How does Coco & Carmen collect personal data?
Coco & Carmen collects personal data in the following ways:
When you make a reservation with us.
When you update an existing reservation.
Through our website and digital services.
When you sign up for our newsletter.
Via social media, advertising partners, and public records.
When you apply for a job with us.
Through agreements that require storing certain information, such as employment or supplier contracts.
We always comply with current legislation when collecting and handling personal data. Consent is obtained where required, and you have the right to withdraw your consent at any time.
What information do we collect?
Coco & Carmen may collect the following information:
Name, email address, phone number, and other contact details.
Payment information related to table reservations.
Purchase history and feedback through social media.
Browser information and usage data from our digital services.
Contact details of business representatives we collaborate with.
You may also choose to provide additional information, such as:
Allergies or disabilities.
Food preferences.
Medical conditions.
By sharing this information, you consent to our storing and processing of these details. For sensitive personal data, such as medical information and allergies, we always obtain clear and documented consent.
Table reservation and card hold online
We use Waiteraid.com as our booking system. Waiteraid.com processes personal data such as names, contact details, and reservation information. Coco & Carmen has access to this information to manage your booking. Waiteraid.com is also responsible for the secure handling of card information.
For more information on how Waiteraid.com processes your card and personal data, please refer to their Privacy Policy HERE.
(the link opens in a new window).
Cookies
You can adjust your cookie settings through your browser. You can choose to accept all cookies, some cookies, or decline all types of cookies, though essential cookies are required for basic website functionality.
Purpose of collection
Coco & Carmen collects personal data to:
Manage and improve our services.
Handle reservations and payments.
Communicate with you before, during, and after your restaurant visit.
Tailor marketing and communication.
Analyze user behavior and enhance our offerings.
Comply with legal requirements.
All data collection is conducted in accordance with applicable data protection regulations and solely for the purposes described above. We do not collect more data than necessary for these purposes.
Legal basis for collection
The processing of your personal data is based on the following:
Fulfillment of a contract, such as a reservation or a supplier agreement.
Processing prior to entering into a contract at your request.
Our legitimate interest, such as analyzing statistics and improving our services, provided that your rights are not overridden.
For processing sensitive personal data, such as health information, your explicit consent is required.
You always have the right to withdraw your consent at any time.
Retention period
Coco & Carmen stores your personal data as long as necessary for the specified purpose. Guest information is retained for up to two years after your last visit, or longer if we are legally required to keep it.
When we no longer need your personal data, or if you request deletion and we have no legal obligation to retain it, your data is securely deleted or anonymized.
Marketing
We have a legitimate interest in marketing our services to previous customers. If you have provided your email address or made a purchase with us, you may receive promotional offers or marketing materials from us. You can unsubscribe from these messages at any time by clicking the unsubscribe link in the email or contacting us here.
Job application
When you apply for a job at Coco & Carmen, we process your personal information, including your name, contact details, and information about your education and professional experience. This data is stored throughout the recruitment process and deleted immediately after the process is complete, unless otherwise agreed.
With your consent, we may keep your information for up to two years for future recruitment opportunities.
Your rights
As a data subject, under GDPR you have the following rights:
The right to request access to your personal data.
The right to have your data corrected if it is inaccurate.
The right to request the deletion of your data, provided we are not legally required to retain it.
The right to withdraw your consent to the processing of your data at any time.
To exercise your rights, you can contact us in writing. We strive to respond to your request within 30 days.
Storage and sharing of personal data
We protect your personal data through updated security procedures and secure IT solutions. In addition to our internal systems, we use external service providers who act as data processors. These providers are bound by agreements that ensure your data is handled securely and in accordance with applicable laws.
When necessary, we may share your information with third parties, such as restaurants or event organizers, to provide you with the best possible service. All third parties handling your data comply with data protection regulations and have valid data processing agreements in place.
Changes to Coco & Carmen’s Privacy Policy
Coco & Carmen reserves the right to update this Privacy Policy at any time. Any changes will be published on our website and will take effect upon publication.
Transfer or Sale of Business
If Coco & Carmen or XXXX sells, reorganizes, or transfers the business, personal data may be transferred as part of the transaction. We will inform you if such a transfer occurs and what rights you have in connection with this.
Right to file a complaint
If you believe that your personal data has been processed incorrectly or in violation of applicable law, you have the right to file a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten), which is the supervisory authority responsible for data protection in Sweden.
The Privacy Policy was updated on 2024.10.22