Privacy Policy
Our intention is to offer you a quality service while respecting your fundamental right to data protection. This Privacy Policy shall apply to the processing carried out by IPE Velázquez 18, S.L. of the personal data collected by the following means:
– the website www.restaurantenuma.com
– communications via email/telephone
– the management of the restaurant NUMA itself
– the video surveillance system
- Controller of the processing
IPE Velázquez 18, S.L. (NUMA)
NIF: B-87286597
C/ Velázquez 18, 28001, Madrid (Spain)
Telephone: 916 859 719
Email: rgpd@restaurantenuma.com
The Controller of the processing forms part of GRUPO PARAGUAS, which is made up of the following companies:
– IPE VELAZQUEZ 18, S.L. (Restaurant NUMA)
– EL GOURMET DE JORGE JUAN, S.L. (Restaurant AMAZÓNICO)
– ULTRAMARINOS QUINTÍN, S.L. (Restaurant ULTRAMARINOS QUINTÍN)
– SECOSILVA EMPRESARIAL, S.L. (Restaurant TEN CON TEN)
– RESTAURADORES ASTURCOVA, S.L. (Restaurant EL PARAGUAS)
– PUERTA DE ALCALÁ 10, S.L. (Restaurants AARDE and ORIGEN)
- What data do we collect and for what purposes? How long do we keep them?
NUMA will collect different data depending on the functionalities of the website you use, how you interact with us through the website, or when you visit our restaurant:
RESERVATION FORM
Data: Identifying data you provide to us (name and surname, telephone number, email address). NUMA may also request details regarding your account number or bank cards for the provision of its services.
Purpose: To provide you with customer assistance and manage your preferences and reservations, as well as to send commercial communications.
Legal Basis: The performance of a contract or pre-contract to which you are a party (Art. 6.1.b GDPR), as regards the management of your reservations. Legitimate interest regarding the sending of commercial communications from the restaurant (Art. 6.1.f GDPR). And, in cases where you have expressed your wish to receive commercial communications from other restaurants of GRUPO PARAGUAS, the legal basis is express consent (Art. 6.1.a GDPR).
Recipients: Other companies of GRUPO PARAGUAS whenever, due to our suggestions, you decide to book at another restaurant of the group, or have expressly agreed to receive commercial communications from said restaurants.
Retention: The time strictly necessary to fulfil each of the intended purposes plus, where applicable, the limitation periods for contractual or pre-contractual liability.
RESERVATION CONDITIONS: The reservation will not be confirmed until you receive an email confirming its validity with all the relevant information.
If you wish to modify the reservation date or the number of guests, your request will be accepted as long as it is made with a minimum advance notice before the agreed time, and provided that there are available places. You may carry out this procedure by calling the restaurant’s telephone number.
We inform you that a few days before the reserved date and time, you will receive an email and SMS in which you must reconfirm or cancel the reservation through the links enabled for that purpose, if available.
Only once you have reconfirmed the reservation via email or SMS will your reservation be fully confirmed.
If you prefer, you may confirm your reservation by calling the restaurant before the reserved date.
The reservation will be held for a period of 15 minutes from the confirmed date and time, after which the reservation will be cancelled and the restaurant may offer your table to other guests.
WORK WITH US FORM
Data: Data from the form available on the website, as well as your CV if you send it to us through our website.
Purpose: To manage recruitment and selection processes.
Legal Basis: Consent of the data subject (art.6.1.a RGPD)
Recipients: Your data may be shared with other companies of GRUPO PARAGUAS (Central Asturcova, S.L., Secosilva Empresarial S.L., IPE Velázquez S.L., El Gourmet de Jorge Juan S.L., Ultramarinos Quintín S.L. and Puerta de Alcalá S.L.) if your profile fits any of the existing vacancies or offers, so that they may evaluate your CV.
Retention: 1 year.
CUSTOMER SERVICE
Data: The information you provide when you contact us using our contact details.
Purpose: To manage the query for which you are contacting us.
Legal Basis: Consent of the data subject. Art. 6.1.a) RGPD.
Recipients: Other companies of GRUPO PARAGUAS if your query must be forwarded for better service.
Retention: Data will not be kept once the query has been resolved.
VIDEO SURVEILLANCE
Data: Images captured by the video surveillance systems.
Purpose: To ensure the safety of people, property, and premises.
Legal Basis: Legitimate interest of the controller (Art. 6.1.f GDPR), consisting of ensuring the security of NUMA’s people, property and facilities.
Recipients: They will not be disclosed to anyone except to the competent authority if the images evidence acts that threaten the integrity of people, property, or facilities.
Retention: 30 days.
