Privacy Policy

  • Data Controller: GOIKO GRILL GROUP, S.L. (from now on,“GOIKO”).
  • TAX IDENTIFICATION NUMBER (NIF): B-87771945.
  • Registered office: C/ Maestro Ángel Llorca, 6, 5º, 28003 – Madrid (Madrid)
  • Public Registry: Trade Register of Madrid, Volume: 35926, Folio: 191, Page M-645523.
  • Email: dpo@goiko.com

 

  1. INFORMATION

By accepting this Privacy Policy, the User is informed that the personal data provided through the Website located at the URL https://www.goiko.com/ (hereinafter, the ‘Website’), or that are provided by third parties through the Website, as well as the data derived from browsing and any other data that the User may provide in the future, will be processed by GOIKO as the data controller for the purposes indicated in this Privacy Policy.

By registering on the Website, the User will have identified access to the Website and will be able to enjoy the contents of the registered customer profile.

Users should carefully read this Privacy Policy, which has been drafted in a clear and simple manner.

 

  1. OBLIGATION TO PROVIDE DATA

The data requested in the forms on the Website are, in general, necessary, and therefore obligatory, in order to fulfil the purposes for which they are being collected. Unless otherwise specified in the required field..

Therefore, if the User does not provide them or provides them incorrectly, the purposes for which they were collected cannot be achieved, without prejudice to the User being able to browse the Website freely.

  1. DATA SOURCES

The data processed by GOIKO for the purposes listed in the following section come from:

  • The User: the data provided by the User themselves through the registration form on the Website, in accordance with the consents given to GOIKO, where applicable.
  • Third-party sources: GOIKO collaborates with some third parties who may obtain the User’s personal data as a result of providing a service, always in accordance with the purpose of the User’s requests. For example, online intermediation and delivery platforms between restaurants and customers.

Data may also come from third party sources, i.e. data obtained from the User’s use and browsing of the website (through cookies or third party data storage and retrieval devices).

  1. FOR WHAT PURPOSES WILL GOIKO PROCESS USER DATA?

GOIKO will process User data for the following specific purposes:

a) Management of the contractual relationship with the User:

• to manage the registration of the User on the Website, or the cancellation of that registration,
• provision of the services offered by GOIKO, including the management and/or delivery of orders and bookings,
• to manage requests for invoices through the section of the Website intended for this purpose.

b) Management and processing of the acquisition of a Giftcard: manage and process the gift card for its subsequent electronic delivery to the selected person and beneficiary of the same.

c) Management of the participation in the ‘Friends With Benefits’ scheme: to manage User’s registration and deregistration in the aforementioned scheme, as well as the management of the benefits related to the service offered by GOIKO.

d) To push notifications about ‘Friends With Benefits’ services: send push notifications about ‘Friends With Benefits’ services through the usual notification system of your Smartphone or Tablet (for example, about confirmation of User points, information about discounts or any other transactional information).

e) To respond to the issues raised by the User through the contact channels provided, including social networks: to manage, process and provide support for the requests, applications, incidents, complaints or queries made by the User through the different communication channels made available to the User.

f) To manage participation in GOIKO promotions, prize draws, initiatives and competitions: to manage and contact the participants and winners, as well as to deliver the prizes and publish the result of the prize draw through the different GOIKO communication channels.

g) To manage applications submitted by sending a CV through the section of the Website intended for this purpose and thus evaluate it for possible selection processes and/or existing vacancies at GOIKO.

h) To carry out satisfaction surveys through the different channels provided, in order to ascertain the degree of satisfaction and quality of the products and services offered by GOIKO.

i) To send commercial and promotional communications by GOIKO about similar products and services: GOIKO may send commercial communications by e-mail and/or SMS provided that the User has given their consent, which they may revoke at any time.

j) To draw up a commercial profile based on the information provided by the User to GOIKO: in order to send the User commercial communications that may be of interest. Users may object at any time to their data being processed for this purpose.

k) To comply with legally established obligations: when the processing is necessary to comply with a legal obligation derived from Spanish or European Union law and which may be applicable to GOIKO (e.g. tax regulations).

l) Preparation of reports, statistics and internal analysis to improve the services of the Website: to analyse, manage and prepare internal reports and statistics on the behaviour of Users in order to implement improvements to the Website, in any case, using aggregated information.

m) Prevention and control of the use of the Website for illegal or unauthorised purposes, with or without economic purpose: to analyse, manage and process incidents related to the provision of the services provided by GOIKO to the User, as well as the processing of complaints, incidents and unlawful acts carried out by Users..

n) Optimisation of services and detection of errors and problems with the Website: to improve and optimise our services and to detect errors and technical problems with the Website.

o) Video surveillance: with the aim of guaranteeing the security and safety in and around our facilities and to be able to carry out actions that allow our staff to offer a better user experience, as well as a correct development of their services by evaluating the quality of the same.

