Privacy plocy.
WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
- Data Controller: Grupo Orobianco, S.L.
- Tax Identification Number (CIF): B10715654
- Registered Address: Partida Colina del Sol, 49, 03710 Calp, Alicante, Spain
- Email: gerente@orobianco.es
WHAT TYPES OF PERSONAL DATA DO WE PROCESS?
Depending on the products, services or features you wish to use, we will need to process different categories of personal data. In general, the data we process may include the following:
- Identification details (such as your first name, surname, language, country from which you interact with us, and contact details).
- Connection, geolocation and browsing data (for example, if you access our website from a mobile device).
- Commercial information, where you have subscribed to our newsletter.
- Information relating to your preferences and interests.
- Information contained in your curriculum vitae (CV), where you apply to participate in our recruitment processes.
- Reservation-related information, including the reservation date and time, the number of guests and any observations or comments provided by the user.
- Information relating to service preferences, such as the need for a high chair, accessibility requirements, preferred table location or celebration of a special occasion, where provided.
- Information relating to allergies, food intolerances or dietary preferences, but only where voluntarily provided by the user and where necessary to properly manage the reservation or provide the requested service.
Whenever we ask you to complete a form in order to access a particular feature or service available on our website, certain fields will be marked as mandatory, as this information is necessary for us to provide the requested service or functionality.
Please note that if you choose not to provide the mandatory information requested, you may be unable to complete your registration or access certain services or features available on the website.
WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA FOR?
Depending on how you interact with our website, we will process your personal data for the following purposes:
To deal with the enquiries or requests you submit through the different channels available on our website.
We only process the personal data that is strictly necessary to manage or respond to your enquiry or request.
Requests may be submitted either through the various forms available on our website or via our chatbot.
To manage reservations made through the website.
We will process your personal data to manage your reservation request made through our website, including its processing, confirmation, amendment or cancellation.
We may also use your contact details to send you communications relating to your reservation, such as reminders, notifications of changes, availability updates or any other communications necessary for the proper provision of the service.
If you provide information relating to allergies, food intolerances or specific requirements, we will process such data solely for the purpose of responding to your request and adapting our service, where possible, to meet your needs.
We may also process certain information relating to your reservation in order to prevent fraudulent bookings, misuse of the reservation system or repeated no-shows that may adversely affect the organisation of our services.
For marketing purposes.
Where you subscribe to our Newsletter, your personal data will be used to send you our regular newsletters and other company updates.
Please remember that you may unsubscribe from the Newsletter at any time, free of charge, either by contacting us via the Data Controller’s email address or by following the unsubscribe instructions included in each of our communications.
To manage our social media accounts.
If you follow us or contact us through any of the social media platforms on which we are present, we will process the personal data you provide through those platforms solely for the purpose of responding to your messages or comments and managing our list of followers and contacts.
Usability and quality analysis to improve our services (Cookies).
If you access our Platform, we will process your browsing data for analytical and statistical purposes in order to understand how users interact with our Platform and to improve its functionality and performance.
We may also occasionally conduct quality surveys and customer satisfaction assessments to better understand the experience of our customers and users and identify areas in which we can improve our services.
Careers.
If you apply for a position with OSTERIA CONDAL, we will process your personal data for the purpose of managing your job application and recruitment process.
WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
The legal basis allowing us to process your personal data depends on the purpose for which it is processed. Accordingly, different legal bases apply to the following processing activities:
Responding to information requests
The legal basis for processing your personal data is your informed consent to enable us to respond to enquiries submitted through our website, which implies your acceptance of these conditions, together with our legitimate interest in responding to your enquiries.
For the various forms available on the website, consent is deemed to have been given when you submit the relevant form after ticking the box confirming your acceptance of the Privacy Policy. In the case of the chatbot, consent is deemed to have been given by continuing to interact with it.
Online reservation management
The legal basis for processing your personal data for this purpose is the implementation of pre-contractual measures at your request and, where applicable, the performance of the contractual relationship arising from the reservation you have requested.
The processing of data relating to allergies, food intolerances or specific requirements that you voluntarily provide is based on your explicit consent, given by entering such information in the designated field or by communicating it through the channels made available to you, solely for the purpose of responding to your request.
In addition, certain processing activities aimed at preventing fraud, misuse of the reservation system or repeated no-shows may be based on the Data Controller’s legitimate interest in protecting the proper organisation of the service and the availability of tables.
Marketing
The legal basis for processing your personal data for marketing purposes is the consent you provide.
Social media
The legal basis is your informed consent to enable us to respond to enquiries submitted through our social media channels, as well as the consent implied when you choose to follow us and become part of our online community.
Usability and quality analysis (Cookies)
The legal basis is the consent you provide on our website for the installation of the cookies you choose to accept.
Careers
In this case, the legal basis is the implementation of pre-contractual measures requested by the data subject, in accordance with Article 6(1)(b) of the UK GDPR / GDPR, as applicable.
HOW LONG WILL WE RETAIN YOUR PERSONAL DATA?
Information requests
We will process your personal data for as long as is necessary to deal with your enquiry or request and, thereafter, for a period of one year.
Conversations held through the artificial intelligence system may be retained for the legally established limitation periods during which liabilities may arise, after which they will be securely deleted.
