Privacy Policy
1. WHO ARE WE?
Fazenda (Restaurants) is operated by SOUTHERN WIND GROUP LTD a company registered in England and Wales under registration number 07320442 and our registered address is SUITE 1A 17 OLD LEEDS ROAD, HUDDERSFIELD, WEST YORKSHIRE, HD1 1SG. We are the data controller for the purposes of this Privacy Policy. This Privacy Policy relates to FAZENDA (RESTAURANTS) with premises offering restaurant facilities at locations in Leeds, Liverpool, Manchester and Edinburgh.
2. WHAT IS THIS PRIVACY POLICY FOR?
This Privacy Policy gives you information about how we will use personal data and other private information collected by or provided by you in one of our restaurants or you as a user of this Site. When we refer to ‘personal data’ in this Privacy Policy it means any information that relates to you from which you can be identified. This Privacy Policy governs the processing of your personal data, including in connection with your use of our Site, so please read it carefully.
3. WHAT PERSONAL DATA MAY WE COLLECT?
We may collect the following personal data about you:
The personal details you provide (such as name, address, e-mail address, business address and phone number) when submitting an enquiry or table booking
Table bookings are processed through the SevenRooms booking engine which provides the booking details through to Fazenda (Restaurants). For details please refer to their privacy policy. Payment details you provide that we require for the purpose of recording and processing your reservation request (and administering your reservation)
Personal details you choose to give when corresponding with us by phone, e-mail, or that you provide to us when you visit Fazenda.
Any other personal or private information about you that you choose to submit to this Site or any other websites we operate.
Information about other guests included in your reservation details that you provide.
Information about your preferences (e.g. advertising interests, cookie data, clickstream data, browsing history, responses to direct marketing, and opt-ins or opt-outs from direct marketing) which you may indicate from your use of this Site or which we may collect through cookies on this Site or through third party cookies, and any information provided to us by third parties for us to understand about your preferences or otherwise to help us to provide you with services you have requested.
4. COOKIES
We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.
5. HOW WE USE YOUR DATA
We may use your personal data in the following ways:
To operate our business and provide you with services you have requested, primarily restaurant reservations.
To display the content of this Site, and any customisations you may select.
To verify your identity.
To acknowledge, confirm and deal with your enquiry, including a reservation request.
Where we are asked to deal with any other enquiries or concerns you might raise with us.
To notify you about any changes to this Site, or services provided through this Site.
To provide you with information about our services. We will however only contact you if you have previously consented to such contact and only by such means (e.g. email) as you have also previously consented to. Any marketing email that you receive from us will allow you to unsubscribe to further email promotions.
To contact you in connection with guest surveys and use any information you choose to submit in response.
To administer our Site and ensure that our Site is presented in the most effective manner for you and for your computer/device.
For internal business/technical operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes and as part of our efforts to keep our Site secure.
On an aggregate basis, to understand how individuals collectively use the features of our Site.
To give effect to your legal rights and your rights under this Privacy Policy.
To protect against fraud, identity theft, and other unlawful activity.
To establish or exercise any legal rights or claims.
To satisfy our obligations under applicable law, this Privacy Policy, and any other policies or terms that are applicable to our relationship with you.
For other purposes to which you have consented, and we may combine personal data that you provide to us with other information we collect about you for the purposes set out in this Privacy Policy.
6. LEGAL BASES
Under the UK General Data Protection Regulation, the lawful bases we rely on for processing your information are:
Your consent. You are able to remove your consent at any time by contacting us using the email address in paragraph 14. For example, this may be where you have agreed for us to process your personal data to provide you with direct marketing materials.
We have a contractual obligation. For example, this may be where we process your personal information about a reservation.
We have a legitimate interest. For example, this may be where we need to process your personal information for our own internal business purposes or to assist with the running of this Site.
7. DISCLOSURE OF YOUR PERSONAL DATA
We may share your personal data with third parties in the following situations:
We may disclose your personal data to our employees and agents to the extent necessary to provide you with services you have requested.
We may make your personal data available to selected third parties who act on our behalf to support our operations (for example, card processing or payment services (see the section below headed ‘Payment Information’) and credit reference agencies to protect against possible fraud, subject to appropriate contractual protections in accordance with applicable law.
Our IT suppliers and contractors (e.g. data hosting providers or delivery partners) who may need to have access to your personal data to provide IT support and enable us to provide guest services, subject to appropriate contractual protections in accordance with applicable law.
If we sell or transfer all, or any portion, of our business or our company assets to any third party, personal data held by us about you may be one of the transferred assets.
To a related company for the purposes of data and business analysis to help develop our future business operations and strategies.
To protect us, our guests or contractors against loss or damage (including, without limitation, exchanging information with the police, courts or law enforcement organisations).
To the extent necessary to establish, exercise or defend legal rights or claims, or for the purposes of investigating actual or suspected unlawful activity.
8. PAYMENT INFORMATION
Any credit/debit card payments and other payments you make through this Site will be processed by our third party payment provider, and the payment data you submit will be securely stored and encrypted by our payment service provider using up to date industry standards. Please note that we do not ourselves directly process or store the debit/credit card data that you submit, but third party service providers may do so on our behalf, in accordance with this Privacy Policy.
9. SECURITY
We take the security of our guests’ data very seriously and we use appropriate measures to protect all personal information collected in a secure, controlled environment consistent with GDPR legislation. The personal data that we collect from you is stored on UK based servers (except where transferred in accordance with paragraph 10, below).
Unfortunately, the transmission of information over the internet or public communications networks can never be completely secure. When you submit your personal information through our websites this at your own risk.
10. TRANSFERS OUT OF UK
We may occasionally transfer your data outside of the UK to a third party. This may be to a company within our group of companies, or to an external service provider. We will only do so if we have appropriate safeguards in place for the protection of your personal data. This will either be through the use of “adequacy decisions” (where the third party country has been deemed to have adequate safeguards in place for the protection of personal data) or through a permitted contractual method, such as an International Data Transfer Agreement, which give the transferred personal data the same protection as it has in the UK. If you would like to obtain a copy of our contractual safeguards, such as International Data Transfer Agreements, please contact us at the email address in paragraph 14 (below).
11. DATA RETENTION
We will only retain your personal data for as long as we require those personal data in connection with the purposes set out in this Privacy Policy, except where we are required or permitted, under applicable law, to retain your personal data for additional periods of time. Information provided for reservations and kept on SevenRooms booking engine will be deleted after thirty-six months, after which the only data retained will be anonymised booking data. Information provided on our Contractor and Visitors log will be retained for twenty four months, after which it will be deleted.
12. YOUR DATA PROTECTION RIGHTS
Subject to applicable law, you may have the following rights in relation to your personal data:
The right to request access to, or copies of, your personal data that we process.
The right to request correction of any inaccuracies in your personal data.
The right to object, on legitimate grounds, to the processing of your personal data.
The right to request that your personal data are deleted.
The right to ask us to restrict the processing of personal information in certain circumstances.
The right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
This does not affect your statutory rights. If you wish to exercise any of these rights please contact us as described in the section below headed ‘Contact’. We may also need to ask you for further information to verify your identity before we can respond to any request.
13. CHANGES TO OUR PRIVACY POLICY
Any changes we may make to our Privacy Policy in the future will be posted on this page. Please check back frequently to see any updates or modifications.
14. CONTACT
Questions, comments or requests regarding this Privacy Policy should be addressed to our DPO Tomás Maunier [email protected]
15. HOW TO COMPLAIN
If you have any concerns about our use of your personal information, you can make a complaint to us at the email address specified in paragraph 14 (above).
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk