INTRODUCTION
Your privacy matters to us, so in this document we explain what data we collect from users, how we use it and for what purpose, among other points.
For your information: we will never ask for more information than we genuinely need for the services requested; we will never share it with third parties, except where required by law or with your prior authorisation; and we will never use your data for any purpose not previously stated.
As a user, you should read this Privacy Policy carefully on a regular basis, and whenever you enter your personal data, since this document may be amended. The provider may modify any information appearing on the website in order to comply with the applicable legislation or to update the policy, without any obligation to give advance notice or to inform users of such changes, publication on the provider’s website being sufficient.
DATA CONTROLLER:
FRAYGA, S.A. with Tax ID A08679441, whose registration details are recorded in Barcelona, Protocol 197, Date 17/02/1981, Journal 4459, Entry 3789; TURISMO, HOTELES Y RESTAURANTES, S.A. with Tax ID A08586133, Protocol 3893, Date 30/07/1979, Journal 335, Entry 190; HORIZONTES ESTRATÉGICOS, S.L. with Tax ID B61861472, Protocol 64, Date 15/01/1999, Journal 742, Entry 843; CHIRINGUITO DE MONCHO’S, S.L. with Tax ID B60778370, Protocol 242, Date 08/02/1995, Journal 634, Entry 91; PLACERES INTELIGENTES, S.L. with Tax ID B61657490, Protocol 786, Date 30/04/1998, Journal 718, Entry 3581; MONCHO’S HOUSE, S.L. with Tax ID B60822509, Protocol 723, Date 22/03/1995, Journal 6370, Entry 132; LA TABERNA DEL CURA, S.L. with Tax ID B60518446, Protocol 353, Date 18/02/1994, Journal 6131, Entry 387; MONCHO’S INICIATIVAS 2000, S.L. with Tax ID B60518396, Protocol 355, Date 18/02/1994, Journal 6131, Entry 384; MNCATERING 98, S.L. with Tax ID B61418141, Protocol 1385, Date 06/06/1997, Journal 694, Entry 990; SEÑORÍO DE SILVA, S.L. with Tax ID B60518370, Protocol 352, Date 18/02/1994, Journal 6131, Entry 386; IMAGINACIÓN Y NEGOCIOS, S.L. with Tax ID B62489521, Protocol 278, Date 24/03/2021, Journal 800, Entry 721; hereinafter all of them identified as EUROPA CAFÉ.
Postal address: Gran de Gràcia, 81, 08012, Barcelona
Email: lopd@monchos.com
Data Protection Officer: lopd@monchos.com
DPO contact: lopd@monchos.com
EUROPA CAFÉ, as the party responsible for this website, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, with the other data protection legislation in force, and with Spanish Act 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary technical and organisational security measures to guarantee and protect the confidentiality, integrity and availability of the data entered.
HOW WE OBTAIN DATA, WHAT DATA WE COLLECT AND FOR WHAT PURPOSE:
The data we collect, how we obtain it and the purpose of the processing are as follows:
- Booking form:
- Data required: first name, surname, email, telephone, country
- Purpose: to manage the booking
- Legal basis: the user’s consent
- Newsletter subscription forms:
- Data required: email
- Purpose: to send you commercial information of interest about our products and/or services by email, SMS, social media or any other electronic or physical means, where the User has expressly consented to this;
- Legal basis: the user’s consent
- Performing the contractual relationship and the administrative, tax and accounting management of a similar nature required under the legislation in force
- Data required: first name and surname, telephone, address, ID number, email, signature
- Purpose: to carry out internal commercial, tax and administrative management
- Legal basis: the data subject’s consent and the contractual relationship
The photographs published on the website are the property of EUROPA CAFÉ.
You may withdraw your consent at any time by sending a message with the subject line “Unsubscribe” to the email address given above.
In accordance with the LSSICE, EUROPA CAFÉ does not engage in SPAM practices and therefore does not send commercial emails that have not been previously requested or authorised by the User. Accordingly, in every communication the user receives from the provider, they have the option of withdrawing their express consent to receive our communications.
We will not process your personal data for any purpose other than those described, except where required by law or by court order.
You will not be subject to decisions based on automated processing that produce effects on your data.
DATA RETENTION PERIOD:
Your data will be kept for as long as the commercial relationship with us lasts, or until you exercise your right to erasure, objection or restriction of processing. We will, however, keep your data for the periods laid down in the applicable legal provisions.
