Privacy Policy
PRIVACY POLICY:
1- WHO IS CONTROLLER OF YOUR PERSONAL DATA?
The controller of your personal data and owner of the website https://restaurantematiz.com is Gallery Center SL. A commercial company with registered office at C/Rosello 249, 08008, Barcelona, with CIF B58120775, registered in the Mercantile Registry of Malaga, Volume 5682, Page 57, Sheet MA-142636.
Gallery Center, SL will act as the controller of your personal data in its capacity as the company that manages Restaurante Sintonía.
Likewise, MERIDIA CAPITAL PARTNERS SGEIC, S.A., the management company of Gallery Center, SL, with registered office at Avenida Diagonal, 640, 5th floor, 08017 Barcelona, with Tax ID No. A-64214240 and registered in the Barcelona Mercantile Registry, page B-329676, will act as joint controller of your data.
Hereinafter, all of them are referred to in this document, individually or collectively, as GALLERY.
GALLERY has taken the necessary technical and organizational measures to comply with data protection regulations in relation to the personal data it processes.
GALLERY's contact details regarding data protection are:
+34 934 159 911
canaldenuncias@galleryhoteles.com
2- WHAT TYPE OF PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?
The data we collect, how we obtain it, and the purpose of processing it are as follows:
- Contact forms and/or information requests:
- Required data: name, email, phone number
- Purpose: To respond to inquiries and/or provide information requested by the User.
- Legitimation: User consent
- Newsletter subscription forms:
- Required data: email
- Purpose: To send commercial advertising communications by email if the User has expressly consented to do so;
- Legitimation: User consent
- You may unsubscribe at any time by clicking "unsubscribe."
- If you make a reservation through our website:
- Required information: first and last name, address, email, phone number, and credit or debit card information.
- Purpose: Reservation management
- Legitimation: User consent
- Carry out the contractual relationship and the similar administrative, fiscal and accounting procedures that are necessary under current legislation
- Required information: First and last name, telephone number, address, ID number, email, signature
- Purpose: To carry out internal business tax and administrative management
- Legitimacy: Data subject consent and contractual relationship
1-Types of personal data we process
For confidentiality reasons, we collect the smallest amount of data possible from the people we work with, especially our clients, beyond what is necessary to manage reservations and provide our services, or what they voluntarily provide to us, or what we are required by law to collect and retain, such as reservations made through booking engines.
We may collect and process the following categories of personal data:
- In relation to our clients, name, title, gender, ID or passport number, payment information.
- Your contact details, phone number if you make a reservation by phone and leave them to us, your email address if you make a reservation from your email, or any other information required by the booking engine to make a reservation, if applicable.
- In the case of our employees, identification data, social security data, bank details, and any other information necessary for the development of the employment relationship.
- Identification data of our suppliers and their contact persons, if they are companies.
- Images captured by our video surveillance cameras installed in our establishments.
- Images captured at events we hold at our establishments, if applicable.
- Information collected when you use our website and other digital media, if applicable.
When you use our website, we may record your IP address, browser type, operating system, referring website, and web browsing behavior.
2. Your personal data will only be used for the following purposes:
- Register you in our database if you make a reservation, provided you provide it to us in person or online.
- Carry out the necessary commercial and administrative procedures with our website users and our clients or potential clients.
- At GALLERY, we process the information you provide to us in order to respond to your requests for information, provide you with information about our services, manage your reservations or the provision of our services internally and externally, as well as the purchases we make from our suppliers, and comply with the legal obligations arising from these activities.
- Communicate with you to respond to your inquiries and process your complaints or obtain your opinion on the quality of our restaurant, our services, or the treatment you receive.
- Record the images captured by our video surveillance cameras for security reasons. These images may be shared with the police or judicial authorities upon request.
- Record the images captured at events in which you participate and use them for advertising purposes or dissemination among our clients.
- Likewise, any data collected during your browsing will be processed for the purpose of providing access to the website's online content, as well as responding to website user requests, keeping a record of visit statistics (IP addresses, browser data, country, page accessed, etc.) to help us develop better services and products, optimize our offering, provide more efficient customer service, and improve the design and content of our websites.
- The data of our clients and suppliers will be processed, within the framework of the contractual relationship that binds them to us, in compliance with administrative, tax, and accounting obligations, and, where applicable, in compliance with the Citizen Security Law.
In accordance with the LSSICE (Spanish Social Security Institute), we inform you that GALLERY does not engage in SPAM practices; therefore, it does not send commercial emails without the necessary legal authority. In any case, you will always have the option to withdraw your consent to receive our communications.
We will not process your personal data for any purpose other than those described in this Policy, except by legal obligation or court order.
Your personal data will not be subject to decisions based on automated processing that have any impact on you.
3- WHAT IS THE LEGAL BASIS THAT LEGITIMIZES THE PROCESSING OF YOUR DATA?
The legal basis that legitimizes the processing of your personal data is your express consent, granted for the purposes described above, which will be requested when you request information from us.
In the event of a commercial relationship between you, whether as a client, supplier, or employee, and GALLERY, the legal basis that legitimizes the processing of your personal data will be the execution of the contractual relationship that has been generated, as well as, where applicable, compliance with the corresponding legal obligations and information needs.
