Privacy Policy
This Privacy Policy explains the processing of personal data provided via the website, contact forms, reservation
requests and communications relating to Restaurant Emozione Mediterranea, in accordance with Regulation (EU)
2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
2.1. Data controller
Controller: Robert Schmidt – Self-employed (Autónomo)
NIF / NIE: X7060876Z
Address: Calle La Marina 12, 35120 Arguineguín, Gran Canaria, Las Palmas, Spain
Privacy email: robertschmidtgc@icloud.com
Telephone: +34 666 632 600
2.2. Data that may be processed
• Identification and contact details: first name, surname, telephone number, email address and other information
voluntarily provided by the user.
• Reservation data: date, time, number of guests, comments and communications associated with the booking.
• Technical browsing data, where necessary for website operation or, with prior authorisation, for website
measurement or analysis.
• Information included in enquiries, requests, complaints or communications addressed to the restaurant.
2.3. Purposes and legal bases
Purpose
- Handling enquiries and information requests.
- Handling reservation requestsand confirmations.
- Complying with legal, tax, accounting or administrative obligations.
- Sending marketing messages, promotions or news if this function is enabled.
- Non-essential analytics or measurement, if used.
Legal basis
- Consent of the data subject and pre-contractual steps where relevant.
- Pre-contractual or contractual steps requested by the data subject.
- Compliance with a legal obligation.
- Explicit consent.
- Consent through the cookie manager.
Indicative retention period / criterion
- For as long as necessary to respond and thereafter while legal liabilities may arise.
- During reservation management and for legally necessary periods to address incidents or liabilities.
- For the periods required by applicable legislation.
- Until consent is withdrawn or the recipient unsubscribes.
- According to the stated lifespan of each cookie and until consent is withdrawn.
2.4. Recipients and processors
Data will not be sold to third parties. It may be processed by providers delivering services necessary for the
operation of the business or website, such as web hosting, IT maintenance, email, reservation platforms, technical
support or professional services, subject to the contractual safeguards required by data protection law. Data may
also be disclosed to public bodies, authorities or courts where legally required.
2.5. International transfers
If any technology provider processes data outside the European Economic Area, the controller will seek to ensure
that the transfer is based on an adequacy decision, standard contractual clauses or another valid mechanism under
the GDPR. The website provider must check the services actually installed and, where relevant, disclose the specific
international transfers involved.
2.6. Individual rights
Data subjects may exercise, free of charge, their rights of access, rectification, erasure, objection, restriction of
processing and data portability, and may withdraw consent at any time where consent is the legal basis for
processing. Withdrawal does not affect the lawfulness of processing carried out beforehand. Requests may be sent
to robertschmidtgc@icloud.com, specifying the right to be exercised and, where identity verification is necessary,
providing sufficient information to establish identity. Data subjects may also lodge a complaint with the Spanish
Data Protection Agency (AEPD), Spain’s supervisory authority.
2.7. Children’s data
The website services are not specifically aimed at minors. Data relating to minors will not knowingly be requested
for purposes requiring consent without complying with the relevant legal requirements.
2.8. Security and confidentiality
The controller will implement technical and organisational measures appropriate to the risk to protect data against
loss, alteration, unauthorised access, processing or disclosure. Users should avoid sending particularly sensitive
information through forms or messages where it is not necessary for the purpose of the communication.
2.9. Automated decision-making
No automated decisions producing legal or similarly significant effects on users are envisaged on the basis of data
collected through the website, unless expressly stated otherwise.
2.10. Policy updates
This Privacy Policy may be updated to reflect changes in legislation, technology or the services provided. The
version published on the website will state the date of the latest update.
COOKIE POLICY
This Cookie Policy explains the use of cookies and similar technologies on the Restaurant Emozione Mediterranea
website. It should be read together with the Legal Notice and Privacy Policy.
3.1. What are cookies?
Cookies are small files or storage technologies downloaded or stored on a user’s device when visiting a website.
