SOMOS ESENCIA, as Data Controller and of this website, in accordance with the provisions of Regulation (EU) 2016/679, General Data Protection and the Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights, offers you this privacy policy in order to inform you, in detail, about how we treat your personal data and protect your privacy and the information you provide us.
In this privacy policy we explain your rights regarding your personal information and how to exercise them. Additionally, in case you need to contact the competent data protection authority, we provide you with the contact details.
We, the data controllers of your data:
Identity: SOMOS ESENCIA
Registered office: Via Augusta 48-54, 6 4, 08006, Barcelona.
E-mail: rgpd@somosesencia.es
The personal data we collect from users and customers can be grouped according to the following categories:
Basic and contact information: such as first name, last name. Including also your billing address, email and phone number.
Financial and economic data: this group would include payment details, as well as commercial transactions carried out with us. Including data to verify your identity for the acceptance of payments and the pertinent financial verifications in order to carry out commercial transactions.
Professional and employment data: this category would include your professional interests and your professional identity published online. For example, your LinkedIn profile.
Technical data: including IP address, registration data, browser and version used, time zone and usage, type of plugins installed in your browser, operating system and other technology used during access to our platform.
User data: such as name, preferences history, suggestions submitted by you or any type of survey you have answered.
Navigation data: includes information related to your navigation mode when you visit our platform.
Marketing and communication preferences: we collect your preferences to receive commercial communications and news from us, the consents granted for this purpose and the channel of your choice.
Images captured by video surveillance cameras: images that could be captured by video surveillance cameras in our restaurants and offices are grouped here.
We will never collect personal data that is specially protected or considered sensitive.
As a general rule, most of your personal information is provided to us directly by you, either in person at restaurants, by telephone, by mail, on web forms or by responding to surveys. However, we may also obtain information from:
If we are obliged by law to collect your personal data or, if it is essential for us to enter into a contract with you, if you do not wish to provide us with your personal data, it may not be possible for us to serve you. In the event that we need to cancel our services because of this, we will notify you first when necessary.
Attached is a detailed table with the purpose for which we collect your data and the legal basis that legitimizes us to do so.
We may need to share your personal information with:
All suppliers we work with are contractually bound to us. We can guarantee that they comply with all necessary security measures to safeguard your personal information, that they will use your personal data only and exclusively for the specified purposes, in accordance with our instructions.
We will also share personal information with law enforcement when we are required by law to do so.
All information you provide to us, both through this website and through other channels, will be hosted on Microsoft Office servers. These servers are hosted within the European Economic Area.
Your data will be kept for the duration of the business relationship with us or exercise your right of cancellation or opposition, or limitation to treatment.
Also, if we have not maintained relevant contact with you for a period of two years, we will delete your personal data from our systems, unless we are required by law to retain it (e.g. at the request of an authority, or in connection with possible litigation).
We inform you that our information retention policies are in accordance with the time periods established by the different legal responsibilities for statute of limitations purposes:
Pursuant to the provisions of Article 30 of the Commercial Code, and except for other criteria, all company documents and/or information shall be kept for 6 years.
This concerns all accounting, tax, labor and commercial documentation, including correspondence.
Our company must also set minimum deadlines depending on the type of data involved and according to the different statute of limitations, which each department must be aware of.
This table lists the time periods of requirements that affect or may affect our organization:
Labor, for infringement purposes: 3 years (Art. 4.1 RD 5/2000).
Social Security, for infringement purposes: 4 years (Art. 4.2 RD 5/2000).
Prevention of Labor Risks, for the purpose of infractions: 5 years (Art. 4.3 RD 5/2000).
Tax, for tax debt purposes: 4 years (Art. 66 Law 58/2003).
Tax, for the purpose of verification of compensated quotas or deductions applied: 10 years (Art. 66 bis Law 58/2003).
