Privacy Policy
This legal notice provides details on how we collect and process your personal data through the use of our website https://notablu.com, including any information you may provide to us through the website when you book a table or subscribe to our newsletter.
By providing us with your data, we inform you that our services are not available to individuals who are legally unable to provide consent. Therefore, when you submit our forms, you confirm that you have sufficient legal capacity to give your consent.
Below, we provide information about the data protection policy of Grupo Casanis (you can consult the list of companies in Annex I).
1.Data Controller
Contact details of the data controller:
Grupo Casanis (you can consult the list of companies in Annex I), with registered address at Avenida Ricardo Soriano 36, Edificio María III, 1st Floor, Door 103, 29601 Marbella, Málaga, and telephone numbers: <a href=”tel:+34952900450″>952900450</a> / <a href=”tel:+34952770592″>952770592</a>.
We have appointed a Data Protection Officer, who can be contacted by email at: <a href=”mailto:dpo@casanisgroup.eu”>dpo@casanisgroup.eu</a>
Grupo Casanis is the controller of your personal data (hereinafter, “we”, “us” or “our”).
2. What data do we collect?
The General Data Protection Regulation defines personal data as any information relating to an identified or identifiable natural person; in other words, any information that can identify a person. This does not include anonymous or aggregated percentage-based data.
Any personal data collected directly from the data subject will be treated confidentially and incorporated into the relevant processing activities under the responsibility of Grupo Casanis.
On our website, we may process certain types of personal data, including:
- Identity data: first name and surname.
- Personal characteristics data: date of birth and nationality.
- Contact data: email address, telephone number and address.
We do not collect any data relating to special categories of personal data (including data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health information, or genetic or biometric data).
If we are required by law or under the terms of a contract between us to collect personal data and you refuse to provide it, we may be unable to enter into that contract or provide the relevant service. Where applicable, we will inform you in advance.
3. How do we collect your personal data?
The methods we use to collect personal data are:
- Through the forms available on our website, our contact email address, by telephone or by post, when:
- You request information about our services.
- You engage our services.
- You subscribe to one of our publications. To ensure the quality of our website, we reserve the right to reject any registration request or to suspend or cancel any previously accepted registration if we believe it does not comply with these requirements or with any applicable law or regulation. Should this occur, we will endeavour to explain the reasons for our decision, although we cannot guarantee that we will do so in every case.
- Through technology or automated interactions: on our website, we may automatically collect technical data about your device, browsing actions and usage patterns. This data is collected through cookies or similar technologies. For more information, please refer to our Cookie Policy here.
- Through third parties:
- Google: analytics data or search data. Outside the European Union.
4. Purpose and legal basis for processing your data
The most common purposes for which we use your personal data are:
- To formalise a contract between Grupo Casanis and you.
- Where you have given your consent to the processing of your data.
- Where we need to comply with a legal or regulatory obligation.
- Where it is necessary for our legitimate interests or those of a third party.
You may withdraw your consent at any time by sending an email to dpo@casanisgroup.eu or by consulting the section on exercising your rights below. The table below explains how we use your personal data, the legal basis for doing so and the categories of personal data we process. We may process your personal data on additional legal grounds where applicable. If you require further information, please contact us at dpo@casanisgroup.eu.
| Form | Purpose | Type of data | Legal basis for processing |
|---|---|---|---|
| Private dining / private events | To manage the data provided for the purpose of sending information | First name, Last name, Email, Telephone |
|
| Join the Nota Blu Family | To manage the data provided for membership registration | First name, Last name, Email, Telephone, Nationality, Date of birth, Address |
|
| Book a Table | To manage table reservations | First name, Last name, Email, Telephone |
|
Marketing communications: You will only receive marketing communications if:
- You have requested information about, or purchased, one of our products or services.
- You have provided your data and consented by selecting the relevant checkbox on our form.
- You have not expressed your wish to stop receiving such communications.
We will obtain your explicit consent before sending you any marketing communications. You may request at any time that we stop sending such communications by emailing dpo@casanisgroup.eu.
If you choose to stop receiving our communications, your personal data will continue to be stored where necessary as a result of any contractual relationship with you in order to comply with our legal obligations.
Purpose limitation: We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that it is necessary to use it for another compatible purpose. In such cases, we will notify you in advance, informing you of the legal basis for the new processing.
5. How long will we retain your data?
Your data will be retained for as long as necessary to fulfil the purpose for which it was collected and to determine any potential liabilities arising from that purpose and from the processing of the data. The retention periods established under the applicable regulations will apply where relevant to this processing.
Data of subscribers by email or form: from the time the user subscribes until they unsubscribe.
