At Hatmans British we take the protection of your personal data seriously. This policy explains clearly what information we process, for what purpose, and what rights you can exercise at any time, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
Summary
This website is informational and static: it has no forms, no customer area and no online booking system, and it uses no cookies and no analytics tools. Simply browsing it does not cause us to collect any personal data about you.
We only process personal data when you choose to contact us by phone, WhatsApp, email or social media, or when you make a booking.
Data controller
| Item | Information |
|---|---|
| Controller | Hatmans British Bar, S.L. |
| Tax ID (NIF) | B67487892 |
| Address | Plaça de Pau Casals, 8, 08402 Granollers, Barcelona, Spain |
| info@hatmansbritish.com |
What data we process and why
We only collect the data you provide voluntarily. Depending on the channel you use, this may include your name, phone number, email address and the details of your request (date, number of guests, preferences or allergies you wish to tell us about).
| Purpose | Data processed | Legal basis |
|---|---|---|
| Managing bookings and requests | Name, phone, email, booking details | Steps taken at your request prior to entering into a contract (art. 6.1.b GDPR) |
| Responding to queries and messages | Contact details and message content | Consent given when you contact us (art. 6.1.a GDPR) |
| Handling allergies and intolerances you tell us about | Food allergy information | Explicit consent, as this is health data (art. 9.2.a GDPR) |
| Meeting legal hospitality, tax and accounting obligations | Invoicing data where applicable | Legal obligation (art. 6.1.c GDPR) |
We do not use your data for profiling or automated decision-making, and we will not send you marketing communications unless you expressly ask us to.
Allergy and intolerance data
If you tell us about a food allergy or intolerance, please note this is health-related data, which enjoys enhanced protection. We use it solely to prepare your service safely, we share it only with the front-of-house and kitchen staff who need to know, and we delete it once your visit has ended, unless we must retain it in connection with a claim.
Data retention
We keep your data for as long as necessary to handle your request or manage your booking. After that:
- Query and booking data is deleted once no longer needed, generally shortly after the visit.
- Data with tax or accounting relevance is kept for the legally required periods (generally between 4 and 6 years, depending on the applicable rules).
- Data linked to a potential claim is kept for as long as that claim can be brought.
Once those periods have elapsed, the data is securely deleted.
Data recipients
We do not sell or share your data with third parties for commercial purposes. Access is limited to:
- Service providers necessary for our business (for example, the hosting provider for this website, telephony, or restaurant management software), acting as data processors who handle data only on our instructions, under a contract requiring them to maintain confidentiality.
- Public authorities and official bodies, where there is a legal obligation.
If you contact us via WhatsApp, Instagram or Facebook, please note that those platforms are responsible for their own data processing and apply their own privacy policies, outside our control. If you would rather not use them, you can contact us by phone.
International transfers
We do not carry out international data transfers on our own initiative. However, some messaging platforms and social networks you may use to contact us are based outside the European Economic Area and may transfer data to third countries under their own safeguard mechanisms. You can avoid this by using the phone as your contact channel.
Data security
We apply technical and organisational measures that are reasonable and proportionate to the risk, in order to protect your data against unauthorised access, loss or alteration. Among others, this website is served entirely over an encrypted connection (HTTPS), and access to booking information is limited to staff who need it.
Your rights
As the data subject, you may exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data once it is no longer necessary.
- Objection: object to a specific processing activity.
- Restriction: ask us to suspend processing while a claim is resolved.
- Portability: receive your data in a structured format or ask us to send it to another controller.
- Withdrawal of consent: where processing is based on your consent, withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise them, write to info@hatmansbritish.com stating which right you wish to exercise. We may ask you to prove your identity. We will respond within one month at the latest.
Complaints to the supervisory authority
If you believe we have not handled your request properly, or that the processing of your data does not comply with the rules, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid — www.aepd.es).
Minors
This website is not specifically aimed at minors and does not knowingly collect data about them. Bookings must be made by people over 14 years of age; otherwise, they must be made by a parent or legal guardian.
Cookies
This website uses no cookies or equivalent tracking technologies. You can read the details in our Cookie policy.
Changes to this policy
We may update this policy to reflect changes in the law or new website functionality. The version in force is always the one published on this page, whose last updated date appears at the top.
This text is informational and provisional, pending final legal review.