Our intention is to provide you with a high-quality service while respecting your fundamental right to data protection. This Privacy Policy will apply to the processing carried out by UMBRELLA WINES of the personal data collected through the following means:
– the website https://thelibraryboutique.com/
– communications by email/telephone.
– the management of THE LIBRARY restaurant and boutique itself.
– the video surveillance system
Data Controller
THE UMBRELLA WINES, S.L.
C/ Jorge Juan, 19 – 6º IZQ
B56140635
Telephone: 91 515 43 32
Email: rgpd@grupoparaguas.com
The Data Controller is part of GRUPO PARAGUAS, which is made up of the following companies:
Central Asturcova, S.L.
Secosilva Empresarial, S.L. – Ten con Ten
IPE Velázquez, S.L. – Numa Pompilio
El Gourmet de Jorge Juan, S.L. – Amazónico
Restauradores Asturcova, S.L. – EL Paraguas
Ultramarinos Quintín, S.L. – Ultramarinos Quintín
Puerta de Alcalá, S.L. – Aarde
Mejoramelo SL – El gran escenario
XXV BREAD & FOOD S.L.– the new Aspen
THE UMBRELLA WINES SL. – The Library
Metrópolis 2020 Madrid, S.L. – Club Metrópolis
METRÓPOLIS HOTEL MADRID S.L.
METRÓPOLIS 2024 MADRID S.L.
METRÓPOLIS 2025 MADRID S.L.
What data do we collect and for what purposes? How long do we keep it?
THE LIBRARY will collect different data depending on the website features you use, how you interact with us through the website, or when you visit our restaurant:
RESERVATION FORM
Data: identification data you provide us (first and last name, telephone number, email address). In certain circumstances, when the reservation policy so indicates, THE LIBRARY may also request details of your bank account or payment cards in order to make your reservation.
Purpose: to assist you as a customer and manage your preferences and reservations, as well as to send you marketing communications.
Legal basis: performance of a contract or pre-contract to which you are a party (Art. 6(1)(b) GDPR), with regard to managing your reservations. Legitimate interest in relation to suggesting other Grupo Paraguas restaurants if the reservation you are seeking is not possible, or remembering your details for possible future reservations at Grupo Paraguas restaurants (Art. 6(1)(f) GDPR), and consent for sending marketing communications from Grupo Paraguas restaurants (Art. 6(1)(a) GDPR).
Recipients: the other GRUPO PARAGUAS restaurants to manage future reservations at any of them, or, if you have expressly agreed, to send marketing communications from those restaurants.
Retention: the time strictly necessary to fulfil each of the intended purposes and, where applicable, the statutory limitation periods for contractual or pre-contractual liability claims. To facilitate your future reservations or to send marketing communications, we will keep your data until you tell us otherwise.
“STAY IN TOUCH” FORM
Data: identification data (first and last name, email address) and, on a voluntary basis, country of origin and telephone number.
Purpose: to contact you by electronic means (primarily email, SMS or WhatsApp) to send you news, events, offers or any other communication for marketing purposes from The Library and, if you expressly agree, from other Grupo Paraguas companies.
Legal basis: consent (Art. 6(1)(a) GDPR)
Recipients: the other GRUPO PARAGUAS companies if you have expressly agreed, for the sending of marketing communications from those restaurants.
Retention: until you withdraw your consent through the established channels.
CUSTOMER SERVICE
Data: the data you provide when you contact us using our contact details.
Purpose: to manage the enquiry for which you contact us.
Legal basis: the data subject’s consent. Art. 6(1)(a) GDPR.
Recipients: the other GRUPO PARAGUAS companies if your enquiry needs to be referred for better service.
Retention: the data will not be kept once the enquiry has been resolved.
VIDEO SURVEILLANCE
Data: images captured by the video surveillance systems
Purpose: to ensure the safety of people, property and facilities.
Legal basis: the legitimate interest of the data controller (Art. 6(1)(f) GDPR), consisting of ensuring the safety of people, property and THE LIBRARY facilities.
Recipients: the data will not be disclosed to anyone unless it is made available to the competent authority if the images evidence the commission of acts that threaten the integrity of people, property or facilities.
