Privacy Policy

In accordance with the new European Regulation 679/2016 on Data Protection (GDPR), we are required to inform you about how we process your personal data. In this regard, we remind you that:

Data Controller

Factoria Caramba S.L. (“Grupo Caramba”).
Tax ID (CIF): B76823277
Address: Calle Rubens Marichal Lope, 70 5B. 38004 Santa Cruz de Tenerife.

Purpose of the processing

• To process orders, bookings and purchases through the website or social media (including WhatsApp and similar messaging apps), and to manage, maintain, develop and monitor our relationship with the user, as well as to resolve enquiries.
• To carry out satisfaction surveys.
• Accounting, tax and administrative management.
• To manage CVs received through the “Work with us” section.
• Marketing communications.

Legal basis for the processing

• Performance of a contract or implementation of pre-contractual measures.
• Legitimate interest.
• Consent.

Retention of your personal data

The personal data you provide will be kept for as long as necessary to fulfil the purpose for which it is processed.

Recipients

Service providers who help or support us, or those with whom we have a legal obligation.

Your rights

You may exercise your rights of access, rectification, erasure, restriction or objection to the processing of your data, as well as data portability, as detailed in this “Privacy Policy”.

1. Who is responsible for processing your personal data?

Grupo Caramba is the controller responsible for processing the personal data collected through the website https://www.baravanbistro.com/ including any of its subdomains or sections, as well as the social media linked to them, including WhatsApp and similar messaging apps (hereinafter, the “Website”), and informs you that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April on the protection of natural persons with regard to the processing of personal data and the free movement of such data (“GDPR”), and Spanish Organic Law 3/2018 of 5 December (“LOPDGDD”).

Accessing and using the Website implies that the user has read and fully accepts this Privacy Policy. The date at the beginning of this Privacy Policy indicates the date of its last revision, which will apply from the date of its publication. Grupo Caramba may amend this Privacy Policy, so we recommend that you review it regularly.

In addition, with regard to access to and use of the Website, the Legal Notice applies and, in the event of purchasing products, the General Terms of Purchase.

You may contact Grupo Caramba through any of the following means:

• The “Contact” section of the Website.

2. What are the purposes of the processing and their respective legal bases?

2.1 Processing orders, bookings and purchases through the Website, and managing, maintaining, developing and monitoring the relationship with the user, as well as resolving enquiries.

Purpose: To manage, fulfil and monitor the relationship with the user in connection with the purchase of food and merchandising products, both accessible through the Website (including any possible returns), as well as to respond to enquiries or any kind of request made by the user through any of the contact methods available on the Website. If the user has made purchases with Grupo Caramba, we may send communications with news and discounts about Grupo Caramba products.

If the user registers on the Website, Grupo Caramba will process their personal data to identify them as a Website user and give them access to the various features available to registered users. You can cancel your registered user account by contacting us.

By ticking the relevant boxes and entering data in the fields marked with an asterisk (*) in the corresponding forms, users expressly, freely and unequivocally accept that their data is mandatory and necessary for Grupo Caramba to handle their request, while providing data in the remaining fields is optional. The user warrants that the personal data provided to Grupo Caramba is accurate and is responsible for notifying any changes to it. If not all data is provided, we cannot guarantee that the information and services provided will fully meet your needs.

Categories of data processed: first name, surname, mobile phone number, email address and postal address.

Legal basis: performance of the contractual relationship between the user and Grupo Caramba, or implementation of pre-contractual measures, as applicable.

2.2. Carrying out satisfaction surveys and analysis

Purpose: To carry out satisfaction and statistical analysis in order to understand the products offered, their sales and how their performance can be maximised, and thereby offer users the best product offers. We will review the information we hold regarding the views and purchases of the products you have acquired.

Categories of data processed: contact data, browsing data, purchase history data.

Legal basis: legitimate interest.

2.3. Accounting, tax and administrative management.

Purpose: To record sales made through the Websites in order to keep accurate accounts, register financial transactions and report to the finance department.

Categories of data processed: data on sales made through the Website.

Legal basis: performance of the contractual relationship between the user and Grupo Caramba.

2.4. Managing CVs received through the “Work with us” section.

Purpose: to manage the receipt of your CV by email, as well as any personal data generated as a result of taking part in selection processes, in order to analyse your professional profile and enable you to participate in the personnel selection processes organised by Grupo Caramba for vacant or newly created positions that arise from time to time, as well as to process your possible incorporation into the Grupo Caramba workforce.

Categories of data processed: personal data contained in the CV provided by the user, or in the various interviews held.

Legal basis: implementation of pre-contractual measures.

2.5. Marketing communications.

Purpose: To send Grupo Caramba advertising communications by email, SMS, social media messaging or any other electronic or physical means, present or future, that enables commercial communications. These communications will be made by Grupo Caramba and will relate to its products and services, or those of its partners or suppliers with whom it has reached a promotional agreement. In this case, third parties will never have access to the personal data.

Categories of data processed: contact data.

Legal basis: Sending commercial communications to Grupo Caramba customers is based on legitimate interest. Sending commercial communications to non-customer users will be based on the consent that they must necessarily have given beforehand.

3. How long will we keep your personal data?

Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods established by applicable regulations for compliance with legal obligations. By way of example only:

• Data provided for contact requests will be processed for as long as necessary to handle your request or information enquiry.
• Data provided to send you commercial communications will be processed until you ask to unsubscribe from such communications.
• When the legal basis for processing your personal data is the performance of a contract, we will process your data for as long as necessary to manage the order for the products you have purchased, including any possible returns, complaints or claims associated with the purchase of the product.
• Data provided through the “Work with us” section will be kept for a period of no more than one year, in case we consider in the future that it fits one of the existing job profiles.

After the retention periods end, the data will be kept blocked in accordance with the provisions of the LOPDGDD, for the period of time necessary to address any kind of liability (e.g., until the statute of limitations for any liability arising from data protection regulations).

4. Who do we share your personal data with? Recipients

Grupo Caramba works with some third-party service providers who have access to personal data and who process it on behalf of and for Grupo Caramba as a result of providing services. In its commitment to user privacy and data protection, Grupo Caramba will only choose companies that offer sufficient guarantees to apply appropriate technical and organisational measures, so that the processing complies with applicable data protection legislation and ensures the protection of the User's rights. Additionally, Grupo Caramba will enter into the corresponding data processor agreement with its providers, imposing on them, among others, the following obligations: to apply appropriate technical and organisational measures; to process the personal data only for the agreed purposes and following only the documented instructions of Grupo Caramba; and to delete or return the data once the provision of services ends.

Specifically, Grupo Caramba will contract services from third-party providers operating, by way of example and without limitation, in the following sectors: logistics services, booking management, IT and technology service providers, courier service providers and digital marketing service providers.

5. What are my rights as a user?

We inform you that, in accordance with current legislation, you have the right to exercise your rights of access, rectification, cancellation and objection, as well as the right to erasure, restriction of processing, the right to data portability and the right to withdraw consent for the processing of personal data you have consented to at any time, by proving your identity (by means of a copy of your ID document or equivalent) at the following address: Calle Sánchez Pacheco 69, 28002 Madrid, or through the Website, in the “Contact Us” section.

If you consider that Grupo Caramba has not respected any of the aforementioned rights, you have the right to contact the Spanish Data Protection Agency (https://www.aepd.es/es) at Calle de Jorge Juan, 6, 28001 Madrid.