In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPD-GDD), users of nayamrestaurante.com are informed as follows:

1. Data controller

  • Owner: EL AMRANI JAMAI AOUATEF
  • Tax ID (N.I.F.): ES47658178Q
  • Address: Calle Doctor Trueta, 218, 08005 Barcelona, Spain
  • Email: nayambarcelona@gmail.com

2. Purpose of processing

Personal data submitted through the contact and reservation forms on the Website is processed to:

  • Manage and respond to reservation requests made by users.
  • Handle enquiries submitted via the contact form.
  • Send service-related communications, when applicable.

3. Legal basis

The legal basis for processing is the data subject’s consent, given when submitting data through the Website’s forms, and, where applicable, performance of the contract arising from the requested reservation (Art. 6.1.a and 6.1.b GDPR).

4. Recipients

Data will not be shared with third parties, except where legally required. Certain service providers (e.g., the web hosting provider, Hostinger) may access data as data processors, under the terms of Art. 28 GDPR.

5. Retention period

Data will be kept for as long as necessary to fulfil the purpose for which it was collected, and thereafter for any legally required period.

6. Rights of data subjects

Users may exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to nayambarcelona@gmail.com, attaching proof of identity. Users also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their data does not comply with applicable law.

7. Source of data

The data processed is that provided directly by the user through the Website’s forms.

8. Security measures

Appropriate technical and organisational measures have been implemented to ensure the security and integrity of personal data processed, and to prevent unauthorised alteration, loss, processing or access.