They may enable technical operation, remember preferences or, with consent, measure website usage or perform
other functions.
3.2. Types of cookies that the website may use
• Technical or strictly necessary cookies: enable navigation, security, session management, essential preferences
or basic functionality. Consent is not required where they are strictly necessary to provide the requested service.
• Preference or personalisation cookies: remember choices made by the user. Where they are not strictly
necessary, they will only be activated with consent.
• Analytics or measurement cookies: provide aggregated information on how the website is used. Where consent is
required, they remain blocked until accepted.
• Advertising or behavioural advertising cookies: if used, these will only be activated after valid, specific consent
has been obtained.
• Third-party cookies: may be installed by integrated external services, such as maps, videos, social media or
booking platforms, where their operation involves non-essential storage or access.
3.3. Consent and settings
On their first visit, users must have access to a panel allowing them to accept, reject or configure non-essential
cookies. ACCEPT and REJECT must be offered simultaneously, at the same level and with equivalent visibility.
Non-essential cookies must not be installed until the user has taken an affirmative action to consent.
Consent may be withdrawn or changed at any time via a permanent, easily accessible link, for example “Cookie
Settings”, in the website footer. Withdrawing consent must be as easy as giving it.
3.4. Cookie inventory
The cookie inventory published on the website must match the cookies actually used. The website provider must
obtain this information through a technical scan and keep it up to date. At a minimum, each cookie or technology
must be described by:
• Cookie name or equivalent identifier.
• Provider or owner (first party or third party).
• Specific purpose.
• Type or category.
• Duration or expiry period.
• Where applicable, information on international transfers or a link to the third party’s policy.
STRUCTURE TO BE DISPLAYED BY THE COOKIE MANAGER
Cookie To be detected on theactual website
Provider To be identified
Purpose To be described
Duration To be specified
Category Technical / Preferences /Analytics / Advertising
3.5. Third-party cookies and embedded content
When the website integrates third-party content or services, the website provider must configure them so that,
where legally required, they do not load or install cookies before consent. This is particularly important for analytics
and advertising tools, embedded videos, maps and certain social media or booking widgets.
3.6. Browser settings
Users may also configure their browsers to block or delete cookies. Disabling strictly necessary cookies may affect
the functioning of parts of the website. Browser settings do not replace the consent mechanism that the website
itself must offer where applicable.
3.7. Updates
This Cookie Policy must be reviewed whenever the technologies, providers or purposes used on the website
change. The date of the published version must be kept up to date.
FIRST-LAYER NOTICES FOR IMPLEMENTATION
The following notices are ready for the website provider to use directly in forms and banners. They must link to the
complete policies above.
4.1. Cookie banner
We use our own cookies and, if you agree, third-party cookies to improve your experience and measure website
usage. You can accept, reject or configure non-essential cookies. You can change your choice at any time under
“Cookie Settings”. Find out more in our Cookie Policy.
Mandatory buttons, displayed with equal prominence: [REJECT] [SETTINGS] [ACCEPT]
4.2. Contact form
Basic data protection information: Controller: Robert Schmidt. Purpose: to respond to your enquiry or request. Legal
basis: consent and, where applicable, pre-contractual steps requested by you. Recipients: providers necessary to
operate the website and communications, and public authorities where legally required. Rights: access,
rectification, erasure, objection, restriction and portability, as well as withdrawal of consent. Further information is
available in the Privacy Policy.
☐ I have read and accept the Privacy Policy.
4.3. Reservation form
Basic data protection information: Controller: Robert Schmidt. Purpose: to process and manage your reservation
request and related communications. Legal basis: pre-contractual steps or performance of the requested service.
Recipients: technology or reservation providers necessary to manage the request, and public authorities where
legally required. Rights: you may exercise your rights by emailing robertschmidtgc@icloud.com. Further
information is available in the Privacy Policy.