Privacy Policy

Your privacy is important to us. This privacy policy explains what personal data is collected from users and how it is used. We invite you to read these terms carefully before providing your personal data on this website. Those over the age of thirteen can register on www.elhigueron.com as users without the prior consent of a parent or guardian.

For children under the age of thirteen, consent from a parent or guardian is required in order to process their personal data.

In no case will minors be asked for information regarding the professional, financial or personal situation of other family members without the consent of the corresponding family members.

If you are under thirteen years of age and have accessed this website without notifying your parents, you must not register as a user.

This website respects and protects the personal data of users. As a user, you should know that your rights are guaranteed.

We strive to create a safe and secure space and want to share our norms regarding your privacy:

– We will never ask for personal information unless it is absolutely necessary to provide the services you require.

– We will never share personal information about our users with anyone, except to comply with the law or if we have your express authorisation.

– We will never use your personal data for a purpose other than that expressed in this policy.

Please note that this policy may vary depending on legislative or self-regulatory requirements, so users are advised to review it periodically. The policy will be applicable when users decide to fill out any form where personal data
is collected.

Inversiones Provisa S.A. has adapted this website to meet the requirements of Organic Law 15/1999, of 13th December, on the Protection of Personal Data (LOPD) and Royal Decree 1720/2007, of 21st December, which implements the above mentioned law. It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and Law 34/2002 of 11 July on Information Society Services and E-Commerce.

For the purposes of the provisions of the aforementioned General Data Protection Regulation, any personal data that you send us via the forms on the website will be processed as “web user and subscribers” data.

We implement all of the technical and organisational security measures established in the current legislation for processing our users’ data.

Norms that will be applied to your personal information

When processing your personal data, the following norms that comply with the requirements of the new EU Data Protection Act will be applied:

– Lawfulness, fairness and transparency: your consent will always be requested for processing your personal data, for one or various specific purposes, which we will inform you of in advance with absolute transparency.

– Data minimisation: we will only request data that is strictly necessary in relation to the purposes for which we require it. This will be kept to the bare minimum.

– Limitation of storage period: the data will be kept for no longer than necessary for processing purposes. Depending on the purpose, you will be informed of the corresponding storage period. In the case of subscriptions, we will periodically review our lists and eliminate any records that have been inactive for a considerable time.

– Principles of integrity and confidentiality: your data will be processed in such a way as to ensure the adequate security of personal data and confidentiality. Please note that we take all the necessary precautions to prevent unauthorised access or improper use of your data by third parties.

How have we obtained your data?

The personal data that we process at Inversiones Provisa S.A. comes from:

– Booking forms

What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation as to whether or not Inversiones Provisa S.A. is processing personal data concerning you.

Interested parties have the right to:

– Request access to personal data concerning the data subject
– Request rectification or erasure
– Request restriction of processing
– Oppose the processing
– Request data portability

Data subjects may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, those concerned may request the limitation of the processing of their data, in which case we shall only keep it for fiscal or claims purposes.

Under certain circumstances, and for reasons related to their particular situations, data subjects may object to the processing of their data. El Higueron Restaurant (Inversiones Provisa S.A..) will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims. As a data subject, you have the right to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format and to transfer it to another data controller when:

– The processing is based on consent
– The data has been provided by the data subject.
– The processing is carried out by automated means.

When exercising your right to data portability, you have the right for personal data to be transferred directly from data controller to data controller, where technically feasible.

Data subjects will also have the right to effective legal protection and to submit a claim to the supervisory authority, in this case the Spanish Data Protection Agency, if they consider that the processing of their personal data violates the Data Protection Act.

For what purpose do we process your personal data?

When a user connects to this website, for example, to comment on a post, send an email to the owner, subscribe or make a contract, they are providing personal information for which Inversiones Provisa S.A. is the data controller. This information may include personal data, such as your IP address, name, home address, email address, telephone number or other details. By providing this information, you consent to the collection, use, management and storage of your information by www.elhigueron.com only as described in the Legal Notice and this Privacy Policy.

At Inversiones Provisa S.A. there are different systems for capturing personal information and we process the information provided by data subjects for the following purposes for each capture system (forms):

– Service request form – reservations: We request the following personal data: Name, Surname, Telephone, Email, to request any of the services that www.elhigueron.com makes available to its users. The information collected will enable the corresponding service to be requested for possible offline processing. Requests will be answered by email. The website does not allow the management of direct payments. We inform you that the data you provide us will be located on the servers of

Mailchimp (Inversiones Provisa S.A. supplier) within the EU.

