The data controller responsible for the processing of personal data in connection with the Don Romero website and communications with the restaurant is:

The Don Romero website is primarily informational. It provides information about the restaurant, food and drinks, location, menus, reservations, contact details and other information relating to the establishment.

The website does not currently provide user registration, customer accounts or a customer login area.

The website also does not provide a customer-facing online reservation system that requires users to create an account or submit reservation details through a dedicated database on the website.

Customers may nevertheless voluntarily provide personal data when contacting Don Romero through telephone, WhatsApp or email.

Don Romero only processes personal data that is reasonably necessary for the purpose for which the customer or user contacts the restaurant.

Depending on the communication, this may include:

• Name or other identifying information.
• Telephone number.
• Email address.
• Date and time requested for a reservation.
• Number of guests.
• Information necessary to manage or respond to a reservation request.
• Information voluntarily included in a message, enquiry, complaint or request.
• Other information reasonably necessary to respond to the customer.

Customers are encouraged not to provide personal information that is not necessary for the purpose of their communication.

Customers may contact Don Romero by telephone, WhatsApp or email to request a table reservation.

When making or managing a reservation, Don Romero may process information such as the customer’s name, telephone number, email address, requested date and time, number of guests and other information reasonably necessary to organise the reservation.

This information is used to respond to the reservation request, confirm availability, communicate changes and manage the reservation.

A reservation request does not automatically guarantee a table. The reservation becomes confirmed only when Don Romero confirms it with the customer.

Communications made through WhatsApp are carried out using a third-party communication service. WhatsApp and its related service providers may process information in accordance with their own privacy policies and terms.

Don Romero does not use WhatsApp as a public customer database and only uses the information received through the communication for the relevant restaurant purpose, subject to applicable legal obligations.

Personal data may be processed for the following purposes:

• To respond to enquiries and requests.
• To manage and communicate about table reservations.
• To confirm, modify or cancel reservations.
• To respond to customer messages sent by email, WhatsApp or telephone.
• To manage complaints, suggestions or incidents.
• To provide information requested by customers.
• To comply with applicable legal and regulatory obligations.
• To establish, exercise or defend legal claims where necessary.

Personal data will not be used for purposes incompatible with the purpose for which it was originally collected without an appropriate legal basis and, where required, additional information or consent.

The legal basis for processing depends on the purpose and circumstances of each processing activity.

• Reservation requests and customer communications: processing may be necessary to take steps at the customer’s request before entering into a relationship or to manage the resulting reservation or service.
• Legal obligations: where processing is necessary to comply with an obligation imposed by applicable legislation.
• Legitimate interests: where Don Romero has a legitimate interest in managing communications, protecting its business, preventing misuse or defending legal claims, provided that such interest does not override the rights and freedoms of the individual.
• Consent: where consent is specifically required by applicable law, it will be requested before the relevant processing takes place.

Don Romero will not rely on consent where another appropriate legal basis applies to the relevant processing.

Customers may voluntarily inform Don Romero of food allergies, intolerances or dietary requirements when making a reservation or before ordering.

Some information concerning allergies or intolerances may constitute information relating to a person’s health and may therefore receive special protection under applicable data protection legislation.

Don Romero will only process such information to the extent reasonably necessary to respond to the customer’s request, manage the reservation or provide appropriate information concerning food and allergens.

Where a specific legal basis or explicit consent is required for the processing of such information, Don Romero will apply the legally required basis.

Customers should avoid providing medical information that is not necessary for the restaurant to address their food allergy or dietary requirement.

For further information about food allergens, please consult our Allergen Information page.

Personal data will be retained only for as long as reasonably necessary to fulfil the purpose for which it was collected.

Reservation and communication information may be retained for the period necessary to manage the reservation, respond to the customer and deal with any related administrative or legal matters.

Where applicable legislation requires certain records to be retained for a specific period, the relevant information will be retained for that legally required period.

Once the applicable retention period has expired, information will be securely deleted or otherwise disposed of in accordance with applicable law.

Don Romero does not sell or rent customers’ personal data.

Personal data may be accessed or disclosed where necessary to provide a requested service, comply with a legal obligation, protect legitimate interests or where another valid legal basis applies.

The website may contain or connect to third-party services such as Google Maps, Google services, WhatsApp or other external platforms.

These providers may process information independently or on behalf of the relevant service according to their own terms, privacy policies and applicable legal requirements.