WEB BROWSING
Data: Each time you access the NUMA website, we automatically collect and process information about how you access and use the website, and in particular, the following personal data:
- Technical information, including your IP address, login data, browser and version, operating system; and/or
- Information regarding your visits to our website, including the uniform resource locator (URL), services viewed or searched for, and pages you visit on our service; site response time; download errors; time and date of the visit; time spent on those pages; information about on-site interaction (for example, clicks and/or mouse movements); methods used to leave the site; unique device identifiers; and other diagnostic data; and/or
- Information collected through the use of cookies. You may obtain more information about the use of these devices and how to manage them in our cookie policy.
Purpose: To allow you to participate in interactive features of our website when you choose to do so; to collect statistical analysis, research and profiling based on browsing and interests related to content, or other valuable information that allows us to improve our website and service; to detect, prevent and address technical issues.
Legal Basis: Consent of the data subject (Art. 6.1.a) RGPD).
Recipients: None.
Retention: As set in our cookie policy.
- Recipients
NUMA will not disclose the data you provide unless you authorise it, NUMA has a legitimate interest, there is a legal obligation, or an express judicial request or requirement from law enforcement authorities.
You should also be aware that, to carry out its activity, NUMA may contract third parties (natural or legal persons) to provide services on our behalf, to supply services related to ours, or to help us analyse how our service is used, which may involve the processing of your personal data.
These third parties will have access to your personal data solely to perform these tasks on our behalf under corresponding data processing agreements, where we instruct them on how to process and protect your data, and they are obliged not to disclose or use it for any other purpose.
- Data transfer to third countries
NUMA, as data controller, informs you that it has no intention of transferring your personal data to countries outside the European Union, although it cannot guarantee that some specific storage and processing activities will not be carried out by natural or legal persons located outside the European Union.
However, should any processing activity be carried out by companies or individuals located in third countries, NUMA will take all necessary measures to ensure that your data are processed securely and in accordance with this Privacy Policy and will not transfer your personal data to any organisation or country outside the European Union unless they are countries with an adequate level of protection or sufficient safeguards are provided, and enforceable rights and effective legal remedies are available to the data subjects.
- Your rights
You have the rights related to the processing of your personal data: access, rectification, erasure, objection, restriction, and portability, which you may exercise by writing to NUMA at the postal address indicated in the header or by email to rgpd@restaurantenuma.com, indicating in the subject line “EXERCISE OF RIGHTS”.Ud. tiene reconocidos los derechos afectos al tratamiento de sus datos personales: acceso, rectificación, supresión, oposición, limitación y portabilidad, que podrá ejercitar a través de la dirección postal de NUMA indicada en el encabezado o a través de la siguiente dirección de correo electrónico: rgpd@restaurantenuma.com indicando en el asunto “EJERCICIO DE DERECHOS”.
In any case, the data subject must prove their identity by providing a copy of their National Identity Document, Passport, or another similar document.
In some cases, the request exercised may result in the conservation, limitation, or blocking of data, as appropriate, to process these rights.
Regarding processing based on consent, you have the right to withdraw such consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
In addition, you may revoke your consent to receive commercial communications at any time, either by email to the address provided above or via the link included for that purpose in each commercial communication we send.
Likewise, if NUMA fails to comply with its legal obligations concerning the protection of your personal data, you have the right to lodge a complaint with the competent authority, which in Spain is the Spanish Data Protection Agency (www.agpd.es).
- Security
Our main mission is to ensure and guarantee both the processing of personal data and the associated information, safeguarding its custody and integrity. NUMA therefore adopts organisational and technical measures to guarantee the security of personal data and to prevent its alteration, loss, unauthorised processing, or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed, whether arising from human action or the physical or natural environment. NUMA will not be responsible for any unauthorised loss, theft, or manipulation of data beyond its control or due to malicious attacks by third parties.
- Links to other websites
Our website may contain links to other Internet sites not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We have no control over and assume no responsibility for the privacy policies or practices of any third-party sites or services.
We strongly recommend that you review the Privacy Policy of every site you visit.
- Child privacy
Our service is not directed to anyone under 18 years of age.
It is not our intention to collect personal information from minors under 18. If you are a parent or guardian and are aware that your child or minor in your care has provided us with personal data, please contact us.
Users guarantee the truthfulness and authenticity of the information and data they communicate through this website. Any false or inaccurate statement made as a result of the information and data provided, as well as any harm such information may cause, will be the sole responsibility of the users.
If we become aware that we have collected personal data from minors under 18 without verification that consent was given or authorised by the holder of parental authority or guardianship, we will take steps to delete that information from our servers and reserve the right to withhold the service.
- Changes to this Privacy Policy
NUMA may update this Privacy Policy at any time. Should that occur, you will be duly informed so that you may be aware of such changes and exercise your rights if you do not agree.
Last version: November 2019
