Privacy Policy

Please read our website’s Privacy Policy carefully before using the site. It explains how we process the data we collect.

The processing of personal data through the website belonging to Grupo Con Fuego is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), and any other applicable data protection legislation, in order to safeguard the fundamental right of its users to data protection at all times.

This Privacy Policy explains how Grupo Con Fuego collects, processes and protects the personal data obtained through this website. Please read it carefully. It has been written clearly and simply to make it easier to understand, so you can decide freely and voluntarily whether to provide your personal data through the various channels available.

• Data controller: Oven Madrid Norte, S.L. (hereinafter “ALL 4 FOOD”).

• Address: calle Aguarón, número 23 B, 2ºD.

• Postcode: 28023, Madrid.

• Tax identification number: B-87295242

ALL 4 FOOD, as data controller, has appointed a Data Protection Officer (DPO), duly notified to the Spanish Data Protection Agency (AEPD). Their contact details are provided below should you wish to ask any questions about data protection:

• Data Protection Officer: PRODAT (PRODAT CUMPLIMIENTO, S.L.).

• Data Protection Officer email address: privacidad@confuego.es

You may contact us by telephone, by post or in person at the registered office stated above. In all cases, you will be referred to our appointed Data Protection Officer, who will handle any requests you may have.

Please note that this Privacy Policy may change following amendments to legislation. We recommend reviewing it periodically, although we undertake to notify you of any substantial changes.

At ALL 4 FOOD, we care about our users’ privacy and about protecting their information securely. In accordance with personal data protection legislation, we wish to inform our users how we will process their personal data. ALL 4 FOOD will process users’ personal information for the following purposes:

• Handling requests submitted through the contact form: if you give your express consent in the contact form itself, ALL 4 FOOD will process the information needed to handle your request, whether it concerns an incident, suggestion, claim or complaint. When the request relates to one of the group’s establishments, we will share your information with the parent company, ALL 4 FOOD, where necessary to handle your request.

• Managing bookings and/or the waiting list and related issues: ALL 4 FOOD will process the data needed to handle your request and process your booking and/or waiting-list entry, which may be accepted or rejected for various reasons, as well as any related issues or complaints, on the basis of performance of a contract.

• Sending marketing communications about ALL 4 FOOD products, promotions or services: provided you have given your consent, ALL 4 FOOD will send you marketing communications about our brand’s products, promotions or services that match your interests.

• Participation in promotions, prize draws or competitions: provided you have given your consent.

• Sending satisfaction surveys: on the basis of legitimate interest, we will send you satisfaction surveys to learn about your experience both when making your booking and as a customer of the establishment, and to improve our services and products based on our analysis of the responses. In all cases, to protect your data protection rights, you may object to this processing through the channels provided for this purpose.

• Collecting information through cookies: cookies are always used in accordance with our “Cookie Policy”.

As regards the legal basis for processing your data as a customer visiting one of our establishments, we will use the data you provide on the basis of the contractual or pre-contractual relationship if you have made a booking. Secondly, we may use the information to comply with legal obligations arising from the applicable legislation governing our activity. Thirdly, if we wish to use your data for any other purpose, we will inform you beforehand and request your express consent, which you may withdraw at any time by contacting our Data Protection Officer: privacidad@confuego.es. Lastly, on the basis of legitimate interest, we will send you the satisfaction surveys mentioned above.

We have adopted an optimal level of protection for the personal data we handle and have implemented all the technical resources and measures available to us, in line with the state of technology, to prevent the loss, misuse, alteration, unauthorised access to or theft of personal data.

Your data will not be disclosed to third parties unless a legal obligation requires it. In particular, data may be disclosed to the Spanish State Tax Administration Agency and to banks and financial institutions to collect payment for services provided or products purchased. In addition, third parties may access your data on behalf of the data controller and under its instructions, while observing appropriate security measures and confidentiality obligations, solely to fulfil the purpose for which the data was collected.

ALL 4 FOOD does not carry out international data transfers. However, should any take place, we undertake to ensure that they provide an adequate or equivalent level of data protection to that offered by the safeguards under European legislation.

ALL 4 FOOD will comply with the applicable legislation on the obligation to erase the personal information you have provided when it is no longer necessary for the purpose or purposes for which it was collected and/or once the limitation periods for any liabilities arising from the processing of the data have expired. Once these periods have elapsed, the information will be permanently deleted using secure methods.

European legislation grants data subjects the following rights:

RIGHT OF ACCESS: you have the right to access your personal data. This requires the controller to provide you, without undue delay and within a maximum of one month, with all the information it holds about you, among other things, and the sources from which it obtained that information. Due to the complexity or number of requests, this period may be extended by up to a further 2 months beyond the standard period.

RIGHT TO RECTIFICATION: you have the right to correct inaccurate data and complete any data you consider incomplete or insufficient. The data controller must therefore correct or complete that data so that it remains up to date at all times.

RIGHT TO ERASURE: if the data is no longer necessary for the purposes for which it was collected, or if you simply choose to withdraw the consent you gave us to process it, which you may do at any time, your data will be blocked and permanently deleted once the blocking period has elapsed.

RIGHT TO RESTRICTION OF PROCESSING: you have the right to restrict the use of the data we hold to specific purposes while we process your requests for access, rectification, objection or erasure. If the restriction is lifted, you will be informed beforehand.

RIGHT TO DATA PORTABILITY: you have the right to receive a digital copy of your data in a format that can be used on different devices. You may also ask us to transfer the data to another data controller you designate for that purpose.

RIGHT TO WITHDRAW CONSENT at any time for any processing to which you have consented.

RIGHT TO LODGE A COMPLAINT with the Spanish Data Protection Agency or another competent regional or European supervisory authority regarding any complaint or dispute about the handling of your rights. You may do so at the following address: www.aepd.es

We have forms for exercising all the rights set out above. You can request them directly from our Data Protection Officer by emailing: privacidad@confuego.es or, if you prefer, download them from the Spanish Data Protection Agency’s website: www.aepd.es

If you wish to exercise any of your rights, you may contact our Data Protection Officer or visit the postal address stated at the beginning of this Privacy Policy.

In all cases, data subjects may contact the Spanish Data Protection Agency, the supervisory authority for data protection, www.aepd.es or visit Calle Jorge Juan 6, postcode 28001, Madrid.