Privacy notice.

1. Data controller

El Galpón, operated under the corresponding registered business name, located at Blvd. Toluca–Metepec No. 400, Galerías Metepec, Metepec, State of Mexico, is responsible for the use and protection of your personal data, and undertakes to handle it in accordance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

2. What personal data do we collect?

To fulfill the purposes of this notice, we may collect the following categories of data:

• Identification and contact: full name, phone number (mobile or landline) and email address.
• Reservation and preferences: date and time of your visit, number of guests, special requests and, only if you choose to share them, dietary restrictions or allergies.
• Invoicing: if you request a Mexican electronic invoice (factura), your RFC (tax ID), registered business name, tax regime, postal code and email address.

The website has two forms. In the invoice request, your data travels encrypted to our server, which forwards it by email to facturacion@galpon.mx so we can issue your invoice and sends you a copy at the email you gave; the website does not store it (it only notes the date and time of each request, with none of your data, so we know how many we receive). In the reservation request, your data (name, phone, email if you share it, date, time, party size, occasion and requests) travels encrypted to our server, which keeps it so our staff can confirm your reservation. If you left your email, we write to you there when your request arrives and when we confirm, decline or cancel it, and we keep a record of those messages (which one was sent and when) with your reservation. We delete everything 90 days after the date of your reservation. To prevent abuse, the server keeps a temporary count of sends per visitor, identified by an anonymous fingerprint that contains none of your data. While you browse, it automatically collects browsing data through Google Analytics cookies, as explained in section 3.

3. Cookies and Google Analytics

This website uses Google Analytics, a service of Google LLC, to learn how many people visit it, which pages they read and how they find it, so we can improve it.

• What it collects: pages visited, date and time, visit length, the site you came from, device and browser type, language, approximate location (city or region) and a random identifier stored in cookies in your browser (such as _ga).
• Why: only to measure and improve the website. We do not use this data to identify you.
• Who processes it: Google, on behalf of El Galpón and under its privacy policy; it may process the data on servers outside Mexico. Google receives your IP address to provide the service, but Google Analytics does not log or store it.
• How to turn them off: you can block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. The website works the same without them.

4. How do we use your personal data?

We use your data for these purposes, which are necessary to provide our service:

• Managing reservations: confirming, changing or canceling your reservations, and contacting you if something unexpected comes up.
• Customer care: answering your questions, comments, private-event requests or feedback about your visit.
• Invoicing: issuing digital tax receipts for your purchases.
• Security: keeping the restaurant, bar and gallery premises safe.

Secondary (optional) purposes. Only if you authorize it, we may use your contact details to send you promotions, invitations to tastings, exhibitions, special events or El Galpón newsletters. You can refuse or withdraw this consent at any time through the means in section 7, without affecting the service you receive.

5. How do we protect your information?

We apply reasonable administrative, technical and physical security measures to protect your personal data against damage, loss, alteration, destruction or unauthorized use, access or processing.

6. Data transfers

El Galpón does not sell, rent or share your personal data with third parties for commercial or advertising purposes. Your data may only be shared with competent authorities when required by applicable Mexican law, or with service providers strictly necessary to serve you, such as for issuing your electronic invoice, under confidentiality agreements. Website browsing data is processed by Google as our analytics provider (section 3).

7. ARCO rights

As the owner of your personal data, you have the right to:

• Access: know what data we hold about you and how we use it.
• Rectification: correct it if it is outdated, inaccurate or incomplete.
• Cancellation: ask us to delete it when you consider it is not needed for the purposes of this notice.
• Opposition: object to the use of your data for specific purposes.

To exercise your ARCO rights or withdraw your consent, call us at 722 232 4632 (+52 722 232 4632) or submit your request in writing at our address. Please include your full name, the reason for your request and a way for us to reply.

8. Changes to this privacy notice

El Galpón may modify or update this notice at any time to reflect changes in the law or in our internal policies. Any change will be available and in force on galpon.mx; the date of the latest update appears at the top of this notice.

9. Contact

If you have questions about this notice or about how your information is handled, please contact us:

Phone

722 232 4632 (+52 722 232 4632)

Location

Blvd. Toluca–Metepec No. 400, Galerías Metepec, Metepec, State of Mexico

Website

galpon.mx