- Data collection, its purpose and processing
Narru Restaurant has the duty to inform its website users regarding the potential collection of personal data, whether from emails sent or from forms completed on its website. In this respect, Narru Restaurant will be considered responsible for the data collected by the means explained above. In turn, Narru Restaurant informs users that the purpose of processing the data collected is: To deal with requests received from users, to provide services and to manage commercial relations. All operations, formalities and technical procedures carried out in automated or non-automated fashion and which permit the collection, storage, modification, transfer and other actions applied to personal data, are considered to fall within the processing of personal data. All personal data collected by means of the Narru Restaurant website and therefore considered as the processing or personal data, will be added to files declared to the Spanish Data Protection Agency by Narru Restaurant.
- Communication of information to third parties
Narru Restaurant informs users that their personal data will not be passed on to third party organisations, unless such an action is the result of a legal obligation or in the event that providing a service implies the need for a contractual relationship with a person responsible for their processing. In this latter case, the details will only be passed on to the third party when Narru Restaurant has received express consent from the user to do so.
- Users’ rights
Organic Law 15/1999, dated 13 December, on the Protection of Personal Data, allows interested parties to exercise a series of rights related to the processing of their personal data. Insofar as the user’s data are processed by Narru Restaurant, said users can exercise their right to access, rectify, cancel and oppose such use as stipulated in existing law on the protection of personal data. In order to exercise said rights, the user must write, providing proof of identity (Spanish national ID document or passport), to the following address: Restaurante Narru, Calle Zubieta 56, 20007, Donostia-San Sebastián, Gipuzkoa, or to the address that substitutes this in the General Register of Data Protection. Said communication must contain the following information: Name and surnames of the user, the reason for their request, their address and proof of identity. Exercising their rights must be carried out by the user themselves. However, said rights can be exercised by a person authorised to act as their legal representative. In such a case, it will be necessary to provide documents that prove this representation of the interested party.