The legal basis that legitimizes the processing of images recorded by our video surveillance cameras is our legitimate interest in maintaining the security of our facilities.
The legal basis that legitimizes the processing of your personal data when you subscribe to our newsletter is your express consent.
The legal basis for processing the images captured during our events and those in which you participate is our legitimate interest and your express consent to publish them.
The legal basis for sharing your personal data with public authorities or agencies is compliance with current regulations.
4- RETENTION PERIOD How long will we retain your data?
The personal data you provide will be retained for the time necessary to process the information you request, as well as to manage reservations made by our clients or for the fulfillment of any contract between GALLERY and third parties.
The images recorded by our video surveillance cameras will be retained for 30 days, unless required by the police or judicial authorities to retain them for a longer period. In these cases, they will be duly blocked.
Once the data has fulfilled the purposes for which it was collected, we will permanently delete it. However, we will retain your data for a longer period if necessary to comply with legal obligations. Likewise, it may be necessary to retain it for the time necessary for the statute of limitations of any legal liabilities that may arise.
The data you provide to initiate a recruitment process at GALLERY will be retained for a maximum period of one year. If you have not joined GALLERY and are not part of a selection process, your personal data will be deleted, and we will not retain a copy.
Our employees' personal data will be retained for the duration of their employment with GALLERY and, subsequently, for the legally required periods.
5- TO WHICH RECIPIENTS WILL YOUR DATA BE DISCLOSED?
Within our organization, your personal data will be processed by duly authorized personnel and, if necessary or practical to fulfill the purposes indicated above, may be processed by third parties.
The categories of recipients to whom your personal data may be disclosed are as follows:
- MERIDIA CAPITAL PARTNERS SGEIC, S.A., as the management company of the restaurant's owner, may process the personal data of each of these companies for management, analysis, and control purposes.
- Third-party data processors, such as IT providers, consultants and advisors, and other companies that provide ancillary services. In certain cases, we may transfer your data to technology companies based in the US, but GALLERY guarantees the security and legality of these transfers because, in all cases, these companies have adhered to the corresponding approval protocols under European data protection regulations.
- Public entities and organizations, exclusively for the purpose of complying with applicable legal obligations.
- Other providers to whom, where applicable, your personal data may be transferred: financial institutions, fraud detection service providers, etc.
- Video surveillance management company.
In any case, all third parties mentioned above will have previously signed the corresponding confidentiality agreement following our instructions in accordance with current personal data protection regulations. They will be subject to the duty of professional secrecy or will be acting in compliance with a legal obligation.
The information you provide to us, whether through this website or by any other means, will be hosted on GALLERY's servers.
6.- WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?
If you wish to exercise the rights granted to you by data protection regulations, please send us an email to the following address: canaldenuncias@galleryhoteles.com, including the right you wish to exercise in the subject line and attaching a copy of your national identity document or passport.
The rights recognized by current regulations and which, where applicable, you may exercise are:
Right to Access Data:
You have the right to request that GALLERY inform you whether or not your personal data is being processed and, if processing is confirmed, GALLERY will provide you with access to your data by providing you with the following information:
-The purposes of the processing.
-The categories of data involved.
-The data retention period or criteria.
Right to data rectification:
You will have the right to have GALLERY rectify your data if it is inaccurate or incomplete by means of an additional rectification declaration.
Right to data erasure:
The data subject will have the right to have GALLERY erase their data when:
-The processing is unlawful.
-The data subject has withdrawn their consent.
-The data is no longer necessary in relation to the purposes for which it was collected or processed.
-The data subject has exercised their right to object and other legitimate grounds for processing do not prevail.
-The data must be erased to comply with a legal obligation of GALLERY.
The data subject will not have the right to have GALLERY erase their data when processing is necessary:
-To exercise the right to freedom of expression and information.
-To comply with a legal obligation of GALLERY.
-To formulate, exercise, or defend legal claims.
-For public interest reasons based on current legislation for reasons of public health or for historical, statistical, or scientific research purposes.
Right to Data Portability:
You have the right to have GALLERY transmit your data to another data controller or to the data subject, using a structured, commonly used, machine-readable format, when the processing is carried out by automated means and is based on:
-The data subject's consent for specific purposes.
-The performance of a contract or pre-contract with the data subject.
The right to data portability does not apply when:
-Transmission is technically impossible.
-It may adversely affect the rights and freedoms of third parties.
-The processing is carried out for a purpose of public interest based on current legislation.
Right to Restriction of Processing:
The data subject shall have the right to object to the processing of their data by GALLERY for reasons related to their particular situation, when the processing is based on:
-Direct marketing.
-Profiling.
-Legitimate interest of the controller or a third party, provided that the interests, rights, and freedoms of the data subject, especially if the data subject is a child, do not prevail.
-Historical, statistical, or scientific research, unless processing is necessary for reasons of public interest.
Even if the data subject objects to the processing of their data, GALLERY may continue to process them as long as its legitimate interest prevails over the interests, rights, and freedoms of the data subject in a justifiable legal proceeding.
