Privacy policy

Data controller

• Owner: Joan Marc Garcias Amer
• Tax ID (NIF): 43075522H
• Address: Plaça des Blanquer, 10, 07300 Inca (Illes Balears)
• Email: info@joanmarcrestaurant.com
• Phone: +34 971 50 08 04

What data we process

• Booking data: name, phone number, email, number of guests, date and time, and any notes you give us, such as allergies or intolerances.
• Gift card purchase data: what is needed to buy, pay for and send the card.
• Communications: the data you give us when you write to or call us.
• Browsing: technical data and aggregated, anonymous statistics on how the website is used.

Why we use it and on what legal basis

• Managing your booking and contacting you about it: performance of the service you request (Art. 6(1)(b) GDPR).
• Catering for allergies and intolerances: your explicit consent when you tell us (Art. 9(2)(a) GDPR). This data is only used to prepare your meal.
• Managing gift cards: performance of the purchase contract (Art. 6(1)(b) GDPR).
• Applying the cancellation policy and meeting accounting and tax obligations: legitimate interest and legal obligation (Art. 6(1)(f) and 6(1)(c) GDPR).
• Answering your enquiries: handling your own request (Art. 6(1)(b) GDPR).
• Measuring website use in aggregate, without cookies or profiles: legitimate interest (Art. 6(1)(f) GDPR).

How long we keep it

We keep booking data for as long as needed to provide the service and then for the limitation periods of any legal liability. Billing data is kept for the periods set by tax and commercial law. Allergy data is deleted once it is no longer needed for your meal.

Who else processes it

We do not share your data with third parties unless required by law. To provide the service we rely on providers acting as data processors:

• EasyTable: booking system.
• Bonkdo: sale and management of gift cards.
• Vercel Inc.: website hosting and anonymous statistics.
• Google (Google Maps): location map, only if you choose to load it.

International transfers

Some providers, such as Vercel or Google, may process data outside the European Economic Area. In that case the transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to info@joanmarcrestaurant.com and stating the right you wish to exercise.

If you feel we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

This website is not aimed at children under 14. Bookings must be made by an adult.

Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.