RECIPIENTS OF DISCLOSURES OR TRANSFERS:
EUROPA CAFÉ carries out international data transfers through its use of Cheerfy, a multi-platform application for restaurant management. It will also provide information to the police and security forces under a court order or where required by law, without prejudice to its ability to block or cancel your account where there may be evidence that the user has committed an offence. The information provided will be only that held by the provider at the time.
The information you provide through this website will be hosted on EUROPA CAFÉ‘s servers, contracted from the company that provides the website hosting service. The processing of the entity’s data is governed by a data processor agreement between the provider and that company.
The provider also uses certain tools to deliver services necessary for the running of its business, which may store your data. Those tools are as follows:
Google Analytics: to analyse and measure how users use the website by means of cookies. The information these cookies generate and collect about that use (including the IP address) will be transmitted directly to and stored by Google Inc., located at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”), on its servers in the United States.
Email marketing: the following is used for the email marketing service:
- Mailchimp, The Rocket Science Group LLC, 675 Ponce De Leon Ave NE Ste 5000, Atlanta, GA, 30308-2172, United States, a company of the Intuit, Inc. Group. The Rocket Science Group LLC is certified and listed under the Data Privacy Framework.
Email marketing and multi-platform management for restaurants:
- Cheerfy, LTD, with registered office at 92 Park Street, Camberley, Surrey, GU15 3NY, United Kingdom, is used to manage online orders and for commercial communications.
Restaurant booking management:
Covermanager, Restaurant Booking & Distribution Services S.L., with registered office at Avenida de la Constitución nº 24, 4th floor (41001, Seville).
RIGHTS OF DATA SUBJECTS:
As a user and data subject, you may ask EUROPA CAFÉ to exercise the following rights by submitting a letter to the postal address given at the top of this policy or sending an email to lopd@monchos.com with the subject line: “DATA PROTECTION: RIGHTS OF DATA SUBJECTS”.
Rights:
- Right of access: allows the data subject to find out about and obtain information on their personal data undergoing processing.
- Right to rectification or erasure: allows errors to be corrected and data that proves to be inaccurate or incomplete to be amended.
- Right to cancellation: allows data that is inadequate or excessive to be deleted.
- Right to object: the data subject’s right for their personal data not to be processed or for such processing to cease.
- Restriction of processing: entails marking the personal data held in order to restrict its future processing, for the exercise or defence of claims.
- Data portability: provision of the data undergoing processing to the data subject so that they may transmit it to another controller without hindrance.
- Right not to be subject to automated individual decision-making (including profiling): the right not to be subject to a decision based on automated processing that produces effects on, or significantly affects, the data subject.
As a user, you have the right to withdraw the consent given at any time. Withdrawing consent will not affect the lawfulness of processing carried out before that withdrawal.
You also have the right to lodge a complaint with the supervisory authority if you believe that your rights in relation to the protection of your data may have been infringed (aepd.es).
ADDITIONAL INFORMATION
SECURITY MEASURES:
The data you provide will be treated confidentially. The provider has adopted all the technical and organisational measures and all the levels of protection necessary to guarantee security in the processing of the data and to prevent its alteration, loss, theft, or unauthorised processing or access, in line with the state of technology and the nature of the data stored. It is also guaranteed that the processing and recording of data in files, programs, systems or equipment, premises and centres complies with the integrity and security requirements and conditions laid down in the legislation in force.
LANGUAGE
The language applicable to this privacy policy is Spanish. Accordingly, should there be any contradiction in any of the versions provided in other languages, the Spanish version shall prevail.
SOCIAL MEDIA
Please note that EUROPA CAFÉ may have a presence on social media. The processing of the data of persons who become followers on social media of the official pages of EUROPA CAFÉ (and/or who establish any link or connection through social media) shall be governed by this section, as well as by the terms of use, privacy policies and access rules of the social network in question, previously accepted by the user.
EUROPA CAFÉ will process your data for the purposes of properly managing its presence on the social network, informing you of the provider’s activities, products or services, and for any other purpose permitted by the rules of the social networks.
The publication of the following content is prohibited:
– Content that is presumed unlawful under national, EU or international legislation, or that carries out presumably unlawful activities or contravenes the principles of good faith.
– Content that infringes people’s fundamental rights, is discourteous online, causes annoyance or may generate negative opinions among our users or third parties, and in general any content that EUROPA CAFÉ considers inappropriate.
