Privacy Policy

IDENTIFICATION OF THE DATA CONTROLLER

In accordance with current Personal Data Protection regulations, we inform you that the data controller of your personal data is HOTELES CATALONIA, SAU.

You may contact us through our Data Protection Officer (DPO) at dpo.cataloniahotels@lener.es, or by sending a written communication addressed to the “Data Protection Officer” at the following postal address: Calle Córcega, 323 (08037), Barcelona, Spain.

OBLIGATION TO PROVIDE YOUR PERSONAL DATA

The personal data requested in the forms available on the Website are generally mandatory (unless otherwise specified) in order to fulfil the purposes for which they are collected. If the data is not provided or is provided incorrectly, we will be unable to process your request.

The User:

• Guarantees that they are of legal age or legally emancipated, fully capable, and that the data provided is true, accurate, complete, and up to date.
• Must keep their information duly updated.
• Must be at least 16 years old to access the services.

INFORMATION AND CONSENT

By reading this Privacy Policy, the User is informed about how we request, collect, process, and protect personal data provided through the website https://ebocarestaurants.com/ (hereinafter, the “website”) and any data that may be provided in the future.

The User must read this Policy carefully as it aims to be clear and easy to understand, ensuring informed and voluntary decision-making regarding the provision of personal data.

WHAT PERSONAL DATA DO WE PROCESS?

Depending on the User’s request, we will process the following categories of data:

• Identification data: name, surname, date of birth.
• Contact data: email address, mobile phone, postal address.
• Special categories (exceptionally): food intolerances or allergies exclusively for proper restaurant service. These data will not be stored or retained.

If providing third-party data, the User guarantees they have obtained the corresponding consent and undertakes to inform said third parties of this Policy.

FOR WHAT PURPOSES WILL WE PROCESS YOUR DATA?

Your data will be used for the following purposes:

• Managing reservations and requests.
• Sending personalised commercial communications (if expressly authorised).
• Managing contact or information requests.

WHAT IS THE LEGAL BASIS FOR PROCESSING?

• Performance of a contract: for the requested services.
• Consent: for commercial or informational communications.
• Legal obligation: when required by law.
• Legitimate interest: to carry out surveys or quality assessments.

The User may revoke consent at any time.

WHO WILL RECEIVE YOUR DATA?

User data may be shared with:

• Companies within the Catalonia Hotels & Resorts group.
• Hotel operating entities.
• Service providers necessary to fulfil obligations.
• Partners or collaborators (if authorised by the User).
• Public authorities when legally required.

International data transfers may occur with appropriate safeguards.

HOW LONG WILL WE KEEP YOUR DATA?

Data will be retained for the time necessary to fulfil the purposes for which they were collected and for the legally established timeframes. Afterwards, they will be blocked and deleted.

HOW CAN YOU EXERCISE YOUR RIGHTS?

Users may exercise their ARSULIPO rights (access, rectification, erasure, restriction, portability, and objection), as well as the right not to be subject to automated decisions, by:

Sending a written request to C/ Córcega 323, 08037 Barcelona, or

Emailing dpo.cataloniahotels@lener.es.

A complaint may also be filed with the Spanish Data Protection Agency: www.aepd.es