Legal

Privacy Policy

Last Updated: 2 November 2023

Tangreto (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, and share your personal information in compliance with applicable data protection laws, including the European Union’s General Data Protection Regulation (GDPR) and relevant U.S. privacy laws such as the California Consumer Privacy Act (CCPA). By using our website tangreto.com (“Site”) or our Services, you agree to the terms of this Privacy Policy.

1. Scope

This Privacy Policy applies to all users of Tangreto’s Services globally. It describes how we collect, use, and protect your information. It also explains your rights under GDPR and U.S. laws.

2. Information We Collect

We collect personal information for legitimate business purposes. This includes:

2.1 Automatically Collected Data

  • IP addresses
  • Browser types and versions
  • Operating system details
  • Referring URLs
  • Device identifiers and usage data

2.2 User-Provided Data

  • Name
  • Email address
  • Postal address
  • Phone number
  • Booking preferences (e.g., dietary or accessibility requirements)
  • Payment details (processed securely through third-party providers)

2.3 Sensitive Data

We may collect sensitive data (e.g., dietary restrictions) only when necessary and with your explicit consent.

3. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

  • Contractual Necessity: To provide the Services you request.
  • Legitimate Interests: To improve our Services and ensure security.
  • Consent: For marketing communications (where required by law).
  • Legal Obligations: To comply with applicable laws and regulations.

4. How We Use Your Information

We use your information to:

  • Provide and manage your bookings and our Services.
  • Communicate with you regarding bookings, updates, or changes.
  • Improve our website and Services.
  • Comply with legal obligations.
  • Send newsletters and promotional communications (with your consent).

We do not engage in automated decision-making or profiling based on your data.

5. Sharing Your Information

We share your personal data only when necessary:

  • Service Providers: For payment processing, marketing, or other operational needs.
  • Legal Authorities: When required by law or to protect our rights.
  • Affiliates: To streamline operations within our group of companies.

We do not sell personal data to third parties.

6. Data Transfers

Your data may be transferred to and stored outside the European Economic Area (EEA), including the United States. We ensure such transfers comply with GDPR and other applicable laws by using safeguards such as:

  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules (BCRs)

For U.S. users, we comply with relevant state laws such as CCPA.

7. Cookies and Tracking Technologies

We use cookies to enhance your experience. This includes:

  • Necessary cookies for website functionality.
  • Analytics cookies to monitor usage and improve our Site.
  • Advertising cookies for personalized marketing.

Google Analytics

We use Google Analytics to gather insights about site usage, including pages visited, session duration, referring websites, location (country, city), and browser and device details. For more information, visit Google’s Privacy Policy. To opt out of Google Analytics, use the Google Analytics Opt-Out Browser Add-on.

8. Your Rights

Under GDPR (EU)

You have the right to access your personal data; correct inaccurate or incomplete information; request deletion of your data (“Right to be Forgotten”); restrict or object to certain processing activities; request data portability; and withdraw consent for processing at any time (for activities relying on consent).

Under CCPA (U.S.)

You may request to know what personal data we collect and how we use it, request deletion of your data, opt out of the sale of your personal data (although we do not sell data), and expect non-discrimination for exercising your rights.

To exercise these rights, contact us at info@tangreto.com.

9. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data, including encryption during data transmission, secure storage with access controls, and regular security audits.

10. Newsletters and Marketing

We send newsletters and marketing emails only with your explicit consent. You may unsubscribe at any time using the “unsubscribe” link in our emails or by contacting us at info@tangreto.com.

11. Children’s Privacy

Our Site and Services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children without parental consent.

12. Links to Third-Party Websites

Our Site may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing personal information.

13. Updates to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Last Updated” date.

14. Contact Us

For questions or concerns regarding this Privacy Policy or to exercise your rights, contact us at:

Tangreto
Email: info@tangreto.com
Tangreto, s.r.o., Žabotova 4, Bratislava, Slovakia

By using our Site and Services, you acknowledge that you have read and understood this Privacy Policy.