6. WHAT USER DATA WILL GOIKO PROCESS?

The following personal data may be processed while using the Website:

  • Management of the contractual relationship with the User:
    • Identification data: name, surname, age and ID (DNI/NIE).
    • Contact details: postal address, email and phone number.
    • Data obtained through User-generated content: comments.
    • Financial data: payment card details.
    • Health data: data derived from allergies or other information that the User considers appropriate to inform GOIKO in relation to the services provided.
  • Management and processing of the purchase of a Giftcard:
    • Identification data: first name and surname
    • Contact details: email and phone number.
    • Financial data: payment card details.
  • Management of the ‘Friends with Benefits’ scheme:
    • Identification data: first name, surname, date of birth and postcode.
    • Contact details: email and phone number.
    • Data obtained through User-generated content: comments.
    • Financial data: payment card details.
    • Data on personal characteristics: gender (optional).
  • Push notifications:
    • Identification data: ID
  • To respond to the questions raised by the User through the contact channels provided:
    • Identification data: first name and surname.
    • Contact details: email address.
    • Other data: any data that the User may provide in connection with the query or request raised.
    • The User is given the option of contacting GOIKO through the WhatsApp application. In this case, the privacy settings set by the User in the application apply, in addition to the WhatsApp Privacy Policy and Terms of Use, and GOIKO may have access to other categories of User data.
  • To manage participation in GOIKO promotions, prize draws, initiatives and competitions:
    • Identification data: first name and surname.
    • Contact details: email and postal address, telephone number.
  • To manage your application by sending your CV:
    • Identification data: first name and surname.
    • Contact details: email address.
    • Professional data: those that the User includes in their CV.
    • Health data: on an ad hoc basis, personal data related to the degree of disability may be processed, as long as they are provided by the data subject.

The User is given the possibility of sending their CV through the social networks Indeed or LinkedIn, in this case, the privacy settings established by the User in each of the social networks apply, in addition to the Privacy Policy and Conditions of Use of the same, with possible access by GOIKO to other categories of User data.

  • To conduct satisfaction surveys:
    • Identification data: first name and surname
    • Contact details: email and postal address, telephone number.
  • To send commercial and promotional communications, from GOIKO, about similar products and services
    • Identification data: first name and surname.
    • Contact details: email and phone number.
  • To draw up a commercial profile based on the information provided by the User to GOIKO:
    • Identification data: first name, surname, date of birth, full address and postcode.
    • Contact details: email and phone number.
    • Data obtained through User-generated content: use of the service, comments, queries and/or complaints.
    • Financial data: payment card details.
    • Data on personal characteristics: gender (optional).
  • To comply with the legally established obligations:
    • Identification data: first name, surname, date of birth, full address and postcode.
    • Contact details: email and phone number.
  • Preparation of reports, statistics and internal analysis to improve the services of the Website: 
    • Aggregated User information.
    • Website browsing data: IP address, behaviour on the Website.
  • Prevention and control of the use of the Website for illegal or unauthorised purposes, with or without economic purpose:
    • Identification data: first name, surname, date of birth, full address, age and postcode.
    • Contact details: email and phone number.
    • Financial data: payment card details.
    • Personal characteristics data: Gender.
    • Website browsing data: IP address, behaviour on the Website.
    • Data obtained through User-generated content: comments, queries and/or complaints.
  • Optimisation of services and detection of errors and problems on the Website: 
    • Identification data: first name and surname.
    • Contact details: email.
    • Website browsing data: IP address, your behaviour on the Website.
    • Data obtained through User-generated content: comments, queries and/or complaints.
  • Video surveillance
    • • Identification data: image

In the event that the User provides data of third parties, they declare that they have the consent and/or sufficient legitimacy and undertake to pass on to the third parties the information contained in the Privacy Policy, exempting GOIKO from any liability in this regard.

