When processing your personal data, we apply the following principles, in accordance with GDPR requirements:

• Principle of lawfulness, fairness and transparency: Your data will be processed in accordance with applicable data protection regulations and with full transparency.
• Purpose limitation principle: Data will be collected for specific, explicit and legitimate purposes and will not be processed for purposes incompatible with those without prior authorization.
• Data minimisation principle: We will only request data strictly necessary for the purpose of the processing, ensuring it is accurate and up to date.
• Storage limitation principle: Personal data will be kept only as long as necessary to fulfil the purpose for which it was collected, comply with legal obligations and/or until deletion is requested by the data subject.
• In the case of subscriptions, we will periodically review our lists and delete inactive records.
• Integrity and confidentiality principle: Your data will be processed in a way that guarantees adequate security and confidentiality. We take all necessary precautions to prevent unauthorized access or misuse by third parties.

The personal data we process is always provided directly by the user through the contact forms enabled on our website.

We understand how important the privacy of your personal data is to you.

Therefore, we only process your data to send the requested information, manage the requested products or services, and send information or advertising from the companies belonging to Xerta Restaurant S.L. that may be of interest to you.

If you are interested in working with us, the purpose of processing your data will be to manage candidate databases in order to fill current or future vacancies within companies belonging to Xerta Restaurant S.L.

Social Media

Our companies are present on the main social networks (Facebook, Twitter, Instagram, Pinterest, YouTube).

Through these networks, we inform you about our activities, products or services, among other content, and we share photographs from events.

We take special care not to publish photos without the subject’s consent. If you want us to remove a photo in which you appear, you may request this by sending an email to info@xertarestaurant.com or a written request to: Còrsega 289, 08008 Barcelona, including: full name, copy of your ID document, and the photo to be removed.

Under no circumstances will we extract data from social networks for sending advertising unless we have obtained the user’s explicit consent.

We invite you to review the privacy policies of these social networks to understand their uses, mainly for advertising, and the browsing information that may be collected through their action buttons.

Anyone has the right to obtain confirmation as to whether Xerta Restaurant is processing their personal data.

Data subjects have the right to:

• Request access to their personal data
• Request rectification or deletion
• Request restriction of processing
• Object to processing
• Request data portability
• Request the right to be forgotten

You may exercise your rights at any time by sending an email to info@xertarestaurant.com or a written request to: Còrsega 289, 08008 Barcelona, attaching a copy of your ID and specifying the right you wish to exercise.

Right of access: You will be informed whether your data is being processed and, if so, you may obtain a copy and detailed information about the processing.

Right of rectification: We will correct any inaccurate or incomplete data.

Right of deletion: We will delete your data when possible, except in cases where it is required for legal purposes or to provide services.

• Right to restrict processing: You may request this under legally established circumstances.
• Right to data portability: We will transfer your data to another controller when technically possible.
• Right to object: We will stop processing your data unless there are compelling legitimate grounds.
• Right not to be subject to automated decisions, including profiling.

The legal basis for processing your data is the consent you provide when submitting the contact form.

The commercial or promotional offer of products and services is also based on the consent provided.

You have the right to withdraw your consent at any time.

Who Will Your Data Be Shared With?

If to provide you with the requested information, products or services we must involve other companies or professionals, we will only share the strictly necessary data, and they will be prohibited from using that data for any other purpose.

Some outsourced services we rely on include: legal and accounting advisory, IT and web maintenance services, occupational risk prevention, etc.

Hosting: Nuxit Online

Website platform: WordPress

Google Analytics: An analytical service provided by Google, which may involve international data transfer, protected under the EU–US Privacy Shield.

Data provided is stored on servers within the EU. Xerta Restaurant S.L. does not sell or transfer personal data without prior consent.

Personal data will be kept for the necessary period to fulfil the purpose for which it was collected, or until the data subject requests its deletion.

Browsing

When browsing this website, non-identifying data may be collected, such as IP addresses, approximate location, browsing habits, etc. This website uses Google Analytics to analyse trends and user behaviour.

Accuracy of Data

We make every effort to ensure data is accurate, but users are responsible for keeping it updated.

Commercial Emails

Companies belonging to Xerta Restaurant S.L. do not engage in SPAM practices. Users may expressly authorize receiving commercial information through the forms available on the website.