PRIVACY POLICY

GENERAL

In accordance with the European Data Protection Regulation (EU) 2016/679 of April 27 (GDPR), Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and other applicable national regulations, Aperitivos Tapa S.A. informs you that it fully complies with the current legislation on personal data protection and the confidentiality commitments inherent to its activity.​

Aperitivos Tapa S.A. has an information processing system for management, communication, and information purposes. This system is described in the corresponding Record of Processing Activities, which users can access to verify the status of their data.​

SECURITY MEASURES AND LEVELS

Aperitivos Tapa S.A. has adopted the necessary measures to ensure information security, as required by Article 32 of the GDPR, considering the nature of the personal data processed and the circumstances of the processing, to prevent, as far as possible and according to the state of the art, its alteration, loss, unauthorized processing, or access, thus ensuring confidentiality, integrity, and availability.​

SCOPE OF APPLICATION

The security measures described in the Record of Processing Activities apply to all assets of the information processing system that handle personal data, to comply with current data protection legislation.​

All personnel hired by Aperitivos Tapa S.A. and its Data Processors are obliged to comply with the aforementioned regulations, especially concerning their functions and obligations, including the duty of confidentiality, which will be duly determined by Aperitivos Tapa S.A.​

INTERNATIONAL DATA TRANSFER

Aperitivos Tapa S.A. informs that when using the WhatsApp contact option, personal data processed through this channel are subject to international data transfer, as WhatsApp LLC is located outside the European Economic Area, specifically in Menlo Park, California, United States.​

DATA COLLECTION

Acceptance of these conditions requires the user to provide essential data for the provision of services, which will be requested through forms or the website. At the time of data collection, the user will be properly informed of their rights.​

Completing the form on the site or sending emails or other communications to Aperitivos Tapa S.A. implies the user’s express consent to the inclusion of their personal data in the aforementioned processing system owned by Aperitivos Tapa S.A.​

At the time of requesting this information, the client or user will be informed of the recipient of the information, the purpose for which the data is collected, the identity and address of Aperitivos Tapa S.A., and the user’s right to exercise access, objection, rectification, cancellation, deletion, or opposition, data portability, restriction of processing, and to lodge a complaint with the Spanish Data Protection Agency (AEPD).​

To ensure that the information in our processing system is always up to date and error-free, we ask our clients and users to inform us as soon as possible of any changes or corrections to their personal data.​

EXERCISING RIGHTS

To exercise the rights of access, objection, rectification, cancellation or deletion, withdrawal of consent, restriction of data processing, and portability, you must contact Aperitivos Tapa S.A., Avda. de la Industria, nº 22, Mondéjar, Guadalajara, 19110, Spain, in writing. You may also file a complaint with the AEPD.​

CONSENT

The user consents to Aperitivos Tapa S.A. using their personal data to properly fulfill the contracted services.​

Completing the form on the site or sending emails or other communications to Aperitivos Tapa S.A. implies the user’s express consent to the inclusion of their personal data in the aforementioned processing system owned by Aperitivos Tapa S.A.​

At the time of requesting this information, the client or user will be informed of the recipient of the information, the purpose for which the data is collected, the identity and address of Aperitivos Tapa S.A., and the user’s right to exercise access, objection, rectification, cancellation or deletion, withdrawal of consent, restriction of data processing, and portability, and to lodge a complaint with the AEPD.​

DATA DISCLOSURE TO THIRD PARTIES

Aperitivos Tapa S.A. does not disclose personal data without the express consent of its owners, which must be granted on each occasion, and only for the stated purpose and always with the user’s or client’s consent.​

SUBMISSION OF CURRICULUM VITAE

If the user sends their CV through our website or social networks, we inform you that the provided data will be processed to include you in selection processes that may occur in the entity, conducting an analysis of the applicant’s profile to select the best candidate for the vacant position.​

The data will be kept for a maximum of 2 years, after which it will be deleted, ensuring total confidentiality both in processing and subsequent destruction. If you wish to continue participating in the selection processes, please resend your CV.​

If there is any change in the data, please inform us in writing as soon as possible to keep your data properly updated.​

The data may be processed and/or communicated to companies within our group during the retention period of your CV and for the same purposes previously informed.​

CONFIDENTIALITY AND PROFESSIONAL SECRECY

Data collected in all private communications between Aperitivos Tapa S.A. and clients or users will be treated with absolute confidentiality. Aperitivos Tapa S.A. commits to the obligation of secrecy regarding personal data, to safeguard them, and to adopt all necessary measures to prevent their alteration, loss, unauthorized processing

CONFIDENTIALITY AND PROFESSIONAL SECRECY

All data collected in private communications between Aperitivos Tapa S.A. and clients or users will be treated with absolute confidentiality. Aperitivos Tapa S.A. undertakes the obligation of secrecy regarding personal data, as well as the duty to safeguard such data and to adopt all necessary measures to prevent their alteration, loss, unauthorized processing, or access, in accordance with applicable regulations.

Furthermore, any information exchanged between the parties shall also be considered confidential—whether it is explicitly agreed upon as such, or whether its nature or content inherently implies confidentiality. The viewing of data via the internet does not imply direct access to such data, unless expressly authorized by its owner on each occasion.

We recommend that users do not provide any third party with their identification, password, or reference numbers that may be provided by Aperitivos Tapa S.A. Likewise, in order to ensure the protection of professional secrecy in all communications between Aperitivos Tapa S.A. and the client, the client/user must not disclose confidential information to third parties.

CHANGES TO THE SECURITY AND DATA PROTECTION POLICY

Aperitivos Tapa S.A. reserves the right to modify its security and data protection policy in order to adapt it to new legislative or jurisprudential developments, as well as to any that may arise from existing standard codes in the matter, or due to strategic corporate decisions. Such changes will take effect from the date of their publication on the Aperitivos Tapa S.A. website.

CONTACT INFORMATION

This website is managed by Aperitivos Tapa S.A., with Tax ID (CIF) A28605061, registered with the Mercantile Registry of Madrid, Volume 5631, Section 3, Folio 31, Sheet 45824, Entry 1.

Phone: +34 949 387 700
Email: tapasa@tapasa.com

The information processing system is located at the registered office, which is established for the purposes of this Legal Notice at Aperitivos Tapa S.A., Avda. de la Industria, nº 22, Mondéjar, Guadalajara, 19110, Spain. It is under the supervision and control of Aperitivos Tapa S.A., which assumes responsibility for adopting technical and organizational security measures to protect the confidentiality and integrity of the information, in accordance with the provisions of the European General Data Protection Regulation (EU) 2016/679 of April 27, Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, and all other applicable national and sector-specific regulations.

In accordance with Law 34/2002 on Information Society Services and Electronic Commerce, Aperitivos Tapa S.A. informs users that the broad interpretation of this Law includes the provision of information by such means. In any case, the European General Data Protection Regulation (EU) 2016/679 of April 27, Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, and other applicable national regulations and their implementing rules shall apply—especially in regard to the collection of personal data, informing data subjects, and the creation and maintenance of personal data files.