I. PRIVACY AND DATA PROTECTION POLICY
In accordance with current legislation, Restaurantes y tiendas Sant Cugat (hereinafter also the Website) undertakes to adopt the technical and organisational measures necessary for a level of security appropriate to the risk of the data collected.
Laws covered by this privacy policy
This privacy policy complies with current Spanish and European legislation on the protection of personal data online. In particular, it complies with:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
Royal Decree 1720/2007 of 21 December approving the Regulation implementing Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the data controller
The controller of the personal data collected on Restaurantes y tiendas Sant Cugat is Carlos Aranguren Vázquez, tax ID (NIF) 45790146K (hereinafter, the Controller). Contact details:
Address:
Contact phone: 676168606
Contact email: cugatgourmet@gmail.com
Personal data records
In accordance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by Restaurantes y tiendas Sant Cugat through the forms on its pages will be included and processed in our records in order to facilitate, speed up and fulfil the commitments between Restaurantes y tiendas Sant Cugat and the User, to maintain the relationship established in the forms the User completes, or to respond to a request or enquiry. Likewise, in accordance with the GDPR and the LOPD-GDD, unless the exception in Article 30.5 GDPR applies, a record of processing activities is kept which specifies, by purpose, the processing carried out and the other circumstances required by the GDPR.
Principles applicable to the processing of personal data
The processing of the User’s personal data will be subject to the following principles set out in Article 5 GDPR and Article 4 et seq. of Organic Law 3/2018:
Lawfulness, fairness and transparency: the User’s consent will always be required, after fully transparent information about the purposes for which the data are collected.
Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes.
Data minimisation: only the personal data strictly necessary for the purposes of processing will be collected.
Accuracy: personal data must be accurate and kept up to date.
Storage limitation: personal data will only be kept in a form that allows the User to be identified for as long as necessary for the purposes of processing.
Integrity and confidentiality: personal data will be processed in a way that ensures their security and confidentiality.
Accountability: the Controller is responsible for ensuring compliance with the above principles.
Categories of personal data
The only categories of data processed on Restaurantes y tiendas Sant Cugat are identification data. Special categories of personal data within the meaning of Article 9 GDPR are never processed.
Legal basis for processing
The legal basis for processing personal data is consent. Restaurantes y tiendas Sant Cugat undertakes to obtain the User’s express and verifiable consent to process their personal data for one or more specific purposes.
The User may withdraw consent at any time, and withdrawing it will be as easy as giving it. As a general rule, withdrawing consent will not affect use of the Website.
Whenever the User must or may provide data through forms to make enquiries, request information or for reasons related to the Website’s content, they will be told if completing any field is mandatory because the data are essential for the operation requested.
Purposes of processing
Personal data are collected and managed by Restaurantes y tiendas Sant Cugat in order to facilitate, speed up and fulfil the commitments between the Website and the User, to maintain the relationship established in the forms the User completes, or to respond to a request or enquiry.
The data may also be used for commercial personalisation, operational and statistical purposes and activities within the business purpose of Restaurantes y tiendas Sant Cugat, as well as for data extraction and storage and marketing studies to tailor the Content offered to the User and improve the quality, operation and navigation of the Website.
When personal data are obtained, the User will be informed of the specific purpose or purposes for which they will be processed, that is, how the information collected will be used.
Data retention periods
Personal data will only be kept for the minimum time necessary for the purposes of processing and, in any case, only for the following period: 18, or until the User requests their deletion.
When personal data are obtained, the User will be informed of how long they will be kept or, where that is not possible, of the criteria used to determine that period.
Recipients of personal data
The User’s personal data will be shared with the following recipients or categories of recipients:
If the Controller intends to transfer personal data to a third country or international organisation, the User will be informed, when the data are obtained, of the third country or organisation concerned and of the existence or absence of an adequacy decision by the Commission.
Personal data of minors
In accordance with Article 8 GDPR and Article 7 of Organic Law 3/2018, only persons over 14 may lawfully consent to the processing of their personal data by Restaurantes y tiendas Sant Cugat. For children under 14, parental or guardian consent is required, and processing will only be lawful to the extent they have authorised it.
