BOOK A TABLE
/
GIFT
/
Menu

Data Protection

Data Controller Information

In accordance with the provisions of Regulation (EU) 2016/679 General Data Protection Regulation (GDPR) and Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee (LOPDGDD), the data controller’s information is provided below:

Purposes of Processing

Depending on the relationship maintained with the entity, personal data may be processed for the following purposes:

  • Archive and records of current and former employees.
  • Purchase and sale of goods and services.
  • Monitoring and supervision of the entity’s efficiency and quality.
  • Access control and surveillance.
  • Coordination of business activities.
  • Drafting of contracts, preparation of payroll and related tasks.
  • Sending commercial information by postal, electronic or other channels.
  • Training.
  • Accounting, administrative, invoicing, collections and payments management.
  • Maintenance of employment relationships and compensation arising from work performed.
  • Provision of requested services.
  • Publication of personal data on social media or other dissemination channels where applicable.
  • Payment management via POS terminal.
  • Receipt and management of contracted services.
  • Ensuring the security of the entity.
  • After-sales service and customer loyalty.
  • Management of sick leave due to common illness or workplace accident.
  • Processing of quotes and estimates.
  • Use of data derived from business activities.

Data Retention Period

Personal data will be retained for as long as a commercial, contractual or any other type of relationship with the entity exists and as long as deletion is not requested.

Subsequently, data will remain blocked for the legally established periods to address any potential liabilities arising from the processing.

Legal Basis for Processing

The legal basis legitimising the processing of data may be:

  • The unambiguous consent of the data subject.
  • The performance of a contract or the application of pre-contractual measures.
  • Compliance with legal obligations.
  • Protection of the vital interests of the data subject.
  • The legitimate interest of the data controller.

Data Recipients

Personal data may be communicated to third parties when necessary to comply with legal obligations or to properly provide the contracted services.

Possible recipients include:

  • Other data controllers.
  • Tax Authorities.
  • Banks and financial institutions.
  • Document destruction companies.
  • Consultancies and auditors.
  • Advertising and marketing entities.
  • Administrative and advisory firms.
  • Social Security.
  • Occupational Risk Prevention Services.

Rights of Data Subjects

The data subject has the right to obtain confirmation as to whether TAVELLA RESTAURANT SL is processing personal data concerning them.

They may also exercise the following rights:

  • Access to their personal data.
  • Rectification of inaccurate data.
  • Erasure of their data where applicable.
  • Restriction of processing.
  • Objection to processing.
  • Data portability.
  • Withdrawal of consent given.

To exercise any of these rights, you may contact us in writing at:

TAVELLA RESTAURANT SL
Camino Viejo de Llíria, 93, 46015 Valencia, Spain
tavellarestaurant@gmail.com

Proof of identity by means of a copy of the relevant official document will be required where necessary.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing of your personal data infringes current regulations.

Cookie Policy

To find out about the cookies used on this website, please refer to the Cookie Policy available on the website.