Kitchen open all day · Continuous service

PRIVACY POLICY

1. Data Controller

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, users are informed that the controller responsible for processing their personal data is:

Data Controller: SIETE TORO RONDA SL
Tax ID (NIF): B72812324
Registered Address: Carrera Espinel, 7, 29400 Ronda, Málaga, Spain
Telephone: +34 951 211 826
Email: info@torotapasronda.com
Website: torotapasronda.com

2. Personal Data We Process

Depending on how the user interacts with Toro Tapas, the following categories of personal data may be processed:

  • Identification details, such as first name and surname.
  • Contact details, such as telephone number or email address.
  • Information relating to a reservation, such as date, time, number of guests and any comments provided by the user.
  • Information voluntarily included in messages, enquiries or requests.
  • Technical data related to browsing and use of the website, where applicable and in accordance with the Cookie Policy.

Users are asked not to provide personal data relating to third parties unless they have sufficient authorisation to do so.

3. Purposes of Processing

Personal data may be used for the following purposes:

Managing Enquiries

To handle and respond to enquiries, requests or communications made by telephone, email or through the contact methods available on the website.

Managing Reservations

To manage reservation requests and confirmations, amendments, cancellations and any communications required in connection with the provision of the service.

Events and Groups

To handle requests relating to celebrations, groups, events or other services offered by Toro Tapas.

Administrative Management

To manage administrative, accounting, tax or legal obligations arising from a commercial relationship where necessary.

Website Security

To maintain the security, availability and integrity of the website and to prevent fraudulent or improper use.

Marketing Communications

Where the user has expressly given their consent, Toro Tapas may send communications relating to services, news, events or promotions.

The user may withdraw this consent at any time.

4. Legal Basis for Processing

Depending on the circumstances, the legal grounds for processing personal data are:

  • The consent of the data subject for handling certain enquiries or requests.
  • The taking of pre-contractual measures or the performance of a contractual relationship for managing reservations and requested services.
  • Compliance with legal obligations applicable to SIETE TORO RONDA SL.
  • The legitimate interest of the data controller in ensuring the security and proper functioning of its systems and website.
  • The user’s consent for the sending of marketing communications where such consent is required.

Withdrawal of consent will not affect the lawfulness of any processing carried out prior to its withdrawal.

5. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purpose for which it was collected.

Data relating to enquiries will be retained for as long as necessary to deal with the corresponding request and, afterwards, for any period required to address potential liabilities.

Data arising from reservations, services or commercial relationships may be retained for the periods established under applicable tax, commercial and other legislation.

Data used for marketing communications will be retained until the user withdraws their consent or requests its deletion.

Once the relevant retention periods have expired, the data will be deleted or duly restricted where there is a legal obligation to retain it.

6. Recipients of Personal Data

As a general rule, personal data will not be sold or transferred to third parties.

Data may be accessed by service providers whose services are necessary for the operation of the business, such as web hosting providers, email services, IT maintenance providers, booking systems or other technology providers.

Where they act as data processors, these providers will process personal data in accordance with the instructions of SIETE TORO RONDA SL.

Personal data may also be disclosed to public authorities, courts, judicial bodies or other competent authorities where required by law.

7. External Booking Platforms

The website may integrate with or link to external platforms used to manage reservations.

Where the user uses a service operated directly by a third party, that provider may process personal data in accordance with its own terms and privacy policy.

Users are advised to review this information before completing a reservation.

8. International Data Transfers

Where technology providers are located outside the European Economic Area or process data from third countries, SIETE TORO RONDA SL will adopt the safeguards required under European data protection legislation to ensure an adequate level of protection.

9. User Rights

Users may exercise the following rights in relation to their personal data:

  • Right of access to their personal data.
  • Right to rectify inaccurate data.
  • Right to erasure of their personal data.
  • Right to object to processing.
  • Right to request restriction of processing.
  • Right to data portability, where applicable.
  • Right to withdraw consent at any time.

To exercise these rights, users may send a request to:

info@torotapasronda.com

Requests may also be submitted in writing to:

SIETE TORO RONDA SL
Carrera Espinel, 7
29400 Ronda, Málaga
Spain

Where necessary, the request must include sufficient information to verify the identity of the data subject.

10. Right to Lodge a Complaint with the Supervisory Authority

If the user considers that the processing of their personal data does not comply with applicable legislation, they may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).

11. Data Security

SIETE TORO RONDA SL will implement appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorised access, taking into account the nature of the data processed and the risks involved.

However, no system connected to the Internet can guarantee absolute security.

12. Third-Party Data

Where a user provides personal data relating to other individuals, they declare that they have sufficient legal grounds to do so and undertake to inform those individuals about the processing of their data where necessary.

13. Links to Third-Party Websites

The website may contain links to external websites, social media platforms or services whose privacy policies are independent from those of Toro Tapas.

SIETE TORO RONDA SL is not responsible for any processing of personal data carried out directly by such third parties.

14. Cookies

The website may use cookies and similar technologies.

Detailed information about the types of cookies used, their purpose, duration, providers and the mechanisms available to accept, reject or configure them can be found in the Cookie Policy.

15. Changes to this Privacy Policy

SIETE TORO RONDA SL may update this Privacy Policy where necessary as a result of legislative changes, changes to the services offered or changes in the way personal data is processed.

The version currently in force will be the one published on the website at any given time.

Last updated: August 2026.