Privacy Policy

In accordance with the new European Data Protection Regulation 679/2016 (GDPR), we are required to inform you of how we process your personal data. In this regard, we would like to remind you that:

Data Controller

Adleo Hostelería S.L. (“Bárbaro”).
CIF: B76700871
Address: Av La Salle, 40. 38005 Santa Cruz de Tenerife.

Purpose of processing

• To process orders, bookings and purchases made through the website or social media (including WhatsApp and similar messaging applications), to manage, maintain, develop and oversee the relationship with the user, and to handle enquiries.
• To carry out satisfaction surveys.
• Accounting, tax and administrative management.
• To manage CVs received through the “Work with us” section.
• Marketing communications.

Legal basis for processing

• Performance of a contract or the taking of pre-contractual steps.
• Legitimate interest.
• Consent.

Retention of your personal data

The personal data you provide to us will be retained for as long as necessary to fulfil the purposes for which it is processed.

Recipients

Service providers who assist or support us, or those with whom we have a legal obligation.

Your rights

You may exercise your rights of access, rectification, erasure, restriction or objection to the processing of your data, as well as data portability, as set out in this “Privacy Policy”.

1. Who is responsible for processing your personal data?

Bárbaro is the data controller responsible for processing the personal data collected through the websites https://barbarorestaurante.es/ including any of their subdomains or sections, as well as the social media accounts linked to them, including WhatsApp and similar messaging applications (hereinafter, the “Website”), and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), and Spanish Organic Law 3/2018 of 5 December (“LOPDGDD”, the Spanish data protection act).

Access to and use of the Website imply that the user has read and fully accepts this Privacy Policy. The date at the beginning of this Privacy Policy indicates the date of its last revision, which shall apply from the date of its publication. Bárbaro may amend this Privacy Policy, and it is therefore recommended that you review the Privacy Policy regularly.

Likewise, with regard to access to and use of the Website, the Legal Notice applies and, in the event of the purchase of products, the General Terms and Conditions of Sale.

You may contact Bárbaro through any of the following means of contact:

• The “Contact” section of the Website.

2. What are the purposes of processing and their respective legal bases?

2.1 Processing orders, bookings and purchases through the Website; managing, maintaining, developing and overseeing the relationship with the user; and handling enquiries.

Purpose: To manage, fulfil and oversee the relationship with the user in connection with the purchase of catering products and merchandising, both available through the Website (including any possible returns), as well as to respond to enquiries or any type of request made by the user through any of the means of contact made available on the Website. If the user has made purchases from Bárbaro, we may send them communications with news and discounts on Bárbaro products.

Should the user register on the Website, Bárbaro will process their personal data in order to identify them as a Website user and to grant them access to the various features available to registered users. You may cancel your registered user account by contacting [*]-

By ticking the relevant boxes and entering data in the fields marked with an asterisk (*) in the corresponding forms, users expressly and freely give their unequivocal acceptance that their data is mandatory and necessary in order for Bárbaro to handle their request, while the inclusion of data in the remaining fields is voluntary. The user guarantees that the personal data provided to Bárbaro is accurate and is responsible for notifying any changes to it. Should all data not be provided, the information and services provided cannot be guaranteed to fully meet the user's needs.

Categories of data processed: first name, surname, mobile telephone number, email address and postal address.

Legal basis: performance of the contractual relationship between the user and Bárbaro or the taking of pre-contractual steps, as applicable.

2.2. Carrying out satisfaction surveys and analysis

Purpose: To carry out satisfaction and statistical analysis in order to gain insight into the products offered, their sales and how their performance can be maximised, and thereby to offer users the best product deals. We will consult the information we hold in relation to the views and purchases of the products you have acquired.

Categories of data processed: contact data, browsing data, purchase history data.

Legal basis: legitimate interest.

2.3. Accounting, tax and administrative management.

Purpose: To record sales made through the Websites in order to keep accurate accounts, register financial transactions and report to the finance department.

Categories of data processed: data on sales made through the Website.

Legal basis: performance of the contractual relationship between the user and Bárbaro.

2.4. Managing CVs received through the “Work with us” section.

Purpose: To manage the receipt of your CV via email, as well as any personal data that may be generated as a result of participation in selection processes, in order to assess your professional profile and to enable you to take part in the recruitment processes organised by Bárbaro in respect of the vacant or newly created positions that arise from time to time, as well as to process your possible incorporation into Bárbaro's workforce.

Categories of data processed: personal data contained in the CV provided by the user, or in the various interviews conducted.

Legal basis: the taking of pre-contractual steps.

2.5. Marketing communications.

Purpose: To send Bárbaro advertising communications by email, SMS, social media messaging or any other electronic or physical means, whether present or future, that makes commercial communications possible. These communications will be sent by Bárbaro and will relate to its products and services, or those of its partners or suppliers with whom it has reached a promotional agreement. In such cases, third parties will never have access to the personal data.

Categories of data processed: contact data.

Legal basis: The sending of commercial communications to Bárbaro customers is based on legitimate interest. The sending of commercial communications to non-customer users will be based on the consent that they must necessarily have given beforehand.

3. For how long will we retain your personal data?

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods established by applicable regulations for the fulfilment of legal obligations. By way of example only:

• Data provided for contact requests will be processed for as long as necessary to handle your request or query.
• Data provided in order to send you commercial communications will be processed until you request to unsubscribe from receiving such commercial communications.
• Where the legal basis for processing your personal data is the performance of a contract, we will process your data for as long as necessary to manage the order for the products you have purchased, including any possible returns, complaints or claims associated with the purchase of the product.
• Data provided through the “Work with us” section will be retained for a period of no more than one year, in case we consider in the future that it matches one of the existing job profiles.

Once the retention periods have ended, the data will be kept blocked in accordance with the provisions of the LOPDGDD, for the period of time necessary to address any type of liability (e.g. until the lapsing of any liability that may arise from data protection regulations).

4. Who do we share your personal data with? Recipients

Bárbaro works with certain third-party service providers who have access to personal data and process it on behalf and for the account of Bárbaro as a result of the provision of services. In its commitment to the user's privacy and data protection, Bárbaro will only choose companies that offer sufficient guarantees to implement appropriate technical and organisational measures, so that the processing complies with applicable data protection legislation and safeguards the protection of the User's rights. In addition, Bárbaro will enter into the corresponding data processor agreement with its providers, imposing on them, among others, the following obligations: to implement appropriate technical and organisational measures; to process personal data for the agreed purposes and solely in accordance with the documented instructions of Bárbaro; and to delete or return the data once the provision of services has ended.

Specifically, Bárbaro will engage the provision of services by third-party providers that carry out their activity, by way of example and not limitation, in the following sectors: logistics services, booking management, IT and technology service providers, courier service providers and digital marketing service providers.

5. What are my rights as a user?

We inform you that, in accordance with the legislation in force, you have the right to exercise your rights of access, rectification, cancellation and objection, as well as the right to erasure, the right to restriction of processing, the right to data portability and the right to withdraw at any time the consent you have given to the processing of personal data, by proving your identity (by means of a copy of your ID document or equivalent) at the following address: Calle Sánchez Pacheco 69, 28002. Madrid, or through the Website, in the “Contact us” section.

If you consider that Bárbaro has not respected any of the rights mentioned above, you have the right to contact the Spanish Data Protection Agency (https://www.aepd.es/es) at Calle de Jorge Juan, 6, 28001 Madrid.