Retention: 30 days
WEB BROWSING
Data: each time you access THE LIBRARY website, we automatically collect and process information about how you access and use the website and, in particular, the following personal data:
Technical information, including your IP address, your login data, the browser and its version, the operating system and/or
Information about your visits to our website, including the uniform resource locator (URL), the services viewed or searched for and the pages you visit within our Service; site response time; download errors; the time and date of the visit; the time you spend on those pages; information about interaction on the site (for example, clicks and/or mouse movements), the methods used to leave the site, unique device identifiers and other diagnostic data and/or
Information collected through the use of cookies. You can obtain more information about the use of these devices and how to manage them in our cookie policy.
Purpose: to allow you to participate in interactive features of our website when you choose to do so; to compile statistical analysis, research and profiles based on browsing and interests regarding content, or other valuable information that enables us to improve our website and our service; to detect, prevent and address technical issues.
Legal basis: the data subject’s consent (Art. 6(1)(a) GDPR).
Recipients: the data will not be disclosed to anyone.
Retention: as set out in our cookie policy.
Recipients
THE BOUTIQUE will not disclose the data you provide us unless you authorise it, THE BOUTIQUE has a legitimate interest, there is a legal obligation, or upon an express court request or a request from law enforcement authorities.
You should also be aware that, in order to carry out its activity, THE BOUTIQUE may engage third parties (individuals or legal entities) to provide a service on our behalf, to supply services related to ours, or to help us analyse how our service is used, which may involve the processing of your personal data.
These third parties will have access to your personal data only to perform these tasks on our behalf, based on the corresponding data processing agreements under which we provide instructions on how they must process and protect your data, and they are obliged not to disclose it or use it for any other purpose.
Transfer of data to third countries
THE LIBRARY, as data controller, informs you that it does not intend to transfer your personal data to countries outside the European Union, although it cannot guarantee that certain specific storage and processing activities will not be carried out by individuals or legal entities located outside the European Union.
However, if any processing activity is carried out by companies or individuals located in third countries, THE LIBRARY will take all necessary measures to ensure that your data is processed securely and in accordance with this Privacy Policy, and will not transfer your personal data to an organisation or country outside the European Union unless those countries provide an adequate level of protection or sufficient safeguards are offered and enforceable rights and effective legal remedies are available to the data subject.
Your rights
You have the rights relating to the processing of your personal data: access, rectification, erasure, objection, restriction and portability, which you may exercise by writing to THE LIBRARY at the postal address indicated in the header or by emailing: rgpd@grupoparaguas.com, stating “EXERCISE OF RIGHTS” in the subject line.
On occasion, the request exercised will result in the retention, restriction or blocking, as applicable, in order to process those rights.
With regard to processing whose legal basis is consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
In addition to the above, you may withdraw your consent to receive marketing communications at any time by requesting it via the email address rgpd@grupoparaguas.com, as well as through the link provided in each marketing communication we send you.
Likewise, if THE LIBRARY fails to comply with its legal obligations regarding the protection of your personal data, you have the right to lodge a complaint with the competent authority, which in Spain is the Spanish Data Protection Agency (www.aepd.es).
Security
Our primary mission is to seek to ensure and guarantee both the processing of personal data and the associated information, safeguarding its custody and integrity. Accordingly, THE LIBRARY implements organisational and technical measures to ensure the security of personal data and to prevent its alteration, loss, processing or unauthorised access, taking into account the state of the art, the nature of the stored data and the risks to which it is exposed, whether arising from human action or from the physical or natural environment. THE LIBRARY shall not be liable for any loss, misplacement or unauthorised manipulation of data beyond its control that could not have been foreseen or that is due to malicious attacks by third parties.
Links to other websites
Our website may contain links to other Internet sites not operated by us. If you click on a third-party link, you will be redirected to that third party’s site. We have no control over, and assume no responsibility for, the privacy policies or practices of any third-party sites or services.
We strongly recommend that you review the Privacy Policy of every site you visit.
Children’s privacy
Our service is not directed to anyone under 18 years of age.
We do not intend to collect personal information from anyone under 18. If you are a parent or guardian and you are aware that your child or ward has provided us with personal data, please contact us.
Users guarantee the truthfulness and authenticity of the information and data they provide through the use of this website. Any false or inaccurate statement that occurs as a result of the information and data provided, as well as any harm that such information may cause, shall be the sole responsibility of the users.
If we become aware that we have collected personal data from individuals under 18 without verification that consent was given or authorised by the holder of parental authority or guardianship over the child, we will take steps to remove that information from our servers and reserve the right to provide the service.
Changes to this Privacy Policy
THE LIBRARY may update this Privacy Policy at any time. If this occurs, you will be duly informed so that you can be aware of such changes and, where applicable, exercise your rights if you do not agree.
