Privacy Policy — LI-ONNA リオンナ

BOOK

SOON

PRIVACY POLICY

In accordance with the provisions of Regulation (EU) 679/2016 General Data Protection Regulation (“GDPR”), Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”) and Law 34/2002 of 11 July on information society and e-commerce services (“LSSI”), we inform you of the terms that apply when you (the “Data Subject”), through browsing the websites of EUROMANDALA GROUP S.L. (the “Websites”), provide your personal data.

In general, the disclosure of personal data is a necessary requirement to respond to the Data Subject's requests; the Data Subject cannot receive the services requested without communicating the relevant data required in each case to the Controller.

IDENTIFICATION

Holder: EUROMANDALA GROUP S.L. (“Euromandala” or the “Controller”)
Registered office: C/ Recoletos 14, 28001 Madrid, Spain.
Tax ID (NIF/CIF): B70797048
E-mail: hola@euromandalagroup.com

SOURCE, PURPOSE AND LEGAL BASIS

ACTIVIDAD: CONTACT

Source: From the Data Subject through e-mail communications or via the channels enabled on the Website.
Legal basis: Implementation of pre-contractual measures at the Data Subject's request (Art. 6.1.b GDPR).
Processing purposes: To respond to enquiries, questions or requests from any person who contacts the Controller.
Data subjects: Current and potential customers.
Categories of data: Contact data and identifying data.
Recipients: No transfer to third parties is envisaged, save where required by law.
International transfer: International transfers of personal data will be carried out between the Controller's group companies with the measures necessary to guarantee the appropriate level of protection, in particular through standard contractual clauses.
Retention periods: Data will be retained until the Data Subject withdraws consent or until the purpose for which they were collected has ended, unless retention is required by law.

ACTIVITY: CUSTOMER REGISTRATION

Source: From the Data Subject through the channels enabled on the Website and/or the App.
Legal basis: Performance of a contract to which the Data Subject is party; implementation of pre-contractual measures at the Data Subject's request (Art. 6.1.b GDPR).
Processing purposes: To create an account on the Website identifying the Data Subject as a customer of the Controller and granting access to the services offered via the Website.
Data subjects: Potential customers.
Categories of data: Identifying and contact data.
Recipients: No transfer to third parties is envisaged, save where required by law.
International transfer: International transfers of personal data will be carried out between the Controller's group companies with the measures necessary to guarantee the appropriate level of protection, in particular through standard contractual clauses.
Retention periods: Data will be retained until the Data Subject withdraws consent or until the purpose for which they were collected has ended, unless retention is required by law.

ACTIVIDAD: GESTIÓN DE BOOK

Source: From the Data Subject by e-mail, telephone or via the channels enabled on the Website or the corresponding booking platform.
Legal basis: Implementation of pre-contractual measures at the Data Subject's request (Art. 6.1.b GDPR).
Processing purposes: To handle the Data Subject's request to book one of the services provided by the Controller.
Data subjects: Current or potential customers.
Categories of data: Identifying and contact data, gastronomic preferences, allergies or other information relevant to the booking.
Recipients: No transfer to third parties is envisaged, save where required by law. Notwithstanding the foregoing, Euromandala may engage a third party to manage bookings online, in which case that third party shall be deemed a data processor and shall comply with all legal obligations regarding data protection.
International transfer: International transfers of personal data will be carried out between the Controller's group companies with the measures necessary to guarantee the appropriate level of protection, in particular through standard contractual clauses.
Retention periods: Data will be retained until the Data Subject withdraws consent or until the purpose for which they were collected has ended, unless retention is required by law.

ACTIVITY: RECRUITMENT PROCESS

Source: From the Data Subject through the channels enabled on the Website.
Legal basis: Performance of a contract to which the Data Subject is party (Art. 6.1.b GDPR); consent (Art. 6.1.a GDPR).
Processing purposes: To process the Data Subject's application to join the Controller's workforce.
Data subjects: Prospective employees.
Categories of data: Identifying data, CV, contact data.
Recipients: No transfer to third parties is envisaged, save where required by law.
International transfer: International transfers of personal data will be carried out between the Controller's group companies with the measures necessary to guarantee the appropriate level of protection, in particular through standard contractual clauses.
Retention periods: Data will be retained until the purpose for which they were collected has ended, and in any event for no longer than a maximum of one (1) year.

ACTIVITY: COMMERCIAL COMMUNICATIONS

Source: From the Data Subject through the registration process on the Website.
Legal basis: Consent (Art. 6.1.a GDPR) or legitimate interest (Art. 6.1.f GDPR); Article 21.2 LSSI, depending on whether or not a prior contractual relationship exists between the Data Subject and the Controller.
Processing purposes: To send the Data Subject advertising about services offered by the Controller similar to those previously contracted by the Data Subject.
Data subjects: Current and potential customers.
Categories of data: Identifying and contact data of the Data Subject.
Recipients: No transfer to third parties is envisaged, save where required by law.
International transfer: International transfers of personal data will be carried out between the Controller's group companies with the measures necessary to guarantee the appropriate level of protection, in particular through standard contractual clauses.
Retention periods: Data will be retained until the purpose for which they were collected has ended or until the Data Subject indicates their wish to stop receiving them, after which the data shall be duly blocked until the limitation period of the relevant legal actions has elapsed.

DATA SUBJECT'S DATA

The Data Subject warrants that they are of legal age and that the data provided is true, accurate, complete and up to date, being responsible for any direct or indirect damage that may arise from breach of this obligation, without prejudice to the Data Subject's right to request rectification.

Where the data provided relates to a third party, the Data Subject warrants that they have informed that third party of the matters set out in this document and obtained their authorisation to disclose their data to the Controller for the purposes stated above.

The Controller cannot guarantee the absolute invulnerability of its systems; consequently, the Controller assumes no liability for damages arising from alterations that third parties may cause to computer systems, electronic documents or files.

COOKIE POLICY

In accordance with the GDPR and the LSSI, all personal data collected through cookies during use of the Website will be processed in accordance with the Cookie Policy.

EXERCISE OF RIGHTS

In accordance with the GDPR, we inform you that you may exercise your rights of access, rectification, erasure, objection, data portability and restriction of processing directly with the Controller.

To exercise such rights, the Data Subject may send a message stating their first name, surname and the right they wish to exercise to the following e-mail address: hola@euromandalagroup.com

If, after this procedure, the Data Subject considers that their rights are being infringed, they may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Last updated: 27 June 2024.