privacy policy
1. DATA CONTROLLER
In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), users are informed of the following details: Controller: PEDRO MARIA RUIZ ELIZONDO Y OTROS C.B. Trading name: Asador Nicolás Tax identification number: E75056978 Address: Zumalakarregi Pasealekua, 7 Bajo, 20400 Tolosa, Gipuzkoa Website: asadornicolas.com
2. PERSONAL DATA WE PROCESS
Asador Nicolás may process the personal data provided by users through the website, as well as data needed to manage relationships with customers and users. These may include: First name and surname. Telephone number. Email address. Information relating to a reservation request. Information voluntarily provided through forms or communications. Technical data arising from use of the website, where applicable. In each case, only the data needed for the relevant purpose will be requested.
3. PURPOSES OF PROCESSING
Personal data may be processed for the following purposes: Reservation management Managing requests, changes, cancellations and communications relating to restaurant reservations. Enquiries Responding to requests for information or enquiries made through the available contact channels. Customer relations Managing communications needed to provide the requested services and maintain commercial relationships with customers. Marketing communications Where the user has given consent, Asador Nicolás may send information about the restaurant, news, events, gastronomic offerings or other marketing communications. Website operation and security Ensuring the proper operation, maintenance and security of the website and preventing fraudulent or improper use.
4. LEGAL BASIS
The legal basis for processing depends on the purpose concerned. Managing reservations, requests and services is based on taking pre-contractual steps requested by the user or, where applicable, performing the contractual relationship. Responding to enquiries is based on the data subject’s own request. Marketing communications requiring consent will be sent only where the user has given it; consent may be withdrawn at any time. Certain processing may also take place where necessary to comply with legal obligations applicable to the controller.
5. DATA RETENTION
Personal data will be retained only for as long as needed to fulfil the purpose for which they were collected. They may subsequently be kept duly restricted for the periods needed to address possible legal liabilities. Where processing is based on consent, data may be retained until the data subject withdraws it, without prejudice to applicable statutory periods. 6. RECIPIENTS OF DATA Personal data will not be sold or disclosed to third parties unless required by law or necessary to provide a service requested by the user. Asador Nicolás may use providers that need access to certain data to provide services relating to its activities, such as web hosting, IT maintenance, email, reservation systems or other technological services. Where these providers process personal data on behalf of Asador Nicolás, they act as processors and are subject to the corresponding data protection obligations. Where any provider entails international data transfers, the safeguards required by the applicable legislation will be applied.
7. USERS’ RIGHTS
Everyone has the right to obtain information about whether Asador Nicolás is processing personal data concerning them. Data subjects may exercise the following rights: Access: to know which personal data are being processed. Rectification: to request correction of inaccurate or incomplete data. Erasure: to request deletion of their data where appropriate. Objection: to object to processing in certain circumstances. Restriction: to request restricted processing where the legal requirements are met. Portability: to receive their data in a structured format and transfer them to another controller where applicable. Where processing is based on consent, the data subject may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out previously. To exercise these rights, the data subject may contact Asador Nicolás, specifying the right they wish to exercise and providing sufficient information to establish their identity where necessary. Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they believe the processing of their personal data does not comply with applicable legislation.
8. DATA SECURITY
Asador Nicolás will adopt appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, disclosure or unlawful processing, taking account of the nature of the data and the risks associated with processing.
9. THIRD-PARTY DATA
Where a user provides another person’s personal data, they must ensure they are authorised to do so and that the person has been informed where necessary. The user is responsible for the accuracy and updating of the data provided.
10. MINORS
The services offered through the website are not specifically aimed at minors. Personal data concerning minors will not knowingly be requested unless necessary and supported by a valid legal basis for processing.
11. THIRD-PARTY LINKS AND SERVICES
The website may include links or features provided by third parties. Data processing carried out directly by those third parties is subject to their own privacy policies and terms of use.
12. CHANGES TO THE PRIVACY POLICY
Asador Nicolás may amend this Privacy Policy to reflect legislative changes, guidance from data protection authorities or changes to processing carried out through the website. The current version will always be the one published on this website. Last updated: August 2026.