Privacy policy
This Privacy Policy describes how Distribuciones Alimentarias El Pibe, S.L. collects, uses and protects the personal data of its customers and users.
For the purposes of this Policy, a user is any person who visits our restaurants, browses the website https://elpibe.es/ (the «Website»), downloads or uses the ELPIBE mobile application (the «App»), including its versions and content in different languages, or interacts with us by any other means (email, social media, telephone, etc.).
Children under 14
Registration in the App and participation in the Club Pibelovers are reserved for people over 14 years of age. We do not knowingly collect data from children under that age for these purposes without the consent of the person holding parental authority or guardianship. If we detect that data of a child under 14 has been provided without the corresponding authorisation, we will take reasonable measures to delete it.
Information about the data controller
Identity: Distribuciones Alimentarias El Pibe, S.L. («El Pibe»)
Tax ID (N.I.F.): B63455224
Postal address: Avda. Can Salvatella 22-24, nave, 08210 Barberà del Vallès
Phone: 937 294 403
Email: lopd@elpibe.es
How we obtain your data
The personal data we process may come from different sources:
- Information you provide to us directly (for example, when placing an order, registering in the App or sending us an enquiry).
- Data generated as a result of your relationship with us (order history or participation in the loyalty programme).
- Data obtained through cookies or similar technologies on the Website.
- Data derived from the use of the App.
Categories of data processed
- Depending on the channel used (restaurant, Website or App), we may process the following categories of data: identification data (first name and surname), contact data (email, telephone and address), financial and payment data, order, transaction and consumption data, browsing data (cookies and IP addresses), language preferences, geolocation (when authorised by the user) and images (video surveillance), as well as data derived from the use of the App (interactions, frequency and preferences).
Purposes of the processing
El Pibe will process your data for the following purposes, on the corresponding legal bases:
- Management of the contractual relationship and provision of services. This includes managing orders placed through the App or the Website, their preparation and delivery or collection, processing payments, invoicing, managing the user account, where applicable, managing the Club Pibelovers loyalty programme and handling incidents related to orders.
The legal basis for this processing is mainly the performance of a contract or the application of pre-contractual measures and, in certain associated cases, compliance with legal obligations.
- Management of the loyalty programme and personalisation of offers. To enable participation in the Club Pibelovers and the accumulation and redemption of Pibepoints, and, where applicable, to offer personalised promotions, we process purchase history, restaurants visited, the date, time and amount of purchases, products purchased and frequency of use of the App.
- The processing necessary to administer the Club Pibelovers and the Pibepoints, including their calculation, consultation, expiry and redemption, is based on the performance of the contract. Commercial profiles to personalise promotions will be created on the basis of consumption habits, order history, frequency of use of the App and user preferences, including, where applicable, the selected language, provided there is a valid legal basis.
- The legal basis for profiling will be consent when expressly requested or, where applicable, the legitimate interest of El Pibe, after weighing the rights and interests of the user. Users may object to profiling and the personalisation of offers at any time. Profiling will not, in itself, give rise to decisions based solely on automated processing that produce legal effects or similarly significant effects.
- Sending commercial communications. This includes sending promotions, news and discounts by email, SMS or other channels.
- The legal basis is consent, unless there is a prior contractual relationship and similar own products or services are being promoted, in which case legitimate interest and the exception provided for in article 21.2 of the LSSI may apply. Users may withdraw their consent or object to receiving commercial communications at any time, including through the unsubscribe option included in each communication.
- Handling enquiries and requests (Website and other channels). We process the data provided through contact forms, email or social media to handle requests, enquiries or complaints.
The legal basis is the application of pre-contractual measures or the performance of a contract and, where the enquiry is not linked to a contractual relationship, the legitimate interest of El Pibe in handling it.
- Geolocation in the App. When users activate the corresponding permissions, we may process their location to show the nearest restaurant or send contextualised promotions.
- The legal basis is the consent of the data subject. Consent may be withdrawn at any time from the device settings.
- Video surveillance in our establishments. We process images captured by video surveillance systems to ensure the safety of people, property and premises.
The legal basis is compliance with applicable legal obligations and, where applicable, the legitimate interest of El Pibe in protecting people, property and premises.
Data retention
Data will be kept for as long as necessary for each purpose and, thereafter, duly blocked for the applicable legal periods in order to address any possible liabilities. In particular, order and invoicing data will be kept for the applicable commercial, tax and consumer periods; data used for commercial communications, until the user withdraws consent or objects; and video surveillance images, for a maximum of one month, unless they must be kept to prove facts or comply with requests from the authorities.
The data of users registered in the App will be kept for as long as the account remains active. Uninstalling the App does not automatically delete the data; it is necessary to delete the account or expressly request its deletion. After the account is closed, only the data that must be kept to comply with legal obligations or address possible liabilities will be retained, duly blocked.
Recipients of the data
As a general rule, data is processed internally. However, it may be disclosed to:
- Other companies of the El Pibe Group, where necessary for the proper provision of the service and always within the purposes described in this Policy.
- Technology, hosting, communications, analytics and maintenance providers involved in the operation of the Website and the App, including those acting as data processors.
- Financial institutions and payment providers, as well as, where appropriate, restaurants and logistics or delivery providers involved in managing orders.
- Authorities, where there is a legal obligation to do so.
In the case of international transfers, the safeguards provided for in current legislation will be adopted.
International transfers
Where certain providers are located outside the European Economic Area or access data from outside it, international transfers will be carried out with the appropriate safeguards provided for in current data protection legislation, including the standard contractual clauses approved by the European Commission or other legally valid mechanisms.
Security
El Pibe has adopted the technical and organisational measures necessary to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing.
Rights of data subjects
Users may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw their consent at any time, without affecting the lawfulness of prior processing. They may also object to processing based on legitimate interest and to profiling for marketing purposes, and have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except in the cases permitted by law.
These rights may be exercised by post to Avda. Can Salvatella 22-24, nave, 08210 Barberà del Vallès, marked «Data Protection», or by email to lopd@elpibe.es. We may request documentation to verify your identity where necessary.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Updates
This Policy may be amended to adapt it to regulatory, technological or operational changes. The current version will always be available on the Website and in the App.