Last updated: August 25, 2026.
This Privacy Policy explains how the personal data of people who browse https://www.grupogomez.es/, contact Grupo Los Gómez, request information about events, submit their application, make a reservation, or interact with the digital services linked to the group is processed.
1. Who is responsible for processing?
The controller depends on the specific service or relationship. For corporate management of the Website, common forms, events, job applications, group marketing, analytics, and centralized administration, the controller is:
Data | Information |
Controller | Grupo Gómez Restauración, S.L. |
Tax ID (NIF) | B16810061 |
Registered office | Calle Tránsits nº 6, 46002 Valencia, Spain |
Address for exercising rights | Calle Pérez Pujol 4, bajo, 46002 Valencia, Spain |
Privacy email | comunicacion@grupogomez.es |
Data Protection Officer | No DPO has been appointed |
In relation to reservations for Linaje – Casa Paco Gómez, the operating company is GG Convento, S.L. (Tax ID B26729046, Calle Pérez Pujol 4, 46002 Valencia), which receives and manages reservation data, cancellations and, where applicable, the no-show policy. Grupo Gómez Restauración, S.L. may access such data to provide centralized management services, customer service, analytics, and group coordination.
When other restaurants are added to the Website, the identity of their operating company will be indicated on the corresponding page or reservation process. If two companies jointly determine the purposes and means of a processing activity, they must internally regulate their joint responsibility and provide the data subject with essential information about this division of roles.
2. What data may we process?
Depending on the service used, we may process the following categories of data:
- Identification and contact data: first name, last name, email address and phone number.
- Reservation and dining data: restaurant, date, time, number of diners, preferences or comments voluntarily provided, and data associated with cancellations or no-shows.
- Professional and recruitment data: information included in the CV, experience, education, and other data provided during the selection process.
- Commercial data: preferences, subscriptions, consent for communications, participation in loyalty programs, and response to campaigns.
- Technical and browsing data: IP address, online identifiers, device, browser, pages visited, interactions, visit origin, and data obtained through cookies or similar technologies, where there is a legal basis for it.
- Customer service and complaints data: content of inquiries, incidents, and communications held with the user.
- Pseudonymized or transformed identifiers used for advertising measurement, remarketing, or audience creation, where the user has given the corresponding consent.
We do not generally request special categories of personal data. If the user voluntarily discloses information related to allergies, intolerances, health, or other special needs in order to properly provide the service, it will be processed only to the extent necessary to attend to their request and with the applicable safeguards.
3. Purposes and legal bases
Processing activity | Purpose | Legal basis |
Contact and customer service | Handling inquiries, incidents, requests, and complaints. | Pre-contractual measures or performance of the requested relationship; legitimate interest in attending to and documenting communications, where applicable. |
Events and groups | Managing availability requests, sending menus, quotes, and event coordination. | Application of pre-contractual measures at the data subject’s request and, where applicable, performance of the contract. |
Reservations | Managing reservations, confirmations, changes, cancellations, and no-shows. | Application of pre-contractual measures and performance of the requested service. |
Billing and legal obligations | Issuing invoices, complying with tax and accounting obligations, and responding to requests from authorities. | Compliance with legal obligations. |
Work with us | Managing job applications and selection processes. | Application of pre-contractual measures requested by the candidate. When the intention is to keep the CV on file for future vacancies beyond the specific process, consent will be requested when necessary. |
Commercial communications | Sending news, promotions, campaigns, or commercial information about Grupo Los Gómez and its restaurants. | Consent of the data subject. Where a legal exception for existing customers is legally applicable, the requirements of the LSSI-CE (Spanish e-commerce law) will apply, and a simple, free means of opt-out will always be offered. |
Loyalty programs | Managing participation in programs such as Comeback or Super Popi, accumulation of visits, balance, and rewards. | Performance of the program’s conditions and, for additional promotional communications, consent where applicable. |
Analytics | Measuring website use, performance, attribution, and effectiveness of content and campaigns. | Consent for non-essential cookies or technologies. |
Advertising and audiences | Remarketing, campaign measurement, audience creation, and advertising personalization through Google, Meta and, when used, TikTok. | Consent. |
Security and legal defense | Preventing abusive use, protecting systems, and asserting or defending legal claims. | Legitimate interest and, where applicable, compliance with legal obligations. |
4. Data collected through forms
The Website includes, among others, the following forms and processes:
Process | Main data | Use |
Events and groups | First name, last name, email address, and phone number | Managing the request and sending the requested information or menus. |
Work with us | First name, last name, email address, phone number, and CV | Managing job applications and selection processes. |
Linaje reservation | First name, last name, email address, and phone number | Managing the reservation through TheFork’s system and the operating company. |
Contact / complaints | First name, last name, email address, and phone number | Handling inquiries, incidents, and complaints. |
Fields marked as mandatory are required to process the request. If the user does not provide such data, it may not be possible to provide the requested service.
5. Where does the data come from?
The data comes mainly from the data subject themselves, from the Website’s forms, from reservation systems, from interactions with the group and, where consent has been given, from analytics, advertising, or loyalty tools. In certain cases, reservation data may arrive through TheFork, CoverManager, or another platform used by the establishment.
6. Recipients and providers
The data may be processed by providers that offer services necessary for the activity, under the applicable contractual and data protection conditions. Depending on the active services, the following may be involved:
- TheFork and CoverManager, for reservation management and associated communications.
