December 5, we provide the data subject with the following additional information regarding the processing of their personal data.
Data Controller:
UPPER EAT® S.L., with Tax Identification Number (NIF): B88345095, and registered office at Av. De La Industria, 32, Postal Code: 28108 – Alcobendas (Madrid). Our registered office is located at Av. Ramón y Cajal, 5 – Office 15, Postal Code: 28100 – Alcobendas (Madrid).
LIST OF PROCESSING ACTIVITIES
Contact the Data Controller for additional information regarding data processing.
DATA PROCESSING AND CONFIDENTIALITY ON THE WEBSITE
The data you provide will be incorporated into processing activities, the ownership and responsibility of which lies with UPPER EAT® S.L., and will be treated with absolute confidentiality.
The Data Controller, as well as any entities involved in any stage of the processing and/or the entities to whom the data has been communicated—by virtue of the authorization granted by the USER—are obligated to observe professional secrecy and to adopt the necessary levels of protection and the technical and organizational measures within their reach to guarantee the security of personal data, preventing, to the extent possible, unauthorized access, unlawful modification, theft, and/or loss of data.
However, USERS are advised and informed that these technical measures are not infallible or impenetrable, and therefore, the Data Controller cannot be held responsible for such practices or their consequences. The personal data of USERS, along with any data generated as a result of accessing, using, or contracting the service, may only be processed automatically and transferred in the manner and for the purpose expressly authorized by the USERS.