However, GOIKO may carry out the appropriate verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.

  1. WHAT IS THE LEGAL BASIS FOR GOIKO’S PROCESSING OF USER DATA?

GOIKO processes the User’s data in accordance with the following legitimate bases:

(a) Management of the contractual relationship with the User: the processing of data derived from this purpose will have as its legitimising basis the fulfilment of the contractual relationship.

b) Management and processing of the purchase of a Giftcard: the data processing derived from this purpose will be based on the fulfilment of the contractual relationship.

c) Management of the ‘Friends With Benefits’ programme: the data processing derived from this purpose will be based on the fulfilment of the contractual relationship.

d) Push notifications: the processing derived from this purpose is legitimised by the legitimate interest based on the information provided by the User and the information related to their activity on the Website, in order to send commercial communications related to the ‘Friends With Benefits’ programme. However, the User has the right to object to this processing at any time.

e) To respond to questions raised through the contact channels provided: the processing of data derived from this purpose will be based on the consent of the User, which may be withdrawn at any time. In the event that the User withdraws consent, the query or question raised cannot be processed.

Likewise, the User’s personal data may be processed on the basis of compliance with the provisions of Law 3/2014, of 27 March, which amends the revised text of the General Law for the Defence of Consumers and Users and other complementary laws, approved by Royal Legislative Decree 1/2007, of 16 November.

f) To manage participation in GOIKO promotions, prize draws, initiatives and competitions: the processing of data derived from this purpose will be based on the User’s consent, which the User may withdraw at any time.

g) To manage your application if you send us your CV: the data processing derived from this purpose will be based on the User’s consent, which will be understood to have been granted by sending the CV.

h) To carry out satisfaction surveys through the different channels provided: the processing of personal data will be carried out on the basis of the legitimate interest of the data controller.. This legitimate interest is based on ensuring that the goods and services offered by GOIKO are in accordance with the User’s expectations, which in turn allows GOIKO to establish mechanisms in order to avoid any type of incident in relation to the quality of the services offered through the Website.

i) To send commercial and promotional communications from GOIKO about similar products and services: the processing derived from this purpose is legitimised by the consent freely given by the User, which may be withdrawn at any time.

j) To draw up a commercial profile based on the information provided by the User to GOIKO: the processing derived from this purpose is legitimised in the legitimate interest based on the information provided by the User and the information relating to their activity on the Website, in order to send personalised commercial communications, based on the tastes and preferences of the User. However, the User has the right to object to this processing at any time.

k) To comply with the legally established obligations: All processing derived from this purpose will be based on the legitimisation of compliance with a legal obligation.

l) Preparation of reports, statistics and internal analyses to improve the services of the Website: all processing derived from this purpose will be based on legitimate interest, recognised to the data controller by the data protection regulations.

m) Prevention and control of the use of the Website for illegal or unauthorised purposes, with or without economic purpose: all processing derived from this purpose will be based on legitimate interest, recognised by the regulations for the data controller. This legitimate interest is based on ensuring that the goods and services are not used for unlawful purposes and, in the event of unlawful use, to manage, process and remedy the unlawful conduct carried out by the User.

n) Optimisation of services and detection of errors and problems of the Website: all processing derived from this purpose will be based on legitimate interest, recognised by the regulations for the data controller. This legitimate interest is based on being able to offer GOIKO services to Users with the highest quality and best possible experience.

o) Video surveillance: processing linked to guaranteeing the safety and security of installations, goods and persons will be carried out on the basis of the public interest, while the legitimate interest of the data controller in carrying out actions that allow our staff to offer a better user experience and to correctly develop its services is based on the legitimate interest recognised by the regulations. This legitimate interest is based on ensuring the safety and security of and in our facilities and how to provide GOIKO services to Users with the highest quality and best possible experience.

The consent obtained for the aforementioned purposes are independent and the User may revoke only one of them without affecting the others. If revoked, this shall not affect the lawfulness of the processing previously carried out.