– And in general, content that contravenes the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, consumer protection and intellectual and industrial property rights.
EUROPA CAFÉ also reserves the right to withdraw, without prior notice, any content deemed inappropriate from the website or from the corporate social network.
In any event, if you send personal information through the social network, EUROPA CAFÉ shall be exempt from liability in relation to the security measures applicable to that platform, and the user, should they wish to know them, must consult the specific terms of the network in question.
The processing of data of people who submit an enquiry via EUROPA CAFÉ‘s WhatsApp shall be governed by this section, as well as by the terms of use, privacy policies and access rules of the application in each case, previously accepted by the user. EUROPA CAFÉ will process your data for the purpose of properly handling your enquiry, as well as for any other purpose related to the administrative management of the service. Your data is shared with WhatsApp Ireland Limited, whose technical security measures ensure the confidentiality, integrity and availability of your information, as stated in its own privacy policy, and with WhatsApp LLC, a company located in the USA and adhering to the Data Privacy Framework approved by the European Commission. No other disclosures are planned, except where required by law or court order. Your data will be kept for as long as the purpose for which it was obtained remains and, once no longer necessary, it will be duly blocked, archived and kept for the legally established period. The use of EUROPA CAFÉ‘s WhatsApp to send content other than that necessary to answer the enquiry, or content that is unlawful under national or international legislation, infringes people’s fundamental rights and, in general, contravenes the principles of legality, honesty, responsibility, protection of privacy, consumer protection and intellectual and industrial property rights, is prohibited.
REMARKETING AND RETARGETING
Remarketing is a system that allows tailored or personalised ads to be created for users who have previously visited a website, in this case ours. It is a solution associated with Google Ads aimed at achieving a better return on investment (ROI). Remarketing places a cookie on the user’s computer, and the provider’s banner is shown on sites affiliated with Google AdSense that display image ads.
Retargeting is the technique used to show image ads on other websites, through a tracking system, to a user who has left our site without completing a process we wanted them to finish (registration, purchase, request, etc.). These ads are mainly aimed at the conversion goal of our website.
The information we collect through these functions is gathered by cookies from Meta, “X”, DoubleClick and Google Ads. You can find out what data these cookies collect in the privacy policy of each service:
If you do not want this information to be collected by these cookies, disable the use of Google cookies through Google’s ad settings. You can also disable the use of a third-party provider’s cookies through the Network Advertising Initiative opt-out page.
This type of service allows interaction with social networks or other external platforms. The interactions and information obtained by the provider will always be subject to the user’s privacy settings on each social network. If a service allowing interaction with social networks is installed, it may collect web traffic data relating to the pages on which it is installed, even if users do not use the service.
META ADS
The provider’s website uses Meta Ads, Meta’s advertising platform, which allows campaigns and ads to be created. When creating an ad, the audience can be segmented by:
- Location;
- Demographic data (age, sex, etc.);
- Interests (activities, hobbies, etc.);
- What they buy online and through other channels;
- Etc.
From the moment the user enters their data in the form provided to join the newsletter, the data obtained through Meta Ads is subject to this privacy policy. Information from Meta will never be used for any other purpose.
VIDEO SURVEILLANCE
Images are captured in order to protect the safety of people and property, as well as the premises.
Users are informed by means of a sufficiently visible video surveillance sign placed before the camera, stating that the premises are under video surveillance.
No disclosures are planned, except to the State Security Forces, and no international data transfers will take place.
Images will be kept for a maximum of 30 days from capture. Once this period has elapsed, the images must be erased in accordance with current legislation, which provides that “erasure shall result in the data being blocked, kept solely at the disposal of the Public Administrations, Judges and Courts, to address any liabilities arising from the processing, for the limitation period thereof. Once that period has elapsed, the data must be deleted.”
CHANGES TO THIS PRIVACY POLICY
EUROPA CAFÉ reserves the right to amend this policy in order to adapt it to legislative or case-law developments.
REVOCABILITY
The consent given, both for the processing and for the disclosure of data subjects’ data, may be revoked at any time by notifying EUROPA CAFÉ on the terms set out in this Policy for the exercise of rights. Such revocation shall in no case have retroactive effect.
LEGISLATION
As a general rule, relations between EUROPA CAFÉ and the Users of its online services present on this website are subject to Spanish legislation and jurisdiction, to which the parties expressly submit, with the Courts and Tribunals of Barcelona being competent to resolve all disputes arising from or relating to their use.
