Users of this website are informed that the owner of the website corresponds to the PAPÚA Colón restaurant in Madrid, hereinafter PAPUA. Throughout the site, the terms “we”, “us” and “our” refer to the PAPÚA restaurant.

Until now the LOPD for data privacy issues had been complied with, a law that as of 25 May 2018 is replaced by the General Data Protection Regulation (RGPD) of the European Union. The person authorized and in charge of receiving any data transferred through the web is PAPÚA with contact email

With this Privacy Policy we express our commitment to maintain and guarantee commercial relations with the Client in a safe way by protecting their personal data and guaranteeing their right to privacy.

1. What personal data do we need?

Name, surname, email, telephone number and possession of intolerances

The data may be shared with third party services necessary for the normal operation of the NOAH web service. Later in another section of this document we will explain with which companies they are shared. But in no case will they be sold to advertising companies or marketed with them.

Additionally, when you visit our website, certain information is automatically stored for analytical and web performance reasons such as the IP address assigned by your provider Internet access.

2. Purpose, legitimacy, category of the data collected, consent to treatment and minors

As stated in the regulations, the User is informed that through the contact form (Name, surname, email, telephone number and possession of intolerances), which are stored in the customer management system, with The exclusive purpose of booking and contact if necessary, when booking at the restaurant.

Any user has the right to request the data that we have about him, by requesting the web contact email: < a href = "mailto:"> . Only the owner will have access to their data and it must be verified as such.

The acceptance of the Privacy Policy, through the established mandatory check procedure, will be understood for all purposes as the provision of EXPRESS CONSENT AND INEQUÍVOCO of the User to the processing of their personal data in the terms set forth in this document, as well as to the international transfer of data that occurs, exclusively due to the physical location of the facilities of the service providers and managers of data processing.

Therefore, legitimation is obtained through consent as we will establish later.

2.1. Minors

As established by the RGPD (art 8.1), in the event of being over 16 years of age, you can make a purchase at without the prior consent of your parents or guardians. Warning: If you are under 16 years old and you have not obtained the consent of your parents, you cannot make a purchase on the web so we will proceed to deny your request if we have evidence of it.

2.2. Legitimation

Thanks to consent, we can process your data, being a mandatory requirement to make a purchase or contact on the website.

The user has the right to be forgotten when he wants all his data to be deleted from the customer management system.

2.3. Data category

The data collected by the PAPÚA website is not considered sensitive or protected data (art 9.1): personal data that reveals ethnic or racial origin, political opinions, religious or philosophical convictions, union affiliation, data processing genetic, biometric data aimed at uniquely identifying a natural person, data related to health or data related to the sexual life or sexual orientation of a natural person. We only work with the minimum identifying data to carry out our work.

2.4. Data retention time

The client’s data (Name, surname, email, telephone and possession of intolerances) will remain in our system as legally required and for the normal operation of the web, unless the user does not exercise their right to their elimination .

3. Compliance with applicable regulations

As of May 25, 2018, we will be governed by the regulations that will come into force, this being the General Regulation on Data Protection (RGPD) of the European Union.

4. Security measures

The PAPÚA website has implemented the technical and organizational security measures necessary to guarantee the security of the User’s personal data and thus avoid its alteration, loss and unauthorized treatment and / or access, taking into account the status of the technology, the nature of the stored data and the risks to which they are exposed, whether they come from human action or from the physical or natural environment. All of this in accordance with the provisions of the RGPD.

Specifically, the measures we adopt are:
– Connection with SSL certificate on the web and its subdomains.
– Encryption of keys and passwords using standard cryptographic algorithms.
– Server protection through firewalls, process isolation, and other standard security measures.

5. Exercise of rights

The method that the User must use to communicate with PAPÚA will be through the web contact form or an email account. Any information that we need to store by virtue of a legal, fiscal or contractual obligation, will be blocked and only used for said purposes instead of being erased.

The User may exercise their rights by communication by email addressed to PAPÚA with the reference “Data protection”, specifying your data, proving your identity and the reasons for your request at the following email address:

6. Modification of the privacy policy

PAPÚA reserves the right to modify the Privacy Policy, motivated by a legislative, jurisprudential or doctrinal change of the Spanish Agency for Data Protection.

Any modification of the Privacy Policy will be published at least ten days before its effective application.

7. Responsible for the client management system and those in charge of the treatment

The person in charge of the customer management system and its data is PAPÚA

8. Services offered by third parties on this website

To provide services strictly necessary for the proper functioning of the website, PAPÚA uses the following providers under their corresponding privacy conditions: Google Analytics and Cover Manager

9. Do you want to revoke your consent?

In accordance with the RGPD you have the right to object and to be forgotten, for this, you must communicate with PAPÚA through the contact form or email. The system may require a period of time that in no case will exceed 48 hours for your opposition or revocation to become effective.

10. Acceptance, consent and revocability

The User declares to have been informed of these conditions on the protection of personal data, accepting and consenting to the treatment thereof by PAPÚA in the manner and for the purposes indicated in the Legal Notice.
< br> As you well know and we have communicated to you throughout this Privacy Policy, you can revoke your data at any time, but without affecting actions already carried out in the past, that is, without retroactive character.

11. Systems for capturing personal data and their purpose

– Reservation system for the restaurant: Cover Manager
– Cookies. When the User browses this Website, “cookies” are stored. The user can consult the Cookies Policy at any time to obtain more information on the use of these and how to deactivate them.
– Tracking systems used on this site: Google (Analytics), to perform statistics.