Privacy policy

1. Data controller

• Owner: Restaurant Palou
• Address: Av. de Sant Julià, 198, 08403 Granollers (Barcelona), España
• Email: restaurantpalougranollers@gmail.com
• Phone: +34 662 52 50 49
• Domain: restaurantpalou.com

2. What data we process and why

We only process the data you give us voluntarily:

• Contact form: name, email, phone (optional) and your message, to reply to your enquiry.
• Event requests: name, phone, email (optional), event type, date, number of guests and message, to check availability, prepare a proposal and contact you.
• Table bookings (when available on the website): name, email, phone, date, time, number of guests and notes (for example, allergies you tell us about), to manage the booking.
• If you contact us via WhatsApp, phone or email, we will use that data to assist you.

We do not create profiles or make automated decisions. We do not send marketing communications without your express consent.

3. Legal basis

Your consent, given by ticking the box in the form (Art. 6(1)(a) GDPR) and, for event requests and bookings, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). You can withdraw your consent at any time by writing to restaurantpalougranollers@gmail.com.

4. Retention

We keep contact messages for as long as needed to reply and for a maximum of one year. Event and booking data are kept for the duration of the relationship and then for the applicable legal limitation periods.

5. Recipients and processors

We do not share your data with third parties unless legally required. To provide the service, technology providers acting as processors under contract and with appropriate safeguards have access to it:

• Moby (mobyapp.eu): the restaurant management platform where messages, event requests and bookings are stored, and which sends confirmation emails.
• Vercel Inc.: hosting of this website.
• Cloud hosting and email delivery providers of the platform above.

Some of these providers may be located outside the European Economic Area (for example, in the USA). In that case, transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to restaurantpalougranollers@gmail.com. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), access limited to authorised staff and providers with security guarantees.

8. Minors

The forms are intended for people over 14. If you are a minor, please ask a parent or guardian to contact us.

9. Online orders

If you place a takeaway, delivery or table order on the ordering website (menu.mobyapp.eu/restaurantpalou/pedir), we process:

• Data: name, phone, email, delivery address and postcode (delivery only), table, order contents (dishes, options and notes, including allergy-related notes if you write them), comments, chosen time, amount and payment status.
• Purpose: to handle and prepare your order, contact you if there is an issue and send you the confirmation and receipt.
• Legal basis: performance of the purchase contract (Art. 6(1)(b) GDPR) and compliance with legal tax and accounting obligations (Art. 6(1)(c) GDPR). Without this data we cannot process the order.
• Recipients: MobyApp (MobyMenu/Moby platform), as data processor; if you pay by card, Stripe Payments Europe, Ltd. (Ireland), which processes the payment as payment service provider and receives your email, the amount and your card details (entered directly on its page; we have no access to them). Stripe may process data outside the EEA under standard contractual clauses.
• Retention: for as long as needed to handle the order and any complaints and then for the periods required by Spanish tax and commercial law (generally 4 years under the General Tax Law and up to 6 years under the Commercial Code), blocked.

You can exercise your rights by writing to restaurantpalougranollers@gmail.com. The purchase conditions are on the “Purchase conditions” page.