Confidentiality and security of personal data
Restaurantes y tiendas Sant Cugat undertakes to adopt the technical and organisational measures necessary for a level of security appropriate to the risk of the data collected, so as to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised disclosure of or access to such data.
However, since Restaurantes y tiendas Sant Cugat cannot guarantee that the internet is impregnable or that hackers or others will never access personal data fraudulently, the Controller undertakes to notify the User without undue delay of any personal data breach likely to result in a high risk to the rights and freedoms of natural persons. Under Article 4 GDPR, a personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
The Controller will treat personal data as confidential and undertakes to ensure, through a legal or contractual obligation, that this confidentiality is respected by its employees, associates and anyone to whom the information is made available.
Rights arising from the processing of personal data
The User may exercise the following rights before the Controller of Restaurantes y tiendas Sant Cugat, as recognised in the GDPR and Organic Law 3/2018:
Right of access: the right to obtain confirmation of whether Restaurantes y tiendas Sant Cugat is processing their personal data and, if so, information about the specific data and the processing carried out, including the available information on the source of the data and the recipients of any disclosures made or planned.
Right to rectification: the right to have inaccurate or, given the purposes of processing, incomplete personal data corrected.
Right to erasure (“right to be forgotten”): unless current legislation provides otherwise, the right to have their personal data erased when they are no longer necessary for the purposes for which they were collected or processed; when the User has withdrawn consent and there is no other legal basis; when the User objects and there is no other legitimate ground to continue; when the data have been processed unlawfully; when erasure is required by a legal obligation; or when the data were obtained through a direct offer of information society services to a child under 14. In addition, the Controller, taking into account available technology and cost, must take reasonable steps to inform other controllers processing the data of the request to erase any links to them.
Right to restriction of processing: the right to restrict processing when the User contests the accuracy of their data; when processing is unlawful; when the Controller no longer needs the data but the User needs them for legal claims; and when the User has objected to processing.
Right to data portability: where processing is automated, the right to receive their personal data from the Controller in a structured, commonly used and machine-readable format and to transmit them to another controller. Where technically possible, the Controller will transmit the data directly to that other controller.
Right to object: the right to have Restaurantes y tiendas Sant Cugat not process, or stop processing, their personal data.
Right not to be subject to a decision based solely on automated processing, including profiling, unless current legislation provides otherwise.
The User may exercise these rights by written communication to the Controller with the reference “RGPD-www.cugatgourmet.com”, stating:
The User’s full name and a copy of their ID document. Where representation is allowed, the representative must also be identified in the same way and provide proof of representation. The ID copy may be replaced by any other legally valid means of proving identity.
The request, with the specific reasons or the information to be accessed. Address for notifications.
Date and signature of the applicant.
Any document supporting the request.
The request and any attachments may be sent to the following address and/or email: Postal address:
Email: cugatgourmet@gmail.com
Links to third-party websites
The Website may include hyperlinks to third-party websites other than Restaurantes y tiendas Sant Cugat, which are therefore not operated by Restaurantes y tiendas Sant Cugat. The owners of those websites have their own data protection policies and are responsible, in each case, for their own records and privacy practices.
Complaints to the supervisory authority
If the User believes there is a problem or breach of current legislation in the way their personal data are processed, they have the right to effective judicial protection and to lodge a complaint with a supervisory authority, in particular in the State of their habitual residence, place of work or place of the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/).
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
The User must have read and agree with the personal data protection terms in this Privacy Policy and accept the processing of their personal data so that the Controller can process them in the manner, for the periods and for the purposes stated. Using the Website implies acceptance of its Privacy Policy.
Restaurantes y tiendas Sant Cugat reserves the right to change its Privacy Policy at its own discretion or as a result of changes in legislation, case law or the guidance of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User, who is advised to check this page regularly.
This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights.
This message is intended solely for its recipient. If you have received it in error, please let us know by email and we will look into the cause.
The email may also contain confidential documents and/or information belonging to us or third parties, so please delete it, together with any attachments, to prevent further disclosure of confidential information.
In accordance with Regulation (EU) 2016/679 of 27 April 2016, you may exercise your rights of access, rectification, erasure and objection through: cugatgourmet.com
Finding where to eat in Sant Cugat has never been easier
