Privacy Policy
This legal text provides details on how we collect and process your personal data through the use of our website https://casanisgroup.eu, including any information you may provide through the site when reserving a table or subscribing to our newsletter.
By providing us with your data, we inform you that our services are not available to individuals who are legally prevented from giving consent. Therefore, when you submit forms to us, you guarantee that you have sufficient capacity to grant consent.
Below, we inform you about the data protection policy of: Grupo Casanis (you can consult the list of companies in Annex I)
1. Data Controller.
Contact details of the controller:
Grupo Casanis (you can consult the list of companies in Annex I), registered address: Avenida Ricardo Soriano 36, Edificio María III, 1ª Planta, Puerta 103 29601 Marbella Málaga, and telephone: +34 952900450 / +34 952770592. We have a Data Protection Officer, whom you can contact via email at: dpo@casanisgroup.eu
Grupo Casanis is the controller of your data (hereinafter “we”, “us”, or “our”).
2. What data do we collect?
The General Data Protection Regulation defines personal data as any information relating to an identified or identifiable natural person; that is, any information capable of identifying an individual. This does not include anonymous or percentage-based data.
Personal data collected directly from the data subject will be treated confidentially and incorporated into the corresponding processing activities owned by Grupo Casanis.
On our Website, we may process certain types of personal data, which may include:
- Identity data: first name and last name.
- Personal characteristics data: date of birth and nationality.
- Contact data: email, phone number, and address.
We do not collect any special categories of personal data (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, or health data).
In the event that you are asked to provide personal data by law or under the terms of a contract between us, and you refuse to provide it, we may not be able to perform said contract or render the service, which must be communicated to us in advance.
3. How do we collect your personal data?
The means we use to collect personal data are:
- Through the form on our website, via our contact email, by phone, or by postal mail, when you:
- Request information about our services
- Contract the provision of our services
- Subscribe to any of our publications
To ensure the quality of our portal, we reserve the right to reject any registration request or to suspend or cancel a previously accepted registration if we consider that it does not meet these requirements or any other law or regulation. If this occurs, we will attempt to state the reasons for our decision, but we cannot commit to doing so in all cases.
- Through technology or automated interactions: on our site, we may automatically collect technical data about your equipment, browsing actions, and usage patterns. This data is collected through cookies or similar technologies. For more information, you can read our cookie policy here.
- Through third parties:
- Google: analytical or search data outside the European Union.
4. Purpose and legal basis for the use of your data.
The most common uses of your personal data are:
- For the execution of a contract between Grupo Casanis and you.
- When you give your consent to the processing of your data.
- When needed to comply with a legal or regulatory obligation.
- When necessary for our legitimate interest or that of a third party.
The User may revoke consent at any time by sending an email to dpo@casanisgroup.eu or by consulting the section on exercising rights below. Below, we attach a breakdown detailing how we will use your personal data, the legal basis for its processing, and the types of data involved. We may process personal data for additional legal reasons; if you need details regarding this, please send an email to dpo@casanisgroup.eu.
- Form: Private dining / private events
- Purpose: Management of the data provided to send information
- Type of data: First Name, Last Name, Email, Phone
- Legal basis for processing: Data subject’s consent (art. 6.1.a GDPR); Pre-contractual measures (art. 6.1.b GDPR); Necessary for legitimate interests pursued by the controller (art. 6.1.f GDPR)
- Form: Join the Nota Blu family
- Purpose: Management of the data provided to join
- Type of data: First Name, Last Name, Email, Phone, Nationality, Date of Birth, Address
- Legal basis for processing: Data subject’s consent (art. 6.1.a GDPR); Pre-contractual measures (art. 6.1.b GDPR); Necessary for legitimate interests pursued by the controller (art. 6.1.f GDPR)
- Form: Reserve a table
- Purpose: Management of table reservations
- Type of data: First Name, Last Name, Email, Phone
- Legal basis for processing: Data subject’s consent (art. 6.1.a GDPR); Compliance with a legal obligation applicable to the controller (art. 6.1.c GDPR); Performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract (art. 6.1.b GDPR); Necessary for legitimate interests pursued by the controller (art. 6.1.f GDPR)
Commercial communications: You will only receive communications if:
- You requested information or contracted a product or service from us.
- You provided your data by checking the appropriate box on our form.
- Provided you have not expressed your desire to stop receiving such communications.
We obtain your express consent before sending any communications. You can request to stop receiving communications at any time by emailing dpo@casanisgroup.eu.
When you opt out of receiving our communications, your personal data will remain stored as a result of the contract executed by you in order to comply with legal requirements.
Purpose: We will only use your data for the purposes for which it was collected, unless we reasonably consider that we must use it for another reason, notifying you beforehand so that you are informed of the legal basis for processing and provided the purpose is compatible with the original one.
