C/ Contramuelle Mollet, 3, 07012 Palma, Islas Baleares, España View on map +34 971 72 11 82

Privacypolicy

1. USER INFORMATION

Who is responsible for processing your personal data?

Restaurante Casa Eduardo, S.L. is responsible for processing the user’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).

What type of data do we request and process?

Depending on the form or method used to obtain your data, we always request the minimum necessary to fulfil the purposes detailed in each case.

Why do we process your personal data and why do we do so?

Depending on the form where we have obtained your personal data, we will process it confidentially to achieve the following purposes:

In the Contact form

Responding to queries or any type of request made by the user through any of the contact methods available on the controller’s website.
(for the legitimate interest of the controller, Art. 6.1.f GDPR)
Performing statistical analyses and market studies.
(for the legitimate interest of the data controller, art. 6.1.f GDPR)

In the Reservations form

To formalise reservations at the data controller’s establishment.
(for the performance of a contract or pre-contract, 6.1.b GDPR)
Send commercial advertising communications by email, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, to customers, enabling commercial communications to be made regarding products or services that are similar to those initially contracted with the customer (Art. 21.2 LSSI).
(for the legitimate interest of the data controller, Art. 6.1.f GDPR)

Social Networks

Contact via social media in order to maintain a relationship between the User and the Data Controller, which may include the following operations: – Processing your requests and queries. – Providing information about activities and events. – Providing information about products and/or services. – Interacting through official profiles. The user has a profile on the same social network and has decided to join the Controller’s social network, thus showing their interest in the information published on it. Therefore, when requesting to follow our official page, they give us their consent to process their data. Users can access the privacy policies of the social network itself at any time, as well as configure their profile to ensure their privacy. Once Users have become followers or have joined the Controller’s social network, they may post comments, links, images, photographs or any other type of content supported by the network. In all cases, the User must be the owner of the published content, hold the copyright and intellectual property rights, or have the consent of the third parties concerned. – Sending commercial communications relating to the activities of the Group’s companies, as well as companies outside the Group with which commercial collaboration or intermediation agreements have been established.
(with the consent of the data subject, 6.1.a GDPR)

Instant messaging

Scheduling appointments and meetings with the data controller.
(based on the legitimate interest of the data controller, art. 6.1.f GDPR)
Sending commercial advertising communications by email, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, to customers, enabling commercial communications to be made regarding products or services that are similar to those initially contracted with the customer (Art. 21.2 LSSI).
(for the legitimate interest of the controller, Art. 6.1.f GDPR)
Manage, maintain, improve or develop the services provided.
(for the performance of a contract or pre-contract, 6.1.b GDPR)
Manage your online purchase or order, process the payment and proceed with the shipment or activation thereof, based on the general terms and conditions of the contract.
(for the performance of a contract or pre-contract, 6.1.b GDPR)
Send commercial quotes for products and services.
(for the performance of a contract or pre-contract, 6.1.b GDPR)
Send commercial advertising communications by email, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enables commercial communications. These communications will be made by the data controller and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data.
(based on the consent of the data subject, 6.1.a GDPR)
Responding to queries or any type of request made by the user through any of the contact forms available on the controller’s website.
(for the legitimate interest of the controller, art. 6.1.f GDPR)

Video surveillance

Purpose: Security and access control, work and internal activity monitoring Legitimacy Public interest in security and access control and legitimate interest of the Data Controller based on Art. 20.3 of the Workers’ Statute Retention A maximum of 30 days
(with the consent of the data subject, 6.1.a GDPR)

Images and recordings

File with static and/or dynamic images. Includes publication in the media by the data controller or third parties.
(with the consent of the data subject, 6.1.a GDPR)

Customers and suppliers

Commercial management with customers and suppliers
(for the legitimate interest of the data controller, Art. 6.1.f GDPR)

Advertising exclusion

Data management to prevent the sending of commercial communications to those who have expressed their refusal or opposition to receiving them.
(for compliance with a legal obligation, 6.1.c GDPR)

Commercial advertising

Advertising management and commercial prospecting. Includes data from legitimate sources of public access.
(for the legitimate interest of the controller, Art. 6.1.f GDPR)

