Privacy Policy (Política de Privacidad, RGPD/LOPDGDD)

PRIVACY POLICY (POLÍTICA DE PRIVACIDAD)

✓Business name (responsable del tratamiento) (NIF/CIF Business NIF/CIF), ✓Business address Effective date: Effective date

This notice explains how ✓Business name (responsable del tratamiento) (the "Company", responsable del tratamiento / data controller) collects, uses and protects personal data, in accordance with Articles 13 and 14 of the RGPD (Reglamento General de Protección de Datos) and the Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD), following the two-layer model recommended by the AEPD (Agencia Española de Protección de Datos): a short, immediate-layer summary (this notice) plus a fuller layer available on request or by link.

1. RESPONSIBLE PARTY 1.1. ✓Business name (responsable del tratamiento) is the data controller (responsable del tratamiento) for the processing described in this notice. 1.2. Data Protection Officer (DPD), if appointed: Data Protection Officer (DPD), if any

2. PURPOSES AND LEGAL BASIS 2.1. Purposes: Purposes of processing (finalidades) 2.2. Legal basis: Legal basis (base jurídica)

3. DATA COLLECTED 3.1. Data collected (datos recabados)

4. RECIPIENTS AND INTERNATIONAL TRANSFERS 4.1. Recipients and transfers outside the EEA (destinatarios) 4.2. Transfers of personal data outside the EEA require either an adequacy decision or appropriate safeguards (e.g. EU standard contractual clauses).

5. RETENTION 5.1. Retention period (plazo de conservación)

6. YOUR RIGHTS (DERECHOS ARSOPOL) 6.1. Data subject rights (derechos ARSOPOL) 6.2. AEPD complaint note

7. COOKIES AND TRACKING 7.1. Cookies/tracking consent

8. CONTACT US 8.1. Questions about this notice, or requests to exercise your rights, may be sent to Privacy contact e-mail.

⚠️ If CCTV/video-surveillance, a loyalty programme, or online booking/Wi-Fi data is used, describe it explicitly in section 3 above and record it in the internal registro de actividades de tratamiento (RGPD art. 30) — this is typically the first document the AEPD asks for at inspection. In Catalonia, remember the parallel Catalan-language requirement for consumer-facing notices under the Codi de consum.

— — — ⚠️ This is a boilerplate template, not legal advice. Spanish employment, consumer-protection and data-protection law (Estatuto de los Trabajadores "ET", the applicable PROVINCIAL convenio colectivo de hostelería/comercio, the sector-wide ALEH VI framework agreement, RGPD/LOPDGDD 3/2018, Regulation (EU) No 1169/2011 "INCO") is highly procedural, includes fixed statutory calendars and changes frequently — statutory figures (SMI, convenio pay tables, LISOS sanction amounts) are re-indexed periodically. Have this document reviewed and adapted by a Spanish employment/legal advisor (abogado laboralista / gestoría) and verified against the current provincial convenio and rates before use. In Catalonia, under the Codi de consum de Catalunya (Ley 22/2010, art. 128-1), documents intended for consumers — price lists, terms of sale, mandatory notices — must be available at least in Catalan; where a Catalan-language version of this document is also used, that version prevails in case of conflict for consumers in Catalonia.