Data Protection Policy
In accordance with Regulation (EU) 2016/679 of the Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of their personal data and the free movement thereof, and with Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights, the Management of this FRANCISCO JAVIER LÓPEZ RIVERIEGO informs customers, users and the general public of the following aspects:
For any question in this matter, the client can contact the Data Protection Officer with postal address at Avenida Fuente San Francisco s/n, Ubrique, CP 11600, CADIZ.
You may also contact the Data Protection Officer by sending an e-mail to the following address: firstname.lastname@example.org
Who is responsible for processing your data?
A) If you are a user of FRANCISCO JAVIER LÓPEZ RIVERIEGO, the person responsible for the processing of your data is:
|Person Responsible for Treatment||Location|
|FRANCISCO JAVIER LÓPEZ RIVERIEGO
NIF 25581885 C
|Avenida Fuente San Francisco, s/n, Ubrique, Cadiz.|
B) In case we have your data due to having requested information about any of the services and/or products offered through the web pages of FRANCISCO JAVIER LÓPEZ RIVERIEGO, the person responsible for the treatment of your data is FRANCISCO JAVIER LÓPEZ RIVERIEGO, with address at Avenida Fuente San Francisco s/n, Ubrique, CP 11600, CADIZ.
What personal data do we treat and where do they come from?
On the occasion of your relationship with us, the following categories of personal data may be processed:
- Identifying data, customer contact (including signature, image,);
- Personal characteristics, social circumstances;
- Transactional data (payments, deposits, transfers, debits)
The data comes from the interested party.
For what purpose do we process your personal data?
Personal data may be processed by the data controllers for the following purposes:
1.- Provision of service: your personal data will be processed in order to provide you with the required service, for example:
- To attend any communication with FRANCISCO JAVIER LÓPEZ RIVERIEGO;
- Manage any incident or claim filed by the customer;
- To carry out surveys with the objective of knowing your opinion about the attention received and that will be used only to improve and develop our services;
2.- Attention to requests for information, complaints, suggestions, claims, exercise of data protection rights, etc.: in these cases your data will be processed for the purpose of managing and processing the request, by any means, including telephone and/or electronic communications.
3.- Fulfilment of legal obligations: it may be necessary to process personal data in order to comply with the corresponding legal requirements. Specifically, to comply with legislation on data protection, tax, labor, etc.
4.- Formalization and execution of the contract: the patient's personal data are processed for the purpose of managing the contractual relationship with the client.
5.- Sending commercial communications by any means in the event of additional consent: if you explicitly consent, your data may be transferred for the purpose of informing you by any means for promotional and advertising purposes about restaurants, services, products or events related to FRANCISCO JAVIER LÓPEZ RIVERIEGO (in no case will your data be used to send advertising content outside FRANCISCO JAVIER LÓPEZ RIVERIEGO).
The data collected will be treated for the specified purposes and in no case in a way incompatible with these purposes.
In any case, we treat your data to always attend you with the same level of quality, regardless of the channel you use to communicate with us (website, mobile applications either face-to-face, telephone or telematic).
What is the legitimacy of the processing of your data?
|Purpose||Basis for Treatment|
|Provision of service||Treatment necessary for the performance of a service to which the data subject is a party; treatment based on the data subject's consent.|
|Attention of requests||Treatment based on the consent of the data subject and/or the legitimate interest of the data controller.|
|Compliance with legal obligations||Treatment necessary for compliance with a legal obligation applicable to the controller|
|Formalization and execution of the contract||Treatment necessary for the execution of a contract to which the interested party is a party|
|Sending of commercial communications||Treatment based on the consent of the interested party|
How long will we keep your data?
In general, your data will only be kept for the time strictly necessary for the purpose for which they were collected.
The personal data provided, as well as those derived from the commercial relationship will be kept for the appropriate time in each case, and at least five years from the date of provision of the service, unless regional regulations and/or specifies a minimum period of conservation greater than that indicated, in which case the provisions of the applicable regulations will be complied with.
Once the aforementioned minimum period has been exceeded, and the commercial and contractual relationship has ended, the data controller shall keep their data duly blocked and pseudoanonymised for the term of the periods corresponding to the legal prescription.
Personal data provided for the purpose of managing any request for information, complaint, suggestion, claim, exercise of data protection rights, etc., will be kept for the time necessary to process the request, and in any case for the time legally established, as well as during the period necessary for the formulation, exercise or defence of claims.
The data processed for the fulfilment of legal obligations will be kept for the time established in the applicable legislation.
The data collected for the formalization and execution of the contract will be kept for the duration of the contractual relationship, as well as for the period necessary for the formulation, exercise or defense of claims, at least five years.
The data processed for the sending of commercial communications will be kept until the interested party does not revoke the consent and / or exercise their rights of opposition and / or suppression.
To which addressees will your data be communicated?
In order to guarantee an adequate provision of the service, it is necessary for certain service providers and/or entities of the group to process data on behalf of the data controller and as data processors of their personal data. These entities may be, for example, auditing, physical security, archiving, storage or digitisation of information, destruction of documentation, legal advice services, and computer services, etc.
Your personal data will not be communicated to third parties except for legal obligation, vital interest or previous consent of the interested party.
All information provided to us will be treated confidentially and in strict compliance with the security obligations necessary to prevent access by unauthorized third parties.
What are your rights when you provide us with your data?
You may exercise your rights of access; rectify inaccurate data; request deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected; in certain circumstances you may also request limitation of the processing of your data, in which case we will only keep them for the exercise or defence of claims; finally, and for reasons related to your particular situation, you may also exercise the right of opposition and portability. You may also revoke, at any time, your consent to the processing of your data.
The exercise of the rights as well as the revocation of the consent for the processing of your data are free of charge, except in the cases of art. 12.5 of Regulation (EU) 679/2016.
If you are a customer of FRANCISCO JAVIER LÓPEZ RIVERIEGO, you may exercise your rights in person at the customer service, by post addressed to "Customer Service" of your FRANCISCO JAVIER LÓPEZ RIVERIEGO, with the reference "data protection rights", providing a photocopy of your ID card or equivalent document and indicating the right you wish to exercise.
In addition, we inform you of the possibility of submitting a complaint to the competent control authority, in accordance with the procedure that corresponds to the specific case.