  1. DATA RETENTION 

The User’s personal data will be kept by GOIKO for the following periods::

a) Data provided for the management of the contractual relationship with the User: the data provided to manage, process, formalise and comply with the contractual relationship will be kept for the duration of the relationship and, once the relationship has ended, for the period of limitation of any legal actions that may arise from the same.

b) Management and processing of the acquisition of a Giftcard: the data provided will be kept for six years, and will subsequently be blocked in order to attend to any possible liabilities that may arise.

c) Management of the ‘Friends With Benefits’ programme: the data provided to manage, process, formalise and comply with the participation in the programme will be kept for the duration of the participation and, once it has ended, for the period of limitation of the legal actions that may arise from it.

d) Data used to respond to the questions raised through the contact channels provided: the data will be kept for the period necessary to process and respond to your request and, once this period has ended, for the period of limitation of the legal actions derived from the aforementioned request.

e) Data provided to manage participation in GOIKO promotions, prize draws, initiatives and competitions: the data will be processed in accordance with this purpose until the User revokes their consent and, where appropriate, during the period of limitation of the legal actions that may derive from the same.

f) Data provided to manage your application when you send your CV: the data will be kept for the purpose of processing your application and for the period of time during which the selection process takes place. Likewise, as long as the User gives their consent, the data will be kept for one (1) year in order to send them new vacancies, as well as to transfer their data to other companies of the group in which selection processes appropriate to their profile are initiated.

g) Data used for the sending of satisfaction surveys: the data will be processed on the basis of the legitimate interest of the data controller until the User objects to the sending of such surveys.

h) Data used for the sending of commercial and promotional communications, by GOIKO, on products and services similar to those offered on the Website: the data will be processed in accordance with this purpose until the User revokes their consent.

i) Data used for sending commercial communications to the User, by GOIKO, about products and services marketed unrelated to those offered on the Website, as well as those of other companies with which GOIKO collaborates: the data will be processed in accordance with this purpose until the User revokes their consent.

j) Data used to draw up a commercial profile based on the information provided by the User to GOIKO: the data will be processed for this purpose until the User objects to the processing and never for a period of more than one (1) year.

k) To comply with the legally established obligations: the data provided to comply with the obligations derived from the services offered by GOIKO will be kept for the legally established periods.

l) Data used to carry out the preparation of reports, statistics and/or analyses: the information will be used in aggregate form for the preparation of reports, statistics and analyses, during the period necessary to process and prepare the aforementioned reports, statistics and/or analyses, and, once this period has expired, during the period of limitation of the legal actions derived from the aforementioned request.

m) Data used for the prevention and control of the use of the Web Site for illegal or unauthorised purposes, with or without economic purposes: the data used for such purposes will be kept for the period necessary to process and solve the aforementioned problems, incidents or illegal activities and, once the same have been resolved, for the period of limitation of the legal actions that may derive from the same.

n) Data used for the optimisation of the services and detection of errors and problems of the Website: the data used for this purpose will be kept for the period necessary to process and develop the aforementioned optimisation and error detection work and, once this work has been carried out, for the period of limitation of any legal actions that may arise from the aforementioned work.

o) Data used as a result of the use of video surveillance systems: data used for the purposes set out in this policy will be retained for a period of thirty (30) days, unless it is necessary to investigate any kind of breach of national law, incident or judicial or administrative requirement.

 

  1. WHO WILL THE USER’S DATA BE SHARED WITH?

All personal data provided by the User through the Website may be communicated to:

a) Legal entities that form part of GOIKO GRILL GROUP, S.L., with the basis of legitimacy in the fulfilment of the contractual relationship and legitimate interest. Specifically, data of a personal nature may be communicated to GOIKO GOURMET S.L.

b) Certified payment platforms, for the provision of payment services and secure electronic transactions.

c) Public Administrations, in the cases foreseen in the law, based on the fulfilment of a legal obligation.

d) Courts and Tribunals, in the cases provided for by law, based on compliance with a legal obligation.

e) Collaborators providing services related to the management of orders based on the fulfilment of the contractual relationship.

In addition, GOIKO will cooperate with third party service providers who may have access to your personal data and who will process the User’s data on behalf of and for the GOIKO account for the purpose of providing services. GOIKO follows rigorous supplier selection procedures in order to comply with its data protection obligations, including entering into the relevant data processing contract in accordance with Article 28 of the GDPR.

Specifically, GOIKO will rely on the provision of services by third party suppliers who carry out their activity, by way of example and without limitation, in the following sectors of activity: legal advice and technological and computer services.

GOIKO will carry out international transfers of Users’ data, some of the data processors mentioned, namely technology service providers, are located in the USA, a country outside the European Economic Area, with which GOIKO has signed Standard Contractual Clauses approved by the European Commission.

