Privacy Policy

1. General Information

In compliance with current regulations on personal data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (LOPD-GDD), we inform you about the processing of your personal data.

2. Data Controller

3. Data We Collect

The personal data we may collect includes:

• Contact details (name, phone, email) when you contact us for bookings or inquiries
• Booking information (date, time, number of diners, dietary preferences)
• Basic browsing data (IP address, browser type, pages visited)

4. Purpose of Processing

Your personal data will be processed for the following purposes:

• Management of bookings and restaurant services
• Customer service and query resolution
• Communications related to our services
• Compliance with legal obligations
• Improvement of our services and user experience

5. Legal Basis

The processing of your data is based on:

• Contractual performance: For the provision of restaurant services and booking management
• Consent: For promotional communications (when applicable)
• Legitimate interest: For the improvement of our services
• Legal compliance: To comply with tax and accounting obligations

6. Data Retention

Your personal data will be kept for the time necessary to fulfill the purposes for which they were collected and, in any case, for the legally established periods. Booking data will be kept for 6 years to comply with tax obligations.

7. Data Recipients

Your data will not be transferred to third parties, except legal obligation. They may only be communicated to:

• Public administrations when legally required
• Technology service providers under strict confidentiality conditions

8. Your Rights

You have the right to:

• Access: Know what data we have about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Restriction: Restrict the processing of your data
• Portability: Receive your data in structured format
• Objection: Object to the processing of your data

To exercise these rights, you can contact us at info@banyslagavina.cat or at the postal address indicated above.

9. Supervisory Authority

If you consider that the processing of your data does not comply with the regulations, you may file a complaint with the Spanish Data Protection Agency (AEPD) through its electronic headquarters (www.aepd.es) or at its postal address: C/ Jorge Juan, 6, 28001 Madrid.

11. Security

We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure or accidental destruction.

12. Modifications

We reserve the right to modify this Privacy Policy. Any changes will be published on this page with the date of last update.