There are also other purposes for which we process your personal data:

– To ensure compliance with the terms and conditions of use and with applicable law. This may include the development of tools and algorithms that help this website guarantee the confidentiality of the personal data that it collects.

– To support and improve the services offered by this website.

– We also collect other non-identifying data obtained through some cookies, which are downloaded to the user’s computer when they browse this website, as explained in the Cookies Policy.

– To manage social media sites. Inversiones Provisa S.A. may have a presence on social networks. The processing of the data belonging to people who become followers of the official social media sites of www.elhigueron.com shall be governed by this section. As well as those conditions of use, privacy policies and access regulations that belong to the social network in each case and previously accepted by the user of El Higueron Restaurant (Inversiones Provisa S.A.).

You data will be processed for the purposes of correctly managing your presence on the social network, informing you of activities, products or services of Inversiones Provisa S.A.. As well as for any other purpose that the regulations of the social networks allow. In no case will follower profiles be used on social media to send advertising individually.

In accordance with the provisions of the European General Data Protection Regulation (GDPR) 2016/679, El HIGUERON Restaurant (Inversiones Provisa S.A..) with address at C/ Ronda De Labugavilla Del Rey 131 28005 – Madrid (Spain) will be responsible for the processing of data corresponding to users of the website and subscribers.

Inversiones Provisa S.A. does not sell, rent or transfer personal data that can identify the user, nor will it do so in the future, to third parties without prior consent. However, in some cases, collaborations with other professionals may take place, in which case users will be asked to give their consent, informing them of the identity of the collaborator and the purpose of the collaboration. It will always be carried out with the strictest safety standards.

Facebook Ads

When generating an ad, audience can be segmented by:

– Place
– Demographic data (age, sex, etc.)
– Interests (activities, hobbies, etc.)
– What they buy on the internet and through other channels
– Etc.

The data obtained through Facebook ads are subject to this privacy policy from the moment the user leaves their data in the form on this website to join the subscription newsletter. In no case will the information from Facebook be used for a different purpose.

Twitter Ads

At www.elhigueron.com, we use Twitter ads, the Twitter advertising platform, which allows us to create marketing campaigns and adverts. When generating an ad, audience can be segmented by:

– Place
– Demographic data (age, sex, etc.)
– Interests (activities, hobbies, etc.)
– What they buy on the internet and through other channels
– Etc.

The data obtained through Twitter ads are subject to this privacy policy from the moment the user leaves their data in the form on this website to join the subscription newsletter. In no case will the information from Twitter be used for a different purpose.

Google Adwords

Adwords is a Google platform for ADVERTISERS who wish to advertise on GOOGLE. At www.elhigueron.com, we use Google Adwords, the Google advertising platform, which allows us to create campaigns and adverts to display on other websites. When generating an ad, audience can be segmented by:

– Place
– Demographic data (age, sex, etc.)
– Interests (activities, hobbies, etc.)
– What they buy on the internet and through other channels
– Etc.

The data obtained through Google Adwords are subject to this privacy policy from the moment the user leaves their data in the form on this website to join the subscription newsletter. In no case will the information from Google be used for a different purpose.

Legal grounds for processing your data

The legal basis for the processing of your data is: consent.

Contacting or commenting on this website requires consent to this privacy policy.

The prospective or commercial offer of products and services is also based on the consent that is requested, and in no case will the withdrawal of this consent condition the execution of the subscription contract. Data categories

The data categories processed are those related to identity details.

Sensitive data is not processed.

How long will we keep your data?

Personal data provided will be stored:

– Until the data subject requests its deletion.

To whom will your data be disclosed?

Many of the tools that we use to manage your data are contracted by third parties.

To provide services strictly necessary for the execution of the activity, www.elhigueron.com shares data with the following providers under their
corresponding privacy conditions:

Google Analytics, a website analysis service provided by Google Inc., a company from Delaware whose main office is located at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help www.elhigueron.com analyse how users use the website. The information generated by the cookie about your use of www.elhigueron.com (including your IP address) will be transmitted to and stored by Google on servers in the United States.

Hosting:OVH HISPANO SL, domiciled in Spain. More information at:
https://www.ovh.es/ OVH HISPANO SL processes the data in order to perform its hosting services for Inversiones Provisa S.A..