GALLERY must inform the data subject of the right to object to the processing of their data explicitly, clearly, and separately from any other information, at the time of the initial communication.
Right to object:
This is the right to prevent the processing of personal data or to have it ceased when your consent is not required for the processing, due to a legitimate and well-founded reason related to your specific personal situation that justifies it, and provided that a law does not provide otherwise.
Right not to be subject to profiling:
The data subject shall have the right not to be subject to profiling for the purpose of making individual decisions based on automated data processing and intended to evaluate, analyze, or predict the following personal aspects:
-Professional performance.
-Financial situation.
-Health.
-Personal preferences or interests.
-Reliability.
-Behavior.
-Location or movements of the individual.
When profiling is based solely on automated processing:
-The data subject shall have the right to be informed if the decision that may be taken is likely to produce legal effects significantly affecting them.
-The data subject shall have the right to obtain human intervention on the part of GALLERY, to express their point of view, and to contest the decision, if the processing has been authorized by:
-The explicit consent of the data subject.
-A contract between GALLERY and the data subject.
The right not to be subject to profiling shall not apply when the decision that may be taken as a result of it is authorized by:
-The explicit consent of the data subject.
-A contract between GALLERY and the data subject.
-Treatment based on current legislation.
7-COMPLAINT TO THE SUPERVISORY AUTHORITY:
If you believe that GALLERY has violated any of your rights protected by personal data protection regulations or that it has violated any obligation regarding the protection of personal data, you have the right to file a complaint with the competent supervisory authority, which in Spain is the Spanish Data Protection Agency located at Calle Jorge Juan, 6, 28001, Madrid.
Tel. 901 100 099 - 912 663 517
You can also file an electronic complaint through the electronic form available on its website: https://www.aepd.es
8-LEGISLATION AND JURISDICTION
This privacy policy is governed in all its aspects by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
It is also governed by Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights. Likewise, our website is governed by Law 34/2002, of July 11, on information society services and electronic commerce.
Users of this website are subject to Spanish law and jurisdiction, to which they expressly submit. The Courts and Tribunals of Barcelona shall have jurisdiction to resolve all disputes arising from or related to its use.
9- ADDITIONAL INFORMATION
SECURITY MEASURES:
The data you provide will be treated confidentially. GALLERY has adopted all necessary technical and organizational measures and protection levels to guarantee the security of data processing and prevent its alteration, loss, theft, unauthorized processing, or access, in accordance with the state of the art and the nature of the stored data. Likewise, it is also guaranteed that the processing and recording in files, programs, systems, or equipment, premises, and centers comply with the integrity and security requirements and conditions established in current regulations.
SSL CERTIFICATE (SECURE SOCKETS LAYER)
The SSL CERTIFICATE provides authentication, privacy, and security of information between GALLERY and the user. GALLERY has a security certificate used to establish secure connections and is established using pre-established keys, encrypting and decrypting all data sent until the connection is closed.
SOCIAL MEDIA
We inform you that GALLERY may have a presence on social media. The processing of data regarding individuals who become followers on social media (and/or create any links or connection actions through social media) of GALLERY's official pages will be governed by this section, as well as by the terms of use, privacy policies, and access regulations applicable to the social media platform in each case and previously accepted by the user.
GALLERY will process your data for the purposes of properly managing your presence on the social media platform, providing information about the provider's activities, products, or services, as well as for any other purpose permitted by the Social Media regulations.
The publication of content is prohibited:
- That is allegedly unlawful under national, EU, or international regulations, or that engages in allegedly unlawful activities or violates the principles of good faith.
That violates the fundamental rights of individuals, is discourteous online, is annoying, or may generate negative opinions among our users or third parties, and in general, any content that GALLERY considers inappropriate.
- And in general, that violates the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, consumer protection, and intellectual and industrial property rights.
Furthermore, GALLERY reserves the right to remove, without prior notice, any content deemed inappropriate from the website or the corporate social network.
In any case, if you submit personal information through the social network, GALLERY will be exempt from liability in relation to the security measures applicable to this platform. Users, if they wish to learn more, should consult the corresponding specific terms and conditions of the network in question.
VIDEO SURVEILLANCE
Images are captured in our restaurant for the purpose of preserving the safety of people and property, as well as the facilities.
Users are informed by means of a video surveillance sign located in front of the camera and sufficiently visible, stating that the facilities are under video surveillance.
No transfers are planned, except to law enforcement agencies, nor will any international transfers be made.
The images will be kept for a maximum period of 30 days from their capture. After this period has elapsed, the images must be deleted, in accordance with current regulations. These regulations state: "Deletion will result in the blocking of the data, which will be kept only at the disposal of Public Administrations, Judges, and Courts, for the purpose of addressing potential liabilities arising from the processing, during the statute of limitations for such liabilities. After the aforementioned period has elapsed, they must be deleted."
LANGUAGE
The language applicable to this Privacy Policy is Spanish. Therefore, in the event of any contradiction in any of the versions provided in other languages, the Spanish version shall prevail.
10-UPDATE
This Privacy Policy was last updated in June 2025 but may be updated at any time. We recommend that you review it each time you access our website in case it has changed.