Privacy policy
Last updated: June 2026
1. Data controller
ENSUMAT FOOD, S.L. (hereinafter, Green&Burger), with registered office at Plaça de la Sagrada Família, 3, 08013 Barcelona, tax ID [to be completed], is the controller of the personal data you provide to us. For any matter regarding your data you can contact us at ENSUMATFOOD@gmail.com.
2. What data we process
We process the data you voluntarily provide through our forms, by WhatsApp, by phone or by email, mainly: your name, contact details (phone, email) and the information you give us about your booking or event (date, number of people, preferences).
3. Purpose
- To handle your enquiries and requests for information.
- To manage table bookings and group and event requests.
- To communicate with you regarding those requests.
4. Legal basis
The legal basis for processing is your consent, given when you send us your request, and, where applicable, the steps taken prior to a booking or event you ask us for.
5. Retention
We will keep your data for as long as necessary to handle your request and, afterwards, for the periods required by law. Once no longer needed, we will securely delete it.
6. Recipients
We do not share your data with third parties unless legally required. If you contact us via WhatsApp, please note that this channel is operated by its provider (Meta Platforms) under its own terms and privacy policy.
To be completed: list here any providers that process data on behalf of the controller (hosting, booking system, analytics tools, etc.) and, where applicable, international transfers.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to ENSUMATFOOD@gmail.com. If you believe the processing does not comply with the regulations, you also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply the technical and organisational measures necessary to guarantee the security of your data and prevent its alteration, loss or unauthorised access.