Privacy Policy

IDENTIFICATION OF THE DATA CONTROLLER

In accordance with the current regulations on Personal Data Protection, we inform you that the data controller of your personal data is Duques de Bergara, S.L.U.

You can contact us through our Data Protection Officer (DPO) at the following email address: dpo.cataloniahotels@lener.es or by sending a written request addressed to the “Data Protection Officer” at the following postal address: Calle Córcega, 323 (08037), Barcelona, Spain.

OBLIGATION TO PROVIDE YOUR PERSONAL DATA

The personal data we will request from you in the forms accessible from the Website or App are generally mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if the data is not provided or is not provided correctly, we will not be able to attend to your service request.

The User:

• Guarantees that they are of legal age or legally emancipated, fully capable, and that the data they provide is true, accurate, complete, and up to date. For this purpose, the User will keep the provided information appropriately updated. For the requested services, the User must be over 16 years old.

INFORMATION AND CONSENT

By reading this Privacy Policy, the User is informed about how we request, collect, process, and protect the personal data provided through the website https://ebocarestaurants.com/ (hereinafter, the “website”) and any other data that may be provided in the future through any request or form, or any other legally valid means.

As a User, you should read this Privacy Policy with special attention, which we hope is clear and simple for your understanding and facilitates and determines your free and voluntary desire to provide us with your personal data.

WHAT PERSONAL DATA WILL WE PROCESS?

We will process the following categories of data, depending on the request made by the User.

For example, we will ask for your phone number, email address, and your first and last name when you request a reservation on our web service, and you will be able to accept our Privacy Policy by checking the checkbox provided in our reservation form.

• Identifying data: name, surname, date of birth, and, if applicable, ID number or document proving your identity.

• Contact details: Email address, mobile phone, postal address. • Exceptionally, data regarding food intolerances or allergies in cases related to our Catering service. If you provide us with third-party data, you guarantee that you have the consent of the third party and commit to informing the data subject of the information contained in this Privacy Policy, exempting the data controller from any liability regarding the provision of third-party data. In any case, we will carry out the necessary verifications and due diligence measures in accordance with Data Protection regulations.

WHAT WILL BE THE PURPOSE OF THE PROCESSING OF YOUR DATA? 

We inform you that the data we request is adequate, relevant, and strictly necessary for the purpose for which it is collected. Depending on the User’s requests, the personal data collected will be processed by us for the following purposes:

• To manage the reservations made and the management of your requests and inquiries.

• To manage the sending of personalized commercial communications, by electronic and/or conventional means, in cases where the User expressly consents by checking the corresponding box or shows their opposition to such processing.

• To manage your contact or information requests through the channels provided for these purposes.

WHAT IS THE LEGITIMACY OF DATA PROCESSING? 

The main basis for legitimizing the processing is the execution of the contract related to the services requested by the User.

The basis for legitimization for informational purposes regarding updates on our products and services or those of third parties, offers, events, or relevant news for Users related to the service provided and/or with food, image, fashion products, and the hotel, tourism, and transportation sectors will be consent. 

These purposes linked to the provision of consent will only be carried out if the User consents to the processing of their contact data, through SMS or phone communication, when the User consents by checking the box provided for these treatments in the specific form. 

In any case, the User may revoke their consent at any time, through the procedure informed in the section on Exercising Rights, indicating their refusal to receive these communications via the unsubscribe option provided in each of the commercial communications sent. Furthermore, if the User withdraws their consent for any of the treatments, it will not affect the legality of the treatments carried out prior to that.

 Additionally, in cases where it is necessary to process the User’s data to comply with a legal obligation, the processing would be legitimized as it is necessary for fulfilling those purposes. Moreover, if the processing is carried out for the purpose of conducting surveys and/or evaluations regarding the quality of the services provided by the data controller, it will be based on the legitimate interest of the controller.

WHO WILL WE COMMUNICATE YOUR DATA TO? 

The User’s data may be communicated to:

• Participating companies or the business group Catalonia Hotels & Resorts and entities operating the hotels managed by the business group, solely for internal administrative purposes (www.cataloniahotels.com);

• Entities operating the hotels managed by CATALONIA HOTELS & RESORTS, solely for internal administrative purposes and/or for the purposes previously indicated.

• Suppliers of the data controller or hotel operators necessary for the proper fulfilment of legal obligations and/or for the purposes previously indicated.

• Partners and collaborating companies for the fulfilment of the purposes previously indicated and/or, if the User authorizes it, for sending commercial communications, informative content, events, or enrolment in loyalty programs.

• Public Administrations in cases authorized by law. The recipients indicated in this section may be located inside or outside the European Economic Area, and in the latter case, the international data transfers are duly legitimized.

HOW LONG WILL WE KEEP YOUR DATA? 

The User’s data will be retained for the time necessary to fulfil each purpose or until the User requests their cancellation, opposes the processing, or revokes their consent.

 HOW TO EXERCISE YOUR RIGHTS? 

The User can send a written request to the Data Controller, Duques de Bergara, S.L.U., at the postal address Calle Córcega, 323 (08037), Barcelona, Spain, or by email to dpo.cataloniahotels@lener.es, in both cases with the reference “Data Protection,” attaching a copy of their valid identity document or passport, at any time and free of charge, to:

• Revoke the consents granted.

• Oppose the processing.

• Receive confirmation on whether we are processing their personal data

• Access their personal data.

• Rectificar los datos inexactos o incompletos.

• Rectify inaccurate or incomplete data.

• Request the deletion of their data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

• Obtain the limitation of data processing when any of the conditions provided for in data protection regulations are met.

Additionally, the User is informed that they may file a complaint regarding the protection of their personal data with the competent supervisory authority or the Spanish Data Protection Agency (www.aepd.es).