Who is responsible for the processing of your data?

TOURISM, HOTELS AND RESTAURANTS, S.A.

• • NIF: A-08586133
  • Address: Calle Gran de Gràcia, number 81, 08012 – Barcelona
  • Phone: 934 155 665
  • Email: lopd@monchos.com

Who are the Group companies?

• • • Restaurants Grupo Moncho’s
    • Botafumeiro
    • Patrón Restaurant
    • Europa Café
    • Wynwood Café
    • Moncho’s Catering

How do we obtain your personal data?

• • Directly from you.
  • We also collect certain data automatically when you access our website, read or click on emails we send you, or when you provide it to us directly.

What information do we obtain about you?

CUSTOMER DATA: Depending on the relevant circumstances, local laws, and applicable requirements, we may collect all or part of the following information to offer you job opportunities that suit your situation and interests:

• Name and surname;
• Contact information (email and phone);
• Any other information you provide through the website.

This list is not limited or exhaustive of the categories of personal data we may collect.

For what purpose do we process your personal data?

We will process the provided information in relation to the collected data for the following purposes:

• • Enabling the provision of the services requested by the Client.
  • Managing the reservations requested by the Client.
  • Informing through electronic means about the latest news, events, and parties organized.
  • Keeping the Client informed, even through electronic means, about services and/or news.
  • Managing you as a new Client and/or supplier.
  • Carrying out administrative and organizational processes.
  • Addressing your request for information and/or consultation.
  • Contacting you to send information.
  • Channeling the delivery of commercial information, as well as informative circulars and the sending of greetings.

How do we keep personal data protected?

To ensure protection and maintain the security, integrity, and availability of your data, we use various security measures.

Although data transmissions over the internet or from a website cannot guarantee absolute protection against intrusions, we strive to maintain physical, electronic, and procedural protection measures to ensure the protection of your data in accordance with the applicable legal requirements. Among the measures we use are:

• Limiting access to your data only to those people who need to know it in accordance with the tasks they perform;
• As a general rule, transferring the collected data in encrypted format;
• Storing the most sensitive data only in encrypted format;
• Installing perimeter protection systems for IT infrastructures (“firewalls”) to prevent unauthorized access, such as “hackers,” and regularly monitoring access to IT systems to detect and stop any misuse of personal data.

In cases where we have provided you (or you have chosen) a password that allows you to access certain parts of our websites or any other portal, application, or service under our control, you are responsible for keeping it secret and complying with all other security procedures we notify you. You may not share your password with anyone.

How long do we retain your personal data?

Your personal data will be retained for as long as necessary to fulfill the purpose for which it was collected. If your data is used for various purposes that require us to retain it for different periods, we will apply the longest retention period.

In any case, we limit access to your data only to those people who need to use it to perform their functions.

Our data retention periods are based on business needs, so regarding personal data that is no longer necessary, access will be limited to strict legal compliance, or it will be securely destroyed.

If we have not maintained relevant contact with you for a period of two years, we will delete your personal data from our systems unless we believe in good faith that the law or another regulation requires us to retain it (for example, at the request of a tax authority or in relation to possible litigation).

Who do we share your personal data with?

We may share your personal data with Group companies.

Data will not be transferred to third parties, except for access by company employees, Group companies, and transfers that must be made due to a legal obligation.

What are your rights when you provide us with your data?

• Right to Confirmation: Everyone has the right to obtain confirmation as to whether we are processing personal data concerning them or not.
• Access, Rectification, and Cancellation: Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, request their cancellation when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Limitation of Processing: In certain circumstances, data subjects may request the limitation of the processing of their data. In this case, we will only retain it for the exercise or defense of claims.
• Objection: For reasons related to your particular situation, in some circumstances, users may object to the processing of their data, and we will stop processing the data unless there are compelling legitimate grounds or the exercise or defense of possible claims that make it impossible.
• Data Portability: We will provide the data subject with the personal data concerning them in a structured, commonly used, and machine-readable format, and they will transmit it if the data subject so wishes to another controller.

The data subject may withdraw their consent at any time.

It is possible to file a complaint with the Spanish Data Protection Agency if your rights have not been satisfied through their website.

You can exercise your aforementioned rights by contacting lopd@monchos.com.