Accounting and mercantile: 6 years (Art. 30 of the CC)
Crimes against the Public Treasury and Social Security: 10 years (Art. 131 LO 10/1995)
You will not be subject to decisions based on automated processing that produce effects on your data.
Any personal information you provide to us will be incorporated into our information systems. If you accept this privacy policy, it means that you expressly consent to the following activities and/or actions, unless you tell us otherwise:
At any time you may revoke any express consent you have given us to send you commercial information. To do so, you can request to unsubscribe by using the option (opt-out) when it is enabled in our app/web, or by sending us an email with the subject "unsubscribe" to rgpd@somosesencia.es.
In accordance with the LSSICE, we never carry out SPAM, therefore, we will not send you commercial emails if they have not been requested or authorized by you. However, in all our communications, you will have the possibility to revoke your consent.
We will not process your personal data for any other purpose than those described above except by legal obligation or court order.
By providing your personal information through electronic channels, the user declares that you are over 14 years old and that all data provided to SOMOS ESENCIA are true, accurate, complete and updated. To this effect, the user confirms that he/she is responsible for the veracity of the data provided and that he/she will keep such information updated so that it corresponds to his/her real situation, being responsible for any false or inaccurate data that he/she may provide, as well as for any damages, direct or indirect, that may arise.
In the event that you want to send us your CV through our website, we inform you that the data provided will be processed to make you participate in the selection processes that may be carried out, carrying out an analysis of your professional profile in order to select the most suitable candidate for the vacancy.
We do not accept resumes submitted through other channels (e.g. hand-delivered on paper). In case of any change in the data, please inform us in writing as soon as possible, in order to keep your data updated.
CVs will be kept for a maximum period of one year, after which they will be securely destroyed and all data included will be deleted. We guarantee total respect for confidentiality. In this sense, after this period, if you wish to continue participating in possible selection processes, you must send your resume again.
The data may be processed and/or communicated to the companies of our group during the time your curriculum is kept and for the same purposes as mentioned above.
We take the protection of your data very seriously. For this reason, we ensure that appropriate physical, organizational and technological security measures, controls and procedures are in place to prevent your information from being accidentally lost, used or accessed maliciously.
We limit access to your data to persons and entities authorized to do so and we ensure that all our staff is properly trained. All those involved in the processing of your personal data are bound by a duty of confidentiality.
In addition, we apply technical procedures to react to any suspected data security breach. If necessary, we will notify you and the supervisory authority (the AEPD in Spain), in accordance with current regulations.
Both the RGPD and the standard of transposition into Spanish law (the LOPDGDD), guarantees you the exercise of the following rights. You can exercise them at any time and always free of charge:
Right of access: The right to receive a copy of your personal information.
Right of rectification: The right to request correction of errors in personal information.
Right to erasure/deletion (right to be forgotten): The right to request that we delete your personal information in some situations.
Right of restriction: The right to request the restriction of the processing of your data.
Right of opposition: The right to oppose:
-to the processing of your data for direct marketing (including profiling).
-in certain circumstances to our further processing of your data. For example, processing carried out on the basis of our legitimate interest.
Right of portability: The right to receive your personal information in a structured form, in a readable format and/or to transmit this data to a third party - in specific situations.
Automated individual decisions: The right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or significantly affects.
To exercise any of the aforementioned rights, you may write to us with your request to the e-mail address specifically provided for this purpose: rgpd@somosesencia.es.
You must attach to your request information on exactly what you need and, in any case, legally valid proof of your identity.
The supervisory authority in the field of data protection
We look forward to resolving any issues or concerns you may have regarding your personal information. But if you wish to file a complaint with the competent authority, you have the right to do so.
In Spain, the highest authority in data protection matters is the Spanish Data Protection Agency (AEPD).
https://www.aepd.es/es - Tel: 91 266 35 17.
Changes to this privacy policy
SOMOS ESENCIA reserves the right to modify this policy to adapt it to new legislation or case law.