Privacy Policy

In accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on Data Protection (LOPDGDD) and Spanish Law 34/2002 on Information Society Services (LSSI), we inform you of how we process your personal data. This is a translation; in case of discrepancy the Spanish version prevails.

Summary

• Controller: Adleo Hostelería S.L. (“Casa Ireneo”), Tax ID B76700871. The Grupo Caramba newsletter and SMS list is controlled by Factoría Caramba S.L.
• Purposes: managing bookings, orders, purchases and event requests; answering enquiries; satisfaction surveys; accounting and tax management; job applications; and sending marketing communications (email newsletter, SMS and messaging) to those who have requested them.
• Legal basis: performance of a contract or pre-contractual steps, legal obligation, legitimate interest and consent.
• Recipients: service providers (bookings, payments, email and SMS delivery, web hosting, analytics). We do not sell your data. Some providers are located in the USA, with the safeguards described below.
• Rights: access, rectification, erasure, objection, restriction, portability and withdrawal of consent, by writing to hola@casaireneo.com.

1. Who is the data controller?

Adleo Hostelería S.L. (trade name “Casa Ireneo”, part of Grupo Caramba)
Tax ID (CIF): B76700871
Address: Av. La Salle, 40, 38005 Santa Cruz de Tenerife, Spain
Email: hola@casaireneo.com

This policy applies to data collected through the website https://www.casaireneo.com/, its subdomains and sections, the sign-up forms for our communications, and the linked social networks and messaging apps (including WhatsApp) (the “Website”). Please review it regularly; the date at the top shows when it was last updated.

2. Why do we process your data and on what legal basis?

2.1. Bookings, orders, purchases and event requests

Purpose: managing table bookings, orders (e.g. pick-up orders or home delivery), payments, group menu and event requests, and answering enquiries made through any channel.

Data: name, surname, phone number, email, address (for deliveries), booking or order details and, where applicable, allergies or preferences you tell us about.

Legal basis: performance of a contract or pre-contractual steps at your request. Allergy information is only processed because you provide it so that we can serve you safely.

2.2. Satisfaction surveys

Purpose: learning your opinion of our service in order to improve it.

Data: contact details and booking or order history.

Legal basis: legitimate interest in improving our services. You may object at any time.

2.3. Accounting, tax and administrative management

Purpose: invoicing and compliance with accounting and tax obligations.

Data: identification data and transaction data.

Legal basis: compliance with legal obligations.

2.4. Job applications

Purpose: assessing the CV you send us and including you in recruitment processes.

Data: the information in your CV and obtained in interviews.

Legal basis: pre-contractual steps taken at your request.

2.5. Marketing communications: email newsletter, SMS and messaging

Purpose: sending you news, events, special menus, offers and promotions from Casa Ireneo and, if you have agreed to it, the other Grupo Caramba restaurants (Bárbaro, Baraván, Casa Ireneo, Café Caramba and Kon·Tiki), by email, SMS or messaging apps, depending on the channels you have accepted.

Data: name, email, mobile phone number, language, preferred restaurant or interests, birthday if you provide it, date and method of sign-up, and interaction with our messages (opens, clicks and unsubscribes).

List controller: newsletter and SMS subscriptions for all Grupo Caramba restaurants are managed in a shared list controlled by Factoría Caramba S.L. (Tax ID B76823277, C/ Rubens Marichal López, 70, 5ºB, 38004 Santa Cruz de Tenerife, Spain). When you subscribe, your subscription data is processed by this company to send you these communications. You can exercise your rights regarding this list by writing to hola@casaireneo.com or hola@grupocaramba.com.

Legal basis:

• Express consent, given by ticking the corresponding box when you sign up (e.g. on our web forms, when booking or at the restaurant). Marketing SMS and WhatsApp messages are only sent to people who have given specific consent for that channel.
• Legitimate interest (art. 21.2 LSSI) to send emails about our own similar products and services to customers who gave us their email when purchasing from us, provided they have not objected. You are given the option to object when your data is collected and in every message.

How to unsubscribe: you can withdraw your consent at any time, free of charge: using the “unsubscribe” link in every email, following the opt-out instructions included in every SMS, or by writing to hola@casaireneo.com. Withdrawal does not affect the lawfulness of previous messages.

Personalisation and measurement: to send you more relevant messages we may group subscribers by language, preferred restaurant or interaction with our messages, and we measure opens and clicks statistically. We do not make automated decisions with legal effects on you.

Marketing subscriptions are intended for people aged 18 or over. The SMS programme terms are available at https://grupocaramba.com/condiciones-sms.php.

2.6. Cookies and web analytics

Analytics and advertising cookies (Google and Meta) are only activated if you accept them in the cookie banner. More information in our Cookie Policy.

3. How long do we keep your data?

• Bookings, orders and enquiries: as long as needed to manage them and, afterwards, for the legal periods for possible claims.
• Accounting and tax data: for the periods required by commercial and tax law (generally 6 years).
• Marketing communications: until you unsubscribe. After unsubscribing we will only keep a blocked record of your consent and opt-out, to prove compliance and avoid sending you further messages.
• Job applications: up to one year.

Once these periods end, data will be kept blocked under article 32 LOPDGDD only for the limitation period of any possible liabilities, and then deleted.

4. Who do we share your data with?

We do not sell or transfer your data to third parties, except where required by law. We use providers who process data on our behalf as data processors, under the contracts required by the GDPR, including:

• Booking management: CoverManager.
• Online payments: Stripe.
• Newsletter and SMS delivery: Mailchimp (Intuit Inc. / The Rocket Science Group LLC).
• Web hosting, email and IT services.
• Analytics and advertising (only with your cookie consent): Google and Meta.
• Accounting, tax and legal advisors, and public authorities where legally required.

If you subscribe to our marketing communications, your subscription data is added to the shared Grupo Caramba list, controlled by Factoría Caramba S.L., to send you information from the group's restaurants (Bárbaro, Baraván, Casa Ireneo, Café Caramba and Kon·Tiki) that you have agreed to.

5. International transfers

Some of the providers above (such as Mailchimp, Stripe, Google or Meta) may process data in the United States. These transfers are carried out with appropriate safeguards: the provider's certification under the EU-U.S. Data Privacy Framework or, failing that, the Standard Contractual Clauses approved by the European Commission. You can request more information at hola@casaireneo.com.

6. What are your rights?

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to hola@casaireneo.com or by post to Adleo Hostelería S.L., Av. La Salle, 40, 38005 Santa Cruz de Tenerife, Spain, stating the right you wish to exercise. If necessary to verify your identity, we may ask for additional information. We will reply within one month.

If you believe we have not handled your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan, 6, 28001 Madrid.

7. Security and accuracy

We apply appropriate technical and organisational measures to protect your data. You guarantee that the data you provide is accurate and agree to inform us of any changes.