Online reservation management
We will process your personal data for as long as is necessary to manage your reservation, provide the requested service and deal with any issues arising from it.
Marketing
We will process your personal data until you unsubscribe or cancel your subscription to our newsletter.
Social media
We will process your personal data for as long as is necessary to respond to your enquiry or request and for as long as you remain a follower of our social media profile.
Usability and quality analysis (Cookies)
Your personal data will be retained in accordance with our Cookie Policy.
Careers
We will retain the personal data contained in your CV for one year from the date it is received. After this period, your data will be securely deleted and/or destroyed.
WILL WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?
Your personal data will not be disclosed or transferred to third parties unless we are required to do so by law, we have obtained your explicit consent, or we consider that we have a legitimate interest in doing so, in which case you will be duly informed.
In relation to online reservations, please note that certain third-party service providers may have access to your personal data in their capacity as data processors, where this is necessary for the proper provision of the service. These may include technology providers responsible for:
- website hosting and maintenance;
- the reservation platform or booking engine;
- sending reservation confirmations or reminders by email, SMS or instant messaging, where such communication channels are used;
- the payment gateway or reservation guarantee system, where a deposit or payment card is required to secure a reservation.
These providers will process your personal data strictly in accordance with our instructions, applying appropriate security measures and only for the period necessary to provide the relevant service.
Where any of these providers are located outside the European Economic Area (EEA), any international transfers of personal data will be carried out subject to the appropriate safeguards required under applicable data protection legislation.
We also inform you that we maintain a presence on the following social media platforms: Facebook and Instagram, in order to keep our followers informed about the Company’s news, updates and services.
You may access these social media platforms voluntarily via the links available on our website or by accessing them directly through your web browser or the relevant mobile application.
Please note that this website is not responsible for the processing of personal data carried out by these social media platforms. However, where personal data is generated through your interaction with our official social media accounts, we will act as joint controllers together with the relevant social media provider.
Before consenting to the transfer of your data from this website and to the processing carried out by the relevant social media platform, you should carefully read its Privacy Policy:
Accordingly, before clicking on any of the social media icons displayed on our website, you are encouraged to familiarise yourself with the applicable privacy policy so that you can make an informed and voluntary decision.
Other technology providers
Service Provision and International Data Transfers
For the proper performance of the contractual relationship and to ensure the highest standards in the provision of our services, OSTERIA CONDAL may share certain users’ personal data with selected service providers.
When selecting service providers, OSTERIA CONDAL may transfer users’ personal data outside the European Economic Area (EEA). In such cases, and prior to any transfer, OSTERIA CONDAL will only engage service providers that are covered by an adequacy decision, appropriate safeguards or another lawful transfer mechanism recognised under applicable data protection legislation, and which comply with the minimum security standards established by the European Commission.
The service providers necessary for the proper provision of our services, together with their respective Privacy Policies, include:
CoverManager, which provides our online reservation management system. Its Privacy Policy can be consulted at: CoverManager | Reservation Management, Delivery, Takeaway and Queue Management Software.
Any other international transfer of personal data (for example, in connection with the use of cookies, social media platforms or similar services) will be based on your explicit consent where there is no adequacy decision, appropriate safeguards or any other lawful basis permitting such transfer.
WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR PERSONAL DATA?
We are committed to respecting the confidentiality of your personal data and ensuring that you are able to exercise your rights.
You may exercise your rights free of charge by sending an email to info@osteriacondal.es, simply stating the reason for your request and the right you wish to exercise.
Where necessary to verify your identity, we may ask you to provide a copy of an official identification document.
Regardless of the purpose or legal basis on which we process your personal data, you have the right to:
- Request access to the personal data we hold about you.
- Request the rectification of any personal data we hold about you. Please note that, by voluntarily providing your personal data, you confirm that it is accurate and up to date and undertake to notify us of any changes.
- Request the erasure of your personal data where it is no longer necessary for the purposes for which it was collected or where we no longer have a lawful basis for processing it.
- Request the restriction of the processing of your personal data. This means that, in certain circumstances, you may ask us to suspend the processing of your data temporarily or to retain it for longer than necessary where you require us to do so. Where processing is based on your consent, you are entitled to withdraw that consent at any time.
- Receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and request that it be transmitted to another data controller.
Where the processing of your personal data is based on our legitimate interests, you also have the right to object to such processing.
You may also request the amendment or cancellation of your reservation through the channels available on our website or by contacting the restaurant directly, without prejudice to exercising any of the rights granted to you under the applicable data protection legislation.
Finally, you have the right to lodge a complaint with the competent data protection supervisory authority. In particular, you may submit a complaint to the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).
CHANGES TO THIS PRIVACY POLICY
We may amend the information contained in this Privacy Policy whenever we consider it appropriate.
Should we do so, we will notify you through the Platform using the appropriate means or, where the changes significantly affect your privacy, by email, enabling you to review the changes, assess them and, where appropriate, object to them or unsubscribe from any service or functionality.
INFORMATION ABOUT COOKIES
We use cookies and similar technologies to facilitate your browsing experience on the Platform, understand how you interact with us and, in certain circumstances, display advertising tailored to your browsing habits.
Please read our Cookie Policy for more detailed information about the cookies and similar technologies we use, their purposes and other relevant information.