Don Romero does not control the independent processing carried out by third-party platforms on their own systems.

The Don Romero website may display or provide access to location information through Google Maps or related Google services.

These services may process technical information, device information, IP address or other information according to Google’s own privacy and cookie policies.

Don Romero does not control the independent processing carried out by Google when you interact directly with Google’s services.

Users should consult Google’s privacy information for further details about how Google processes information through its services.

The Don Romero website may display or link to public Google reviews relating to the restaurant.

Reviews published on Google are public information made available through Google’s services and are not created or stored by Don Romero as a private customer database.

The name, profile information, photographs, review content or other information displayed alongside a public Google review is controlled by Google and the person who published the review.

Don Romero may display or reference public reviews for informational or promotional purposes, subject to applicable law and the terms governing the relevant third-party service.

For information about Google’s processing of review information, users should consult Google’s own privacy documentation.

Don Romero may use Google Ads and related Google advertising services to promote the restaurant online.

Depending on the technical configuration of the website and the services enabled, Google may use cookies or similar technologies to measure advertising performance, understand interactions with advertisements or provide advertising-related functionality.

Where applicable law requires prior consent for advertising or non-essential cookies and similar technologies, the relevant technologies will only be activated in accordance with the applicable consent requirements.

Google may process information in accordance with its own privacy policies and applicable data protection requirements.

For detailed information about cookies and similar technologies used on this website, please consult our Cookie Policy.

The Don Romero website may use cookies and similar technologies that are necessary for the operation, security and functionality of the website.

Depending on the services and technical configuration currently active on the website, additional cookies or technologies may be used for analytics, advertising, embedded content or other purposes.

Where required by law, non-essential cookies and similar technologies will be subject to the user’s consent before they are activated.

Users can find further information about the cookies used by the website, their purposes and available choices in our Cookie Policy.

Some third-party service providers used in connection with the website or customer communications may process personal data outside the European Economic Area.

Where a processing activity involves an international transfer of personal data, the relevant data controller or service provider must apply the safeguards required by applicable data protection legislation.

Depending on the provider and circumstances, such safeguards may include an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism.

Don Romero does not independently determine the international transfer mechanisms used by third-party platforms such as Google or WhatsApp. Those providers are responsible for the safeguards applicable to processing carried out on their own platforms.

Subject to the requirements and limitations established by applicable law, individuals may exercise the following rights in relation to their personal data:

• Right of access: to obtain confirmation as to whether personal data concerning you are being processed and, where applicable, access to that information.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of personal data where the legal requirements for erasure are met.
• Right to restriction: to request restriction of processing in the circumstances provided by law.
• Right to object: to object to certain processing activities where the applicable legal requirements are met.
• Right to data portability: where legally applicable, to receive certain personal data in a structured, commonly used and machine-readable format.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your data protection rights, you may contact Don Romero using the contact details provided below.

To help protect personal data, we may need to verify the identity of the person making a request before responding.

Requests will be handled within the time limits established by applicable data protection legislation.

If you believe that your personal data has not been processed in accordance with applicable data protection legislation, you may contact Don Romero first so that we can review the matter.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

In Spain, the competent supervisory authority is the Spanish Data Protection Agency (AEPD).

Don Romero applies reasonable technical and organisational measures appropriate to the nature of the personal data processed and the circumstances of the processing.

These measures are intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

The Don Romero website is not specifically directed at children and does not intentionally collect personal data from children through a dedicated registration system.

If a minor provides personal information through a communication channel, the information will only be processed for the relevant and legitimate purpose and in accordance with applicable law.

Where consent is required for the processing of a minor’s personal data, the applicable legal requirements regarding parental or guardian authorisation will apply.

The Don Romero website may contain links to or integrations with external websites and services, including Google services and communication platforms.

Once you leave the Don Romero website or interact directly with an external service, the processing of your information is governed by the privacy policy and terms of that third party.

Don Romero recommends reviewing the privacy information of any third-party service before providing personal information through that service.

This Privacy Policy may be updated from time to time to reflect changes in legislation, restaurant operations, website functionality, third-party services or the way personal data is processed.

The most recent version will always be published on this page.

Customers are encouraged to review this page periodically if they wish to remain informed about how Don Romero processes personal data.

If you have any questions about this Privacy Policy, how your personal data is processed, or wish to exercise your data protection rights, please contact Don Romero.