- Google, through Google Analytics, Google Tag Manager, Google Ads, Google Maps, YouTube, and other related services.
- Meta Platforms, through Meta Ads, Meta Pixel, and, when used, Conversion API.
- TikTok, when its pixel or advertising technologies are used for measurement, attribution, or audience creation.
- Stripe and Mercado Pago, when involved in payment, guarantee, security, or fraud prevention processes.
- CookieScript, for managing cookie preferences and consent.
- Comeback and Super Popi, for loyalty programs and promotions linked to the visit, when the user participates.
- Hosting, web maintenance, email, backup, CRM, form tools, and technology support providers, when they have access to data.
- Consultancies, financial institutions, insurers, auditors, legal professionals, or public administrations when there is a legal obligation, it is necessary to provide the service, or to assert or defend legal claims.
The restaurants’ operating companies may receive the data necessary to provide the requested service. Grupo Gómez Restauración, S.L. may have centralized access to certain data for corporate and management functions. This access must be supported by the appropriate internal legal relationship according to each company’s actual role.
7. International transfers
Some technology providers may process information from countries outside the European Economic Area. Where an international transfer occurs, a mechanism recognized under the GDPR will be used, such as an adequacy decision by the European Commission, the U.S. provider’s participation in the EU-U.S. Data Privacy Framework where applicable, standard contractual clauses, or other appropriate safeguards.
The user may request additional information about the applicable safeguards by writing to comunicacion@grupogomez.es.
8. Retention periods
Data will not be kept indefinitely simply because the data subject does not request its deletion. It will be kept for as long as necessary for the purpose and, afterward, for the applicable legal limitation or compliance periods, normally through blocking or restricted access where appropriate.
Category | Retention criterion |
Inquiries and contact | For as long as necessary to handle the inquiry and, afterward, for the reasonable period necessary to demonstrate its handling or address possible liabilities. |
Events and reservations | While the request or reservation is being processed and, after the service is provided, for the periods necessary to comply with contractual, tax, accounting obligations, or claims. |
Billing | For the periods required by applicable tax, accounting, and commercial regulations. |
Job applications | During the selection process. If it is desired to keep the CV on file for future vacancies, it will be limited to a reasonable period and the legal basis will be updated or renewed where appropriate. |
Marketing | Until consent is withdrawn or the right to object is exercised, after which the minimum information necessary to demonstrate the opt-out or consent will be kept for the applicable liability periods. |
Loyalty programs | For as long as participation in the program lasts and for the periods necessary to address obligations or claims arising from it. |
Cookies and analytics | According to the duration of each cookie or identifier as stated in the Cookie Policy and the CookieScript panel. |
Exercise of rights | For as long as necessary to handle the request and demonstrate compliance with legal obligations for the applicable liability periods. |
9. Commercial communications and advertising
When the user authorizes commercial communications, Grupo Gómez Restauración, S.L. may send information about Grupo Los Gómez, its restaurants, promotions, news, events, and content related to its activity. Consent may be withdrawn at any time through the opt-out mechanism included in each communication or by writing to the privacy email address.
When customer lists are used to create audiences on Google, Meta, or other authorized advertising platforms, previously transformed or pseudonymized identifiers may be sent using techniques such as hashing. This transformation does not necessarily mean that the data has ceased to be personal data. Processing will be carried out only with the applicable legal basis and safeguards.
10. Automated decisions and profiling
Analytics and advertising tools may generate segments or profiles related to interests, interactions, or the likelihood of responding to campaigns. It is not intended that these profiles be used to make decisions based solely on automated processing that produce legal effects on the user or significantly affect them in a similar way.
11. Rights of data subjects
The data subject may exercise, where applicable, the rights of access, rectification, erasure, objection, restriction of processing, and portability, as well as withdraw consent at any time without affecting the lawfulness of processing carried out prior to its withdrawal.
To exercise these rights, you may write to comunicacion@grupogomez.es or send a written request to Calle Pérez Pujol 4, bajo, 46002 Valencia, Spain. In order to process the request, it may be necessary to verify the identity of the requester in a proportionate manner.
You may also file a complaint with the Spanish Data Protection Agency (AEPD) if you believe the processing does not comply with the regulations. More information: [www.aepd.es](https://www.aepd.es)
12. Minors
The Website’s general services are not specifically aimed at minors. There is no intention to intentionally collect data from minors without the involvement or authorization legally required. If it is discovered that a minor’s data has been provided improperly, the necessary measures may be taken to delete or regularize it.
13. Security
Reasonable and proportionate technical and organizational measures will be applied to protect data against loss, alteration, unauthorized access, disclosure, or destruction, taking into account the nature of the processing, the state of the art, and existing risks.
14. Social media and third-party services
Interaction with Grupo Los Gómez profiles on social media or with third-party services is also governed by the terms and privacy policies of each platform. When Grupo Gómez Restauración, S.L. processes data obtained through these channels to respond to messages, manage campaigns, or provide services, it will apply this Policy as applicable.
15. Changes to the Privacy Policy
This Policy may be updated to reflect regulatory, organizational, technological changes, or changes in the services offered. When a modification significantly affects processing based on consent, a new decision from the user will be requested when legally required.