5. How long will we keep your data?
Data will be retained for as long as necessary to fulfill the purpose for which it was collected and to determine any potential liabilities that may arise from said purpose and data processing. The provisions of applicable laws regarding retention periods will apply.
Email or form subscriber data: From the moment the user subscribes until they unsubscribe.
6. Minors.
Grupo Casanis does not authorize minors under 14 years of age to provide personal data through the channels available on this website (filling out web forms to request services, contact forms, or sending emails).
Therefore, individuals who provide personal data using such channels formally state that they are over 14 years of age, releasing Grupo Casanis from any liability for failure to comply with this requirement.
If your child under the established age limit has provided personal information to Grupo Casanis, please contact us to request the exercise of applicable rights.
In cases where services offered by Grupo Casanis are intended for minors under 14, mechanisms will be put in place to obtain authorization from the minor’s parents or legal guardians.
7. Exercise of Data Protection Rights:
How to exercise these rights? Users may send a communication to the registered address of Grupo Casanis or to the email address dpo@casanisgroup.eu, including a photocopy of their ID document or similar identification, to request the exercise of the following rights:
- Access to your personal data: You may ask Grupo Casanis if it is using your personal data.
- Request rectification if the data is inaccurate, or exercise the right to be forgotten regarding the data.
- Request limitation of processing, in which case the data will only be kept by Grupo Casanis for the exercise or defense of legal claims.
- Object to processing: Grupo Casanis will stop processing the data as indicated, unless there are compelling legitimate grounds or for the exercise or defense of potential claims.
- Data portability: In the event you wish for your data to be processed by another firm, Grupo Casanis will facilitate the transfer of your data to the new controller.
You may use the templates provided by the Spanish Data Protection Agency (AEPD) to exercise your rights: Here.
Complain to the DPO / AEPD: If you consider that there is a problem with the way Grupo Casanis is handling your data, you can direct your complaints first to the Data Protection Officer, who will mediate to resolve the issue:
- DPO Email: dpo@casanisgroup.eu
- Address: Avenida Ricardo Soriano 36, Edificio María III, 1ª Planta, Puerta 103 29601, Marbella Málaga.
- If it is not possible to resolve the conflict, you can always lodge a complaint with the relevant supervisory authority, which in Spain is the Agencia Española de Protección de Datos.
We will request specific information from you to help confirm your identity and guarantee your right to access your personal data (or exercise any other rights listed above). This is a security measure to ensure personal data is not disclosed to any person who has no right to receive it.
We will resolve all requests within the legally established period of one month. However, it may take longer than a month if your request is particularly complex. In this case, we will notify you and keep you updated.
8. Data Communication: Provision of services.
In the performance of our work, we may require assistance from third parties, who will only process data to render the contracted service and with whom we have implemented appropriate measures to safeguard your rights:
- Service providers offering IT and system administration services.
- Professional advisors including lawyers, auditors, and insurers providing banking, legal, insurance, and accounting consultancy services.
All data processors to whom we transfer your data will respect the security of your personal data and process it in accordance with the GDPR.
We only permit such processors to process your data for specified purposes and in accordance with our instructions. However, in compliance with transparency rules, you can request a list of the companies providing services to us by emailing dpo@casanisgroup.eu.
9. Data Security.
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed without authorization, altered, or disclosed.
In addition, we limit access to your personal data to those employees, contractors, and third parties who have a business need to know such data. They will only process your personal data according to our instructions and are subject to a duty of confidentiality.
We have established procedures to deal with any suspected personal data breach and will notify you and the Supervisory Authority should a security breach occur, as regulated in Articles 33 and 34 of the GDPR.
ANNEX I
CASABUBU S.L. Tax ID (CIF): B-92486695, Registered in the Mercantile Registry of Málaga on January 26, 2004, Volume 3447, Book 2359, Sheet 86, Page MA-67288, 1st Entry.
RESTOPLAGE MARBELLA S.L. Tax ID (CIF): B-93433365, Registered in the Mercantile Registry of Málaga on February 18, 2019, Volume 5446, Book 4353, Sheet 176, Page MA-130582, 6th Entry.
MZL Holding, S.L. Tax ID (CIF): B-93686194, Registered in the Mercantile Registry of Málaga on May 14, 2019, Volume 5838, Book 4745, Sheet 62, Section 8, Page MA150728, Entry A 1.
BBCG MARBELLA S.L. Tax ID (CIF): B-93715852, Registered in the Mercantile Registry of Málaga, Volume 5894, Book 4801, Sheet 166, Section 8, Page MA153327, I/A 1.
MYCO MILANO, S.L.U. Tax ID (CIF): B-09674326, Registered in the Mercantile Registry of Málaga on February 10, 2022, Volume 6127, Book 5034, Sheet 58, Section 8, Page MA165398, Entry A 1.