Rights of data subjects

Responding to requests from citizens in the exercise of their rights under the GDPR
(for compliance with a legal obligation, 6.1.c GDPR)

Users of the website, app and other platforms of the data controller

Identification data of users who access the corporate website.
(for the legitimate interest of the controller, Art. 6.1.f GDPR)

Training, courses, workshops, activities or similar

Management of access and use conditions.
(for the legitimate interest of the controller, Art. 6.1.f GDPR)

Connection to the Wi-Fi network

Performing statistical analyses and market studies.
(for the legitimate interest of the controller, Art. 6.1.f GDPR)
Conducting satisfaction and quality surveys.
(for the legitimate interest of the controller, Art. 6.1.f GDPR)
(for the consent of the data subject, 6.1.a GDPR)

Legal representatives and contact persons

If you are the legal representative or contact person for any of the entities or individuals with whom the Foundation has a relationship, the data controller will process your data to monitor the development of the intended relationship.
(based on the consent of the data subject, 6.1.a GDPR)

How long will we keep your personal data?

It will be kept for no longer than is necessary to maintain the purpose of the processing or for as long as there are legal requirements governing its custody, and when it is no longer necessary for this purpose, it will be deleted using appropriate security measures to ensure the anonymisation or complete destruction of the data.

Who do we provide your personal data to?

No communication of personal data to third parties is envisaged, except, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the data controller has signed the confidentiality and data processor contracts required by current privacy regulations.

Do we carry out international transfers?

In accordance with the provisions of Article 44 of the GDPR, authorisation for the international transfer of data to a country that has not been declared as a country with an adequate level of protection may only be granted if sufficient guarantees are obtained. Thus, authorisation may be granted if the data controller provides a written contract between the data exporter and the data importer, setting out the necessary safeguards for the protection of data subjects and guaranteeing the exercise of their rights.

The data controller may use the services of providers that have servers or offices in other locations and, therefore, these transfers may be carried out. For an up-to-date list of providers, please consult the data controller or visit info@caneduardo.com.

What are your rights?

The rights of the user are:

Right to withdraw consent at any time.
Right of access, rectification, portability and deletion of your data, and of limitation or opposition to its processing.
Right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.

Contact details for exercising your rights:
Restaurante Casa Eduardo, S.L. C/ Contramuelle-mollet 3a travesía s/n, – 07012 Palma (Illes Balears). E-mail: info@caneduardo.com

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

By ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, users expressly, freely and unequivocally accept that their data is necessary for the provider to respond to their request, with the inclusion of data in the remaining fields being voluntary. The user guarantees that the personal data provided to the data controller is accurate and is responsible for communicating any changes thereto.

The data controller informs that all data requested through the website is mandatory, as it is necessary for the provision of an optimal service to the user. If all the data is not provided, it cannot be guaranteed that the information and services provided will be completely tailored to your needs.

If, by any means, you provide us with personal data of other people, the data controller warns that you must do so with their consent and have informed them in advance of the contents of this Privacy Policy. Likewise, the data controller undertakes to provide any third party whose data you provide us with the relevant information, in accordance with the provisions of Article 14 of the General Regulation.

3. SECURITY MEASURES

In accordance with the provisions of current regulations on personal data protection, the data controller complies with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby data is processed in a lawful, fair and transparent manner in relation to the data subject and is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.

The data controller guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of users and has provided them with the appropriate information so that they can exercise them.

For more information on privacy guarantees, you can contact the data controller at Restaurante Casa Eduardo, S.L. C/ Contramuelle-mollet 3a travesía s/n, – 07012 Palma (Balearic Islands). Email: info@caneduardo.com

4. VALIDITY

This privacy policy is valid from 07/02/2023

The data controller reserves the right to modify this policy to adapt it to future legislative or jurisprudential updates that may be applicable, or for other technical, operational, commercial, corporate, etc. reasons. If, as a result of the changes, the rights of users are affected, the data controller undertakes to inform them of the reasons.

Web diseñada y desarrollada por Mokuto y Think Different