PRIVACY POLICY
1. GENERAL INFORMATION ON DATA PROTECTION
In accordance with the General Data Protection Regulation (GDPR) EU 679/2016, Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, and Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE), we provide the following information regarding the processing of personal data on this website:
Who is the Data Controller of this website?
The data controller is BORDAGROUP SL, located at Plaça de l’Olivar, 4, Distrito Centro, 07002 Palma de Mallorca (Balearic Islands). You can contact us at:
Email: info@olivarbistro.com
Phone: +34 871 209 395
How do we collect your data?
We collect your data when you voluntarily provide it to us, such as through our contact form.
Our IT systems also automatically collect technical data (e.g., browser, operating system, time of access) when you visit our website.
Why do we use your data?
Your personal data is processed for the following purposes:
To manage and respond to queries and information requests via the contact form, email address, and other contact methods provided on the website.
To manage service or product information and quote requests.
If you have given your consent, to offer services related to your interests and possibly create a commercial profile. No automated decisions will be made based on this profile.
Some data is collected to ensure the website runs error-free. Other data may be used to analyze user behavior.
How long will we keep your personal data?
Your data will be retained as long as necessary for the purposes described and to comply with legal obligations and handle possible claims.
What is the legal basis for processing your data?
The legal basis is:
Execution and maintenance of a contractual or commercial relationship with you (Article 6.1.b of GDPR and Organic Law 3/2018).
Compliance with legal obligations (Article 6.1.c of GDPR and Organic Law 3/2018).
Who will your data be shared with?
Generally, your data will not be shared with third parties unless required by law. External service providers may access your data to perform services on behalf of the data controller.
International data transfers
Using services like Google Analytics and Google Maps involves transferring data to the USA. We apply Standard Contractual Clauses (SCCs) approved by the EU Commission to ensure adequate data protection.
What are your rights?
You have the right to access your personal data, request corrections, deletion, restriction of processing, object to processing, and request data portability.
To exercise your rights, write to BORDAGROUP SL at Plaça de l’Olivar, 4, Distrito Centro, 07002 Palma de Mallorca (Balearic Islands) or email info@olivarbistro.com.
You may file a complaint with the Spanish Data Protection Agency: www.agpd.es.
2. HOSTING AND CONTENT DELIVERY NETWORKS (CDN)
External Hosting
This website is hosted by an external provider. Personal data collected may include IP addresses, contact requests, metadata, contract information, and access logs.
Hosting is used to fulfill contractual obligations (Article 6.1.b GDPR) and ensure secure, fast service (Article 6.1.f GDPR).
The host will process your data only under our instructions and to the extent necessary.
Data Processing Agreement
We have signed a data processing agreement with our hosting provider to comply with GDPR.
3. DATA PROTECTION POLICY
We apply the principle of active responsibility, constantly updating and improving the data protection system to ensure:
Respect for fundamental rights and freedoms.
Lawful, fair, and transparent processing.
Accurate and relevant data limited to its intended purposes.
Clearly defined and legitimate processing purposes.
This document aims to inform users about the collection and use of personal data, users’ rights, and the legal obligations applicable.
We treat your data confidentially and in accordance with data protection laws. Please note that data transmission over the internet (e.g., email) may have security vulnerabilities.
Technical and Organizational Measures
Our systems include appropriate measures to ensure confidentiality and data retention.
Data is transmitted over a secure SSL-certified HTML protocol.
SSL/TLS Encryption
We use SSL or TLS encryption for secure transmission of confidential content. A secure connection can be recognized by “https://” and a lock icon in your browser.
Unsolicited Emails
We object to the use of our published contact information for unsolicited promotional material and reserve the right to take legal action against SPAM.
Objection to Advertising
If you’ve given consent to receive advertising and wish to revoke it, you may do so at any time by emailing: info@olivarbistro.com
Privacy Policy Changes
We reserve the right to update this policy in response to legal or judicial developments. Significant changes will be communicated via the website or email when applicable.
4. DATA COLLECTION ON THIS WEBSITE
Cookies
Our site uses cookies—temporary (session) or permanent text files stored on your device.
Third-party cookies may be used (e.g., for payment processing).
Some cookies are essential for website functionality (e.g., cart). Others may analyze user behavior or display advertising.
Essential cookies are stored under Article 6.1.f GDPR. If consent is requested, processing is based on Article 6.1.a GDPR.
You can configure your browser to allow or reject cookies, or delete them automatically when closing your browser. Disabling cookies may limit website functionality.
We will notify you separately if third-party or analytical cookies are used and request consent if necessary.
Contact Form
If you use our contact form, we will store your input to manage your query. We do not share this information without your consent.
Processing is based on Article 6.1.b GDPR (contract execution) or 6.1.f GDPR (legitimate interest), or Article 6.1.a (if consented).
Your data will be kept until deletion is requested, consent is withdrawn, or its purpose expires.
Email, Phone, or Fax Inquiries
If you contact us by these means, we will store your query and personal data to process your request.
Data will not be shared without consent.
Processing is based on Article 6.1.b, a, or f of GDPR.
Your data will be stored until deletion is requested, consent withdrawn, or the data is no longer needed.
5. ANALYTICS AND ADVERTISING TOOLS
Google Analytics
This site uses Google Analytics by Google Ireland Limited, Gordon House, Dublin 4, Ireland.
Google Analytics uses cookies to analyze user behavior. Data may be transmitted to and stored in the US.
Processing is based on Article 6.1.f GDPR (legitimate interest) or Article 6.1.a (if consented).
IP Anonymization
IP anonymization is activated, shortening your IP address within the EU before transmission to the US. Only in exceptional cases is it fully sent to a US server.
Browser Add-On
You can prevent cookies by adjusting your browser settings or installing the plugin at:
https://tools.google.com/dlpage/gaoptout?hl=en
Opt-out
You can prevent data collection via a cookie by clicking a deactivation link (not provided here).
More info: https://support.google.com/analytics/answer/6004245?hl=en
Data Processing Agreement with Google
We have a data processing agreement with Google.
Demographics in Google Analytics
This site uses Google’s demographic features for age, gender, and interests—based on Google ads and third-party data.
These cannot be linked to specific individuals and can be deactivated in your Google account settings.
Retention Period
User- and event-level data linked to cookies or IDs is anonymized or deleted after 14 months.
More info: https://support.google.com/analytics/answer/7667196?hl=en
6. PLUGINS AND TOOLS
Google Maps (with consent)
We use Google Maps via API, provided by Google Ireland Limited.
To protect your data, Google Maps is disabled by default on first visit. It is only activated if you consent (Article 6.1.a GDPR).
Once activated, Google Maps may store your IP address and transfer it to the US. We have no control over this process.