Web platform: Automattic Inc., located in the USA. More information at:
https://es.wordpress.com/ (Automattic Inc.). Automattic Inc. processes the data in order to perform its web platform services for Inversiones Provisa S.A..
Email marketing: The Rocket Science Group LLC d/b/a, located in the USA. More information at: https://mailchimp.com/ (The Rocket Science Group LLC d/b/a).
The Rocket Science Group LLC d/b/a processes the data in order to perform its email marketing services for Inversiones Provisa S.A..

Google Adsense: we have partnered with Google to display third-party advertisements to users who access this website. Partnering with Google, we use
cookies to show you more relevant ads related to your recent searches.

These types of cookies include third-party services such as: AdSense, AdWords and Google Analytics, as well as a series of DoubleClick services. By visiting
this website, cookies from these services are sent to your browser. Learn more about the types of cookies Google uses and
how they use them.

You can use your ad settings to manage the Google ads you are shown and opt out of interest-based ads.
Even if you choose not to receive such ads, they may still appear based on factors such as your general location derived from your IP address,
browser type, and recent and past searches related to your current search. If you want to receive more information on this practice and find out what your options
to prevent these companies from using such information, click here.
Browsing

By browsing www.elhigueron.com, non-identifying data may be collected, which may include IP addresses, geographic location (proximity), a
record of how services and sites are used, along with other data that cannot be used to identify the user. The non-identifying data also includes information
related to your browsing habits through third-party services. This website uses the following third-party analysis services:

– Google Analytics
– Alexa
– Twitter Analytics
– Semrush
– Facebook Pixel

This information is used to analyse trends, manage the site, track user movements around the site, and to gather
demographic information on our user base as a whole.

Data protection and security

www.elhigueron.com undertakes to use and process users’ personal data, respecting confidentiality and to use it in accordance
with its purpose, as well as to comply with its obligation to store it and adapt all measures to prevent its alteration, loss, processing or
unauthorised access, in accordance with the provisions of current data protection legislation.

www.elhigueron.com cannot guarantee the absolute security of the internet network and, therefore, the infringement of data through fraudulent access by third parties.

With respect to the confidentiality of processing, El Higueron Restaurant (Inversiones Provisa S.A.) will ensure that any person who is authorised by
Inversiones Provisa S.A. to process the customer’s data (including its staff, collaborators and service providers) will be under an appropriate obligation of confidentiality (whether this is a contractual or legal duty).

When a security incident occurs, Inversiones Provisa S.A., upon becoming aware of it, shall notify the customer without undue delay and shall provide timely information related to the security incident as soon as it becomes known or when reasonably requested by the customer.

Accuracy and veracity of the data

As a user, you are solely responsible for the veracity and correctness of the data you send to www.elhigueron.com, exonerating El Higueron Restaurant (Inversiones Provisa S.A.) from any responsibility in this regard.

In any event, users guarantee and take responsibility for the accuracy, validity and authenticity of the personal data provided, and undertake to keep it
duly updated. Users agree to provide complete and accurate information on contact or subscription forms.

Acceptance and consent

The user declares to have been informed of the conditions on the protection of personal data, accepting and consenting to the processing thereof by El Higueron Restaurant (Inversiones Provisa S.A..) in the manner and for the purposes indicated in this privacy policy.

Revocability

The consent given, both for the processing and for the transfer of the data of the data subjects, can be revoked at any time by communicating so to El Higueron Restaurant (Inversiones Provisa S.A.) in the terms established in this Policy for the exercise of ARCO rights. Under no circumstances will this revocation be
retroactive in nature.

Changes to the privacy policy

El Higueron Restaurant (Inversiones Provisa S.A..) reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as to industry practices. In such cases, El Higeron Restaurant (Inversiones Provisa S.A.) will announce on this page the changes made in reasonable advance of their implementation.

Commercial emails

In accordance with the LSSICE, www.elhigueron.com does not engage in SPAM practices, meaning it does not send commercial emails that have not been previously requested or authorised by the user. Consequently, in each of the forms on the website, the user has the opportunity to give their express consent to receive the newsletter, regardless of the commercial information requested.

In accordance with the provisions of Law 34/2002 on Information Society and Electronic Commerce Services, www.elhigueron.com undertakes not to send communications of a commercial nature without properly identifying them as such.