6. Minors
Grupo Casanis does not authorise children under the age of 14 to provide their personal data through the means made available on this website (including completing web forms to request services or make contact, or sending emails).
Therefore, any person who provides personal data through these means formally declares that they are over 14 years of age, and Grupo Casanis shall not be held liable for any failure to comply with this requirement.
If your child, being under the established age limit, has provided personal information to Grupo Casanis, please contact us so that you may request the exercise of the applicable rights.
Where the services offered by Grupo Casanis are intended for children under the age of 14, appropriate means will be provided to obtain authorisation from the child’s parents or legal guardians.
7. Exercising Your Data Protection Rights
How can you exercise these rights?
Users may send a request to the registered office of Grupo Casanis or by email to dpo@casanisgroup.eu, enclosing in both cases a copy of their National Identity Document (DNI) or another equivalent proof of identity, in order to exercise the following rights:
- Right of access: You may ask Grupo Casanis whether we are processing your personal data.
- Right to rectification: You may request the correction of inaccurate personal data or exercise your right to erasure (“right to be forgotten”).
- Right to restriction of processing: In such cases, Grupo Casanis will retain your data only for the establishment, exercise or defence of legal claims.
- Right to object: Grupo Casanis will stop processing your personal data in the manner you request, unless there are compelling legitimate grounds for the processing or it is necessary for the establishment, exercise or defence of legal claims.
- Right to data portability: If you wish your data to be processed by another organisation, Grupo Casanis will facilitate the transfer of your data to the new controller.
You may use the standard forms made available by the Spanish Data Protection Agency (AEPD) to exercise the above rights: Here.
Complaints to the DPO / AEPD: If you believe there is a problem with the way Grupo Casanis processes your data, you may first submit your complaint to the Data Protection Officer, who will seek to resolve the matter appropriately.
DPO Email: dpo@casanisgroup.eu
Address: Avenida Ricardo Soriano 36, Edificio María III, 1st Floor, Door 103, 29601 Marbella, Málaga.
If the matter cannot be resolved, you may always lodge a complaint with the competent supervisory authority. In Spain, this is the Spanish Data Protection Agency (AEPD).
We may request specific information to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure designed to ensure that personal data is not disclosed to any person who has no right to receive it.
We will respond to all requests within the legal period of one month. However, if your request is particularly complex, it may take longer than one month. In such cases, we will notify you and keep you informed of the progress.
8. Data disclosure: provision of services
In the course of our work, we may need the assistance of third parties who will process your data solely for the purpose of providing the contracted service, and with whom we have implemented the appropriate safeguards to protect your rights:
- Service providers offering system administration and information technology services.
- Professional advisers, including lawyers, auditors and insurers, who provide banking, legal, insurance and accounting consultancy services.
- All processors to whom we transfer your data will respect the security of your personal data and process it in accordance with the GDPR.
We only allow these processors to process your data for specified purposes and in accordance with our instructions. However, in the interests of transparency, you may request a list of the companies that provide services to us by emailing: dpo@casanisgroup.eu
9. Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed without authorisation, altered or disclosed.
In addition, we limit access to your personal data to employees, agents, contractors and other third parties who have a legitimate business need to know such data. They will only process your personal data in accordance with our instructions and will be subject to a duty of confidentiality.
We have implemented procedures to deal with any suspected personal data breach and, where a security breach occurs, we will notify you and the relevant Supervisory Authority as required under Articles 33 and 34 of the GDPR.
ANNEX I
CASABUBU S.L. Tax ID (CIF): B-92486695, registered with the Commercial Registry of Málaga on 26 January 2004, Volume 3447, Book 2359, Folio 86, Sheet MA-67288, Entry 1.
RESTOPLAGE MARBELLA S.L. Tax ID (CIF): B-93433365, registered with the Commercial Registry of Málaga on 18 February 2019, Volume 5446, Book 4353, Folio 176, Sheet MA-130582, Entry 6.
MZL Holding, S.L. Tax ID (CIF): B-93686194, registered with the Commercial Registry of Málaga on 14 May 2019, Volume 5838, Book 4745, Folio 62, Section 8, Sheet MA150728, Entry A 1.
BBCG MARBELLA S.L. Tax ID (CIF): B-93715852, registered with the Commercial Registry of Málaga, Volume 5894, Book 4801, Folio 166, Section 8, Sheet MA153327, Entry I/A 1.
MYCO MILANO, S.L.U. Tax ID (CIF): B-09674326, registered with the Commercial Registry of Málaga on 10 February 2022, Volume 6127, Book 5034, Folio 58, Section 8, Sheet MA165398, Entry A 1.