In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, users are informed that the controller responsible for processing their personal data is:
Data Controller: SIETE TORO RONDA SL
Tax ID (NIF): B72812324
Registered Address: Carrera Espinel, 7, 29400 Ronda, Málaga, Spain
Telephone: +34 951 211 826
Email: info@torotapasronda.com
Website: torotapasronda.com
Depending on how the user interacts with Toro Tapas, the following categories of personal data may be processed:
Users are asked not to provide personal data relating to third parties unless they have sufficient authorisation to do so.
Personal data may be used for the following purposes:
To handle and respond to enquiries, requests or communications made by telephone, email or through the contact methods available on the website.
To manage reservation requests and confirmations, amendments, cancellations and any communications required in connection with the provision of the service.
To handle requests relating to celebrations, groups, events or other services offered by Toro Tapas.
To manage administrative, accounting, tax or legal obligations arising from a commercial relationship where necessary.
To maintain the security, availability and integrity of the website and to prevent fraudulent or improper use.
Where the user has expressly given their consent, Toro Tapas may send communications relating to services, news, events or promotions.
The user may withdraw this consent at any time.
Depending on the circumstances, the legal grounds for processing personal data are:
Withdrawal of consent will not affect the lawfulness of any processing carried out prior to its withdrawal.
Personal data will be retained only for as long as necessary to fulfil the purpose for which it was collected.
Data relating to enquiries will be retained for as long as necessary to deal with the corresponding request and, afterwards, for any period required to address potential liabilities.
Data arising from reservations, services or commercial relationships may be retained for the periods established under applicable tax, commercial and other legislation.
Data used for marketing communications will be retained until the user withdraws their consent or requests its deletion.
Once the relevant retention periods have expired, the data will be deleted or duly restricted where there is a legal obligation to retain it.
As a general rule, personal data will not be sold or transferred to third parties.
Data may be accessed by service providers whose services are necessary for the operation of the business, such as web hosting providers, email services, IT maintenance providers, booking systems or other technology providers.
Where they act as data processors, these providers will process personal data in accordance with the instructions of SIETE TORO RONDA SL.
Personal data may also be disclosed to public authorities, courts, judicial bodies or other competent authorities where required by law.
The website may integrate with or link to external platforms used to manage reservations.
Where the user uses a service operated directly by a third party, that provider may process personal data in accordance with its own terms and privacy policy.
Users are advised to review this information before completing a reservation.
Where technology providers are located outside the European Economic Area or process data from third countries, SIETE TORO RONDA SL will adopt the safeguards required under European data protection legislation to ensure an adequate level of protection.
Users may exercise the following rights in relation to their personal data:
To exercise these rights, users may send a request to:
Requests may also be submitted in writing to:
SIETE TORO RONDA SL
Carrera Espinel, 7
29400 Ronda, Málaga
Spain
Where necessary, the request must include sufficient information to verify the identity of the data subject.
If the user considers that the processing of their personal data does not comply with applicable legislation, they may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).
SIETE TORO RONDA SL will implement appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorised access, taking into account the nature of the data processed and the risks involved.
However, no system connected to the Internet can guarantee absolute security.
Where a user provides personal data relating to other individuals, they declare that they have sufficient legal grounds to do so and undertake to inform those individuals about the processing of their data where necessary.
The website may contain links to external websites, social media platforms or services whose privacy policies are independent from those of Toro Tapas.
SIETE TORO RONDA SL is not responsible for any processing of personal data carried out directly by such third parties.
The website may use cookies and similar technologies.
Detailed information about the types of cookies used, their purpose, duration, providers and the mechanisms available to accept, reject or configure them can be found in the Cookie Policy.
SIETE TORO RONDA SL may update this Privacy Policy where necessary as a result of legislative changes, changes to the services offered or changes in the way personal data is processed.
The version currently in force will be the one published on the website at any given time.
Last updated: August 2026.