At ATROZ Gastrobar we only ask for the details we need to manage your booking. Here we explain what data we process, why, and what your rights are, under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: DIACONOS ZION S.L.U.
- Tax ID (NIF): B24992612
- Address: Carrer d'Arcadi Balaguer, 39, 08860 Castelldefels (Barcelona)
- Contact email: info@atrozgastrobar.com
2. What data we process
When you book on the website you give us:
- Name and phone number.
- Email, if you choose to give it.
- Date, time, number of guests and preferred area.
- Any comments you want to add. If you tell us about allergies or intolerances, we will only use them to look after you properly during your visit.
If you book by phone, we note the same details in our booking system.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Managing your booking: recording it, confirming it, letting you know about changes or cancellations and sending you a reminder the day before. | Steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR). |
| Taking into account any allergies or intolerances you tell us about. | Your explicit consent when you give them to us (Art. 9(2)(a) GDPR). |
| Sending you an email after your visit so you can rate your experience on Google. | Your consent, only if you tick the box (Art. 6(1)(a) GDPR). You can withdraw it at any time. |
We do not use your data for advertising or profiling, and we do not make automated decisions.
4. How long we keep it
We keep each booking's details for 12 months after the date of the visit, so we can deal with any queries or complaints. After that we delete them. If you withdraw your consent for the rating email, we will stop sending it.
5. Who we share it with
We do not pass your data to third parties unless required by law. To operate, we use these providers, who process the data only on our behalf:
- Google (the spreadsheet where bookings are stored, the email service we write to you from and the map, which only loads if you press “Show map here”).
- Netlify (hosting for this website).
These providers may process data outside the European Economic Area, for example in the United States. In that case they do so with the safeguards set out in the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
6. Your rights
You can ask us at any time to:
- Access your data or receive a copy of it (portability).
- Correct it if it is wrong.
- Delete it, or restrict or object to its use.
- Withdraw your consent, without affecting anything done before.
Write to us at info@atrozgastrobar.com saying which right you want to exercise. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
7. Minors
Online bookings must be made by people aged 14 or over.
8. Security
We store bookings in a private system that only restaurant staff can access with a password. The website uses an encrypted connection (https).