 

  1. COMMERCIAL AND PROMOTIONAL COMMUNICATIONS

One of the purposes for which GOIKO may process the personal data provided by Users (if they have authorised or have not objected to the processing) is to send them commercial communications with information relating to products, services, promotions, offers, events or news relevant to Users.

In the event that the User wishes to stop receiving commercial or promotional communications from GOIKO, they may request cancellation of the service by sending an email to the following email address: dpo@goiko.com or by clicking on the link that will appear at the bottom of the commercial communications sent.

  1. USER RESPONSIBILITY

The User guarantees that the data provided to GOIKO are true, accurate, complete and up to date. To this effect, the User is responsible for the veracity of all the data that they provide and will keep the information provided suitably updated, in such a way that it corresponds to their true situation.

Likewise, whenever the User provides personal data of third parties, they shall guarantee that these third parties have been informed of the aspects contained in this document and that they have obtained due authorisation to provide their data to GOIKO for the aforementioned purposes.

Thus, the User shall be liable for any false or inaccurate information provided through the Website and for any damages, direct or indirect, that this may cause to GOIKO or to third parties.

  1. EXERCISE OF RIGHTS

As the owner of the data, the User may send a letter to GOIKO, at the email or postal address indicated in the heading of this Privacy Policy, at any time and free of charge, to exercise the following rights:

a) Right of Access:

You have the right to be informed by GOIKO whether or not it is processing your personal data and, if so, to have access to such data and to receive information on the purposes for which they are processed, the categories of data affected by the processing, the recipients to whom your personal data have been disclosed and the expected period of data retention, among other information.

b) Right to Rectification and Erasure:

You have the right to request the erasure of personal data provided that the legal requirements are met, and the rectification of inaccurate data concerning you when, among other reasons, such data are no longer necessary for the purposes for which they were collected.

c) Limitation of processing, revocation of consent and total or partial objection to processing:

In certain circumstances (e.g. where the applicant disputes the accuracy of their data, while the accuracy of the data is being verified), applicants may request that the processing of their personal data be restricted and processed only for the purpose of pursuing or defending claims.

You also have the right to withdraw the consent given and to object to the processing at any time, on grounds relating to your particular situation, where the processing is based on our legitimate interest or on the legitimate interest of a third party (including processing for the purposes of direct marketing and related profiling). In this case, GOIKO will cease processing, unless legitimate reasons can be demonstrated.

d) Portability of your data:

You will have the right to receive the personal data that you have provided to GOIKO in a structured, common and machine-readable format, and to be able to transmit them to another data controller without being prevented from doing so by the data controller to whom you have provided them, in the cases legally provided for this purpose.

e) Automated individual decisions:

Furthermore, in addition to the above-mentioned rights, in case of automated decisions, including profiling, you have the right to obtain human intervention by GOIKO and to express your point of view and challenge the decision.

f) Others:

Similarly, where personal data are transferred to a third country or to an international organisation, you have the right to be informed about how you can access or obtain a copy of the appropriate safeguards relating to the transfer.

Likewise, you may lodge a complaint regarding the protection of your personal data with the Spanish Data Protection Agency at C/ Jorge Juan, 6, 28001 – Madrid, when the interested party considers that GOIKO has infringed the rights that are recognised by the applicable data protection regulations.

Likewise, you may lodge a complaint regarding the protection of your personal data with the Spanish Data Protection Agency at the address C/ Jorge Juan, 6, 28001 – Madrid, when the interested party considers that GOIKO has infringed the rights that are recognised by the applicable data protection regulations.

 

  1. SECURITY MEASURES

 GOIKO will treat the User’s data at all times in an absolutely confidential manner and will keep the mandatory duty of secrecy with respect to the same, in accordance with the provisions of the applicable regulations, adopting for this purpose the necessary technical and organisational measures to guarantee the security of your data and prevent its alteration, loss, processing or unauthorised access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed.

 

  1. CHANGES

GOIKO reserves the right to revise its Privacy Policy whenever it deems appropriate. For this reason, we kindly ask the User to regularly check this privacy statement for the latest version of GOIKO’s Privacy Policy.

 

  1. ACCEPTANCE AND CONSENT

The User declares that they have been informed of the conditions on the protection of personal data, accepting the content of this Privacy Policy.

 

 

Last updated: June 2024.