Privacy Policy
1. Data controller
LA LOBERA DE MARTÍN S.L.
Tax ID: B99134157
Address: C/ Coso, 35 – Centro Comercial Puerta Cinegia, premises, 50003 Zaragoza, Spain
Email: admon@laloberademartin.org
2. What data we process and why
Reservations
To manage a reservation, we may process the date and time, number of guests, first and last name, email address, telephone number and any comments voluntarily provided by the customer.
These data are used to process, confirm, modify, cancel and manage the reservation and to send the communications necessary in connection with it.
Management may be carried out through the reservation systems used by the restaurant, including its reservation book.
Allergies, intolerances and other health information
When a customer voluntarily provides information about allergies, intolerances or other health-related circumstances, such data will be processed solely to meet needs connected with the provision of the service and on the basis of the customer’s explicit consent.
Internal reservation management
Private messaging groups are used for internal reservation management and are accessible only to authorised employees responsible for this function.
Only the data required to manage reservations are communicated through these groups. Messages relating to reservations that have already taken place are deleted daily, leaving only information about future reservations for as long as it is needed for their management.
Reservations with a guarantee
Where a reservation is subject to a guarantee policy, in addition to the reservation data we may process the data and evidence required to manage the guarantee, prove acceptance of its terms, process the payment transaction, record its result, manage incidents and, where applicable, prove enforcement of the guarantee.
Gift cards
To manage the purchase of a gift card, we may process the purchaser’s name, email address and telephone number, the product and units purchased, amount, displayed sender name and dedication.
Where the card is purchased for another person, the recipient’s name and email address may also be processed.
These data are used to process the purchase, payment, issue, delivery and use of the gift card.
The card is delivered exclusively by email. Where the purchaser indicates that it is for another person, it will be sent to the email address provided for the recipient.
We may also process the data needed to manage the card’s status, redemptions and, for products that allow it, partial use, remaining balance or outstanding units.
Redemption is carried out by presenting the relevant code or QR code and does not require personal identification of the holder.
Gift card dedications
The purchaser is responsible for the content voluntarily entered in the dedication field and must ensure that they have sufficient authority to include personal data or references to third parties.
We recommend not including sensitive information, specially protected data or personal information that is unnecessary for the purpose of the gift.
LA LOBERA DE MARTÍN is not responsible for content entered by the customer.
The restaurant reserves the right to delete, block or refuse to reproduce content that is unlawful, offensive, discriminatory, threatening, contrary to third-party rights, infringes intellectual or industrial property rights, or is clearly contrary to the law or good practice.
Where possible, deletion or non-reproduction of such content will not affect the validity of the gift card or the remainder of the purchase.
Payments
Payments associated with guarantees and gift cards are processed through specialised payment services. LA LOBERA DE MARTÍN S.L. does not store full bank card details.
The data required to identify and evidence the transaction, manage incidents and address liabilities arising from it may be retained.
Contact form
Through the contact form we may process first and last name, email address, telephone number, selected department and message content.
The data are used exclusively to receive, manage and respond to the enquiry or request.
The information is sent by email to the relevant department and is not stored in a database specifically for the contact form.
Email and SMS
Email and SMS services may be used for communications necessary in connection with reservations, guarantees, gift cards, enquiries and other requested services.
The data are not used to send newsletters, promotions or general marketing communications.
Social media
When a person voluntarily contacts LA LOBERA DE MARTÍN through its social media profiles, the data provided will be used solely to respond to the communication or enquiry.
Processing carried out directly by each social network is governed by its own terms and privacy policies.
CVs
Data contained in CVs voluntarily submitted by email will be used to assess the application and the possible participation of the person concerned in recruitment processes.
Where the profile may be of interest for future vacancies, it may be retained for as long as reasonably necessary for that purpose. The data will be deleted when they are no longer needed.
Video surveillance
The premises have video surveillance systems to protect people, property and facilities. The cameras capture images and do not record sound.
Images will be retained for a maximum of one month unless they need to be kept to evidence events or made available to the competent authorities.
3. Legal basis
Depending on the circumstances, data will be processed on the basis of performance of a contract or pre-contractual measures, the data subject’s consent, compliance with legal obligations or legitimate interests.
4. Recipients and service providers
To provide its services, LA LOBERA DE MARTÍN S.L. may use external service providers that need to process certain personal data.
These may include hosting and technology maintenance providers, email, messaging and communications services, SMS services, payment services, security and alarm services, advisers and other professional services.
Access by these providers will be limited to the data necessary to provide the relevant service.
Data may also be disclosed to public authorities, courts, law enforcement bodies or other competent authorities where required by law.
5. International data transfers
Some technology providers may process personal data outside the European Economic Area. Where this occurs, the processing will be carried out in accordance with the applicable data protection legislation.
6. Data retention
Personal data will be retained for as long as necessary for the purpose for which they were collected.
Once that purpose has ended, the data may be kept duly blocked for the periods established by law in order to address possible liabilities.
- Internal messages relating to reservations that have already taken place are deleted daily.
- Data linked to guaranteed reservations will be retained for the periods necessary to evidence the transaction and address possible claims or liabilities.
- Gift card data will be retained while the card remains valid and afterwards for the legally applicable periods.
- CVs may be retained for as long as they remain reasonably necessary for future recruitment processes.
- Video surveillance images will generally be retained for a maximum of one month.
7. Rights
Data subjects may, where applicable, exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability.
To exercise these rights, a request may be sent to admon@laloberademartin.org, stating the right to be exercised and providing the information necessary to identify the applicant.
8. Complaints
If a person considers that the processing of their personal data does not comply with the applicable rules, they may lodge a complaint with the Spanish Data Protection Agency (AEPD).
9. Security
LA LOBERA DE MARTÍN S.L. applies technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or improper disclosure.
10. Changes to this policy
This Privacy Policy may be updated when the processing activities change or when it is necessary to adapt it to regulatory changes.
Last updated: 7 October 2026.
