Privacy policy

Information from Burger Brava (demo), generated with the details the restaurant has on the platform.

1. Data controller

The controller of the data you give us on this website (orders and bookings) is the restaurant:

⚠️ The restaurant has not yet completed the following on the platform: the company name or the owner’s full name, the NIF (tax ID), the registered tax address. We do not fill them in on its behalf. In the meantime, for any matter you can contact the premises directly using the contact details on this page.

2. Who else is involved: elpizzero, as processor

The restaurant uses the elpizzero platform, owned by Ángel Rives García (NIF 15415960A, Calle Redován 3, 03350 Cox (Alicante), España; privacy contact: privacidad@elpizzero.com). elpizzero stores and manages the data of your orders and bookings on behalf of the restaurant and following its instructions, as a processor (article 28 GDPR), under the agreement both have signed: data processing agreement.

There is some data that elpizzero processes as a controller in its own right, because it belongs to the platform and not to this restaurant: the customer account (“My account”, which works for all restaurants that use elpizzero), the session, security and fraud prevention, and visit analytics. For that data, elpizzero’s privacy policy applies.

3. What data we process

• Order: name, phone, email (optional), delivery address if delivered to your home, what you order, your notes and, if you pay by card, the payment reference (card details do not pass through the platform).
• Booking (if the restaurant offers it): name, phone, email, date, time, number of people and notes, including any allergies or needs you choose to state.
• Invoice: if you request an invoice in your name, your NIF (tax ID), name or company name and address.
• Technical data: the IP address from which you place the order, to prevent fraud and protect the service.

4. Purposes and legal basis

• Preparing and delivering your order or managing your booking, keeping you updated and handling your questions or complaints: necessary to perform what you contract (art. 6.1.b GDPR).
• Allergies or needs stated in a booking: only with your explicit consent, which you give with the booking checkbox (art. 9.2.a GDPR). You can withdraw it whenever you wish.
• Invoicing and tax and accounting obligations (including the sales records required by invoicing rules): legal obligation (art. 6.1.c GDPR).
• Preventing fraud and keeping the website secure: legitimate interest (art. 6.1.f GDPR).
• Sending you promotions by email, only if you tick the box when ordering: your consent (art. 6.1.a GDPR and art. 21 LSSI-CE). You can unsubscribe in every email.
• Visit analytics: only if you accept it in the cookie notice. See the cookie policy.

The fields marked as mandatory in the form are necessary to place the order or make the booking; without them it cannot be processed.

5. Who receives the data

• elpizzero, as processor, and the technical providers it uses to deliver the service (hosting and email in the European Union, address search and maps based on OpenStreetMap and, to translate your notes for the kitchen, an artificial intelligence service that does not receive your name, phone, email or address). The full, up-to-date list is in the data processing agreement.
• Whoever delivers your order (restaurant staff or the delivery company it works with): the address, phone and order summary.
• Public authorities (for example, the Spanish Tax Agency) when required by law.
• Your data is not sold or transferred to anyone for commercial purposes.

Some of those providers are outside the European Economic Area (for example, in the United States). In those cases the transfer is based on an adequacy decision of the European Commission or on standard contractual clauses; details are in elpizzero’s privacy policy.

6. How long it is kept

• Orders, bookings and invoices: for as long as tax and commercial rules require (as a general rule, 4 years under tax law and up to 6 years under the Spanish Commercial Code, Código de Comercio). If you ask for your data to be deleted earlier, your name, phone, email and address are removed, and only what the law requires to be kept about the sale is retained.
• Promotions: until you unsubscribe.
• Visit analytics: 26 months at most.

7. Your rights and how to exercise them

You can request access to your data, rectify or erase it, object to or restrict its processing, request its portability and withdraw at any time any consent you have given, without affecting processing carried out before.

Contact the restaurant, which is the controller: demos@elpizzero.com · Sevilla. Give your name, which right you wish to exercise and, if possible, the order number or booking date. It will reply within one month (art. 12.3 GDPR).

You can also delete your data yourself from “My account” or from the platform’s opt-out page, and write to elpizzero (privacidad@elpizzero.com), which, as processor, will help the restaurant handle your request.

If you believe your data has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) (C/ Jorge Juan 6, 28001 Madrid · www.aepd.es).

8. Minors

If you are under 14, you need your parents’ or guardians’ permission to place orders or make bookings. Alcoholic drinks are only sold to people aged 18 or over.