At PAPITU Restaurant, the privacy and protection of our clients’ and users’ data is a top priority. This Privacy Policy describes how we collect, use, store, and protect your personal information in compliance with Regulation (EU) 2016/679 of the European Parliament and Council, of April 27, 2016 (GDPR), and the Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).
1. DATA CONTROLLER
The entity responsible for the processing of personal data collected through this website is:
| Concept | Data |
|---|---|
| Company Name | PAPITU RESTAURACIÓ S.C.P. |
| Tax ID | J67359984 |
| Contact Email | papitucerdanyola@gmail.com |
| Activity | Restaurant services |
2. WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?
We collect and process your personal data exclusively for the legitimate purposes detailed below. The user guarantees that the data provided is true, accurate, complete, and up to date, being responsible for any damage or harm, direct or indirect, that may result from non-compliance with this obligation.
| Purpose | Data Processed | Legal Basis |
|---|---|---|
| Reservation Management | Full name, phone, email, number of diners, date and time | Execution of a pre-contractual relationship |
| Handling Contact Inquiries | Name, email, phone | Consent of the data subject |
| Website Analysis and Improvement | IP, browsing, device, cookies, geolocation | Consent of the data subject |
| Third-party Web Elements | IP and technical browser data | Legitimate interest / consent |
3. DATA RETENTION PERIODS
- Reservations and Clients: They will be kept during the provision of the service and, once finished, for the applicable legal limitation periods (generally, 5 years for personal actions under the Civil Code and 6 years for tax and commercial purposes).
- Inquiries: They will be kept for the time strictly necessary to manage and resolve your inquiry. Once resolved, they will be deleted if they have not generated a new contractual relationship.
- Cookies: They will be kept for the periods specified in our Cookie Policy.
4. RECIPIENTS OF YOUR DATA
PAPITU Restaurant will not transfer your personal data to third parties unless there is a legal obligation. However, for the correct functioning of the website and the provision of our services, we share data with the following providers acting as data processors:
- Web Hosting Providers: For the storage of the website and its databases.
- Google LLC: For the use of Google Maps and Google Analytics (always with your consent).
- Meta Platforms, Inc.: For the use of social media widgets and WhatsApp.
Some of these services involve international transfers (USA), covered by the EU-US Data Privacy Framework or Standard Contractual Clauses.
5. WHAT ARE YOUR RIGHTS?
Data protection regulations grant you the following rights over your personal information:
- Right of Access: Know what data we are processing about you.
- Right of Rectification: Request the correction of inaccurate or incomplete data.
- Right of Erasure (Right to be Forgotten): Request the deletion of your data.
- Right to Object: Object to the processing of your data.
- Right to Restrict Processing: Request that we suspend the processing of your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured format and transmit it to another controller.
To exercise your rights you can write to papitucerdanyola@gmail.com attaching a copy of your ID. If you are not satisfied, you may file a complaint with the Spanish Data Protection Agency.
6. CHANGES TO THE PRIVACY POLICY
PAPITU Restaurant reserves the right to modify this policy to adapt it to legislative or jurisprudential changes, as well as to industry practices. In such cases, we will announce the changes introduced on this page before their implementation.