1. Data Controller

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), users are hereby informed that the personal data provided through this website will be processed by:

Data controller: Custodios y Gentiles de Palacio.S.L.
Trade name: Grupo OLEILÚ
Tax ID (CIF): B-26956540
Registered office: Plaza Pozo Santo, 2, 41004, Seville, Seville, Spain.
Contact email: hola@grupoleilu.com
Website: www.lapescaderiasevilla.com/

No Data Protection Officer has been appointed, as it is not mandatory under current legislation.

2. Purposes of Processing

The personal data collected through this website will be processed for the following purposes:

Contact form: to handle enquiries, information requests, quote requests or any other communication from the user.
User registration (where applicable): to manage the creation and maintenance of user accounts and provide access to restricted services or features.
Newsletter and commercial communications: to send information about news, events, promotions, marketing campaigns, prize draws, gastronomic activities and news related to Grupo OLEILÚ and La Pescadería.
Management of commercial relationships: to maintain the relationship with customers, users and potential customers, including the management of bookings, services and customer service.
Website analysis and improvement: to analyse browsing behaviour using analytics tools in order to improve the user experience and optimise the website's performance.
Advertising and digital marketing: to carry out marketing and personalised advertising through advertising platforms and tracking tools authorised by the user.
Birthday promotions: to use the date of birth provided by the user to send birthday greetings, special promotions or commercial benefits associated with that date.
Management of information on allergies and intolerances: the booking form includes an optional «Notes» field in which customers can voluntarily provide information about allergies, intolerances or other dietary conditions. This information will be processed solely to prepare the order correctly and ensure appropriate service during the visit to the restaurant. Only restaurant staff who need this information to provide the service (front-of-house and kitchen staff) will have access to it.

3. Categories of Personal Data Processed

Depending on the service used, the following categories of data may be processed:

First name and surname.
Email address.
Telephone number.
Province of residence.
Date of birth.
IP address.
Browsing data and website usage preferences.
Information voluntarily provided by the user in forms or communications.
Information voluntarily provided by the user in the «Notes» field of the booking, including, where applicable, data relating to allergies, intolerances or other dietary conditions.

The user guarantees that the personal data provided is accurate, truthful, and up to date, and undertakes to notify the Data Controller of any changes to such data.

4. Legal Basis for Processing

The legal bases for the processing of personal data are as follows:

Consent of the data subject: for sending newsletters, commercial communications and promotions, managing birthday promotions and using non-technical cookies (analytics, advertising, etc.).
Performance of pre-contractual or contractual measures: when the user requests information, makes enquiries, makes bookings or uses website features linked to the provision of services.
Legitimate interest of the data controller: to ensure the security of the website, prevent fraud, improve the services offered and analyse the website's performance, provided that the rights and freedoms of the data subject do not prevail.
Compliance with legal obligations: where a legal obligation requires the processing of certain data (for example, tax, accounting or security obligations).
Where the user voluntarily provides information on allergies, intolerances or other dietary conditions through the «Notes» field of the booking form, the processing of such data will be based on the explicit consent of the data subject, in accordance with Article 9(2)(a) of Regulation (EU) 2016/679 (GDPR), as these data may reveal information about their health.

Each form will clearly state the specific purpose and the applicable legal basis.

5. Data Retention Periods

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected. In particular:

Contact data: for as long as the relationship is maintained or until the user requests its deletion.
Data for commercial communications (newsletter, promotions): until the user withdraws consent.
Data linked to bookings, services or contractual relationships: for the periods necessary to address any liabilities arising from the provision of the service.
The information voluntarily provided in the «Notes» field regarding allergies, intolerances or dietary conditions will be kept for the same period as the rest of the booking data and will not be used for any purpose other than the proper provision of the service.
Data related to legal obligations: for the periods required by applicable legislation (tax, accounting, etc.).

Once these retention periods have expired, the personal data may be blocked and retained for the applicable statutory limitation periods before being permanently deleted.

6. Recipients and Data Processors

Data may be disclosed to or processed by providers of services necessary for the operation of the business and the website, acting as data processors, including:

Web hosting company.
Web maintenance and development services.
Email marketing platforms.
Web analytics services.
Advertising platforms.
Technology providers.

The website currently uses or may use services such as Webempresa, Mailchimp, Google Analytics, Google Tag Manager, Google Ads, Meta Pixel and Meta Ads, LinkedIn Ads and TikTok Ads, which will process data in accordance with their respective privacy policies and the data processing agreements entered into with Custodios y Gentiles de Palacio.S.L.

No personal data will be disclosed to third parties other than those indicated above, unless required by law or with the user's explicit consent.

7. International Data Transfers

Some of the technology service providers used by this website may be located outside the European Economic Area (EEA) or may carry out international transfers of personal data.

In such cases, these transfers will be carried out in accordance with the appropriate safeguards required by the General Data Protection Regulation (GDPR), including the use of Standard Contractual Clauses (SCCs) approved by the European Commission or any other legally recognised transfer mechanism, ensuring at all times a level of data protection equivalent to that provided within the European Union.

8. Data Subject Rights

Users may exercise the following rights in relation to their personal data at any time:

Right of access.
Right to rectification.
Right to erasure.
Right to object.
Right to restriction of processing.
Right to data portability.
Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right not to be subject to automated decision-making, including profiling, where applicable.

To exercise these rights, users may send a written request, clearly stating the right they wish to exercise and providing proof of identity, to:

Email: hola@grupoleilu.com

Postal address: Custodios y Gentiles de Palacio.S.L., Plaza Pozo Santo, 2, 41003, Seville, Spain.

Furthermore, if you consider that your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD).

9. Information Security

Custodios y Gentiles de Palacio.S.L. adopts the technical and organisational measures necessary to ensure an appropriate level of security and to protect personal data against loss, alteration, unauthorised access or improper processing, in accordance with the GDPR and the LOPDGDD.

However, users should be aware that no Internet security measure is completely invulnerable.

10. Minors

The services offered through the website are not specifically aimed at minors.

Where required by current legislation, the authorisation of parents or legal guardians may be requested for the processing of minors' personal data. If data of minors is detected without proper authorisation, the data controller will delete it.

11. Cookie Policy

This website uses its own and third-party cookies. Detailed information on what cookies are, which types the website uses, the purpose of each, their duration and how users can manage or disable them is available in the Cookie Policy.

On their first visit to the website, users can accept, reject or configure non-technical cookies through the cookie banner provided for this purpose, in accordance with current legislation. Full information about the cookies used on this website is available there.

12. Changes to this Privacy Policy

Custodios y Gentiles de Palacio.S.L. reserves the right to modify this Privacy Policy to adapt it to legislative or case-law developments or to changes in its activity.

The current version will always be the one published on the website. Users are advised to review this Privacy Policy periodically.

13. Contact

For any question relating to the protection of personal data, users may contact:

Custodios y Gentiles de Palacio.S.L.

Email: hola@grupoleilu.com

Website: www.lapescaderiasevilla.com/

Last updated: June 2026.