Privacy policy

Who we are and how to contact us

This policy explains data processing associated with petiscaria.pt and Dunas Petiscaria, at Rua Capitão Baptista Marçal 49, 8800-591 Cabanas de Tavira, Portugal. For privacy enquiries, contact dunas@petiscaria.pt or +351 281 370 686.

The entity operating the restaurant is responsible for its processing to handle enquiries, receive guests and provide restaurant services. External providers may have their own responsibilities, described in their policies and the applicable agreements.

Data and purposes

You can browse the menu without creating an account on our website. Browsing may generate technical data, including IP address, browser details, pages visited and access or error logs, for website delivery, security and troubleshooting.

If you contact us, we may process your name, contact details and message to respond. To manage bookings and receive guests, we may access your name, telephone, email, date, time, party size and information you choose to provide, through TheFork or direct contact.

Avoid sharing unnecessary sensitive information. Contact the restaurant about allergies or specific needs; this information requires particular care and must not be used for unrelated purposes.

Legal bases

Processing needed to answer enquiries and manage bookings is based on steps taken at your request before providing a service and performance of that service. Compliance with applicable legal obligations is a separate legal basis.

Security and abuse prevention may rely on legitimate interests, subject to balancing your rights. Non-essential analytics and promotional communications requiring permission depend on prior, specific and withdrawable consent. Making a booking does not mean consenting to marketing.

Bookings through TheFork

The booking form embedded on this website is provided and hosted by TheFork. Information entered in it is sent to that external service under the information and conditions displayed in the module.

The restaurant receives or accesses information needed to manage the booking and provide the service. Using an external platform does not remove Dunas’s responsibilities for its own data processing or restaurant service.

Each party’s specific responsibilities depend on the module and applicable agreements. Read TheFork’s legal, privacy and cookie information. Contact TheFork about your account and its own processing; contact us about restaurant service and our processing.

Cookies, Analytics and external services

The website integrates Google Analytics 4 to understand how pages are used. This service may process online identifiers, device information, browsing events and cookies. Read Google’s privacy policy for information about its processing.

TheFork, Google maps and other external content may receive technical data when loaded. Links to social networks and other websites are also subject to their own policies.

Cookies or technologies that are not strictly necessary require prior consent where the law provides. This policy describes services and does not replace obtaining that consent. You can also manage cookies in your browser; blocking some resources may affect external services.

Recipients and transfers

Authorised staff and hosting, technical support or reservation providers may access data as needed for their roles. Information may also be disclosed to authorities where legally required.

Some providers may process data outside the European Economic Area. Where this occurs, the safeguards required by the GDPR must apply, such as adequacy decisions or standard contractual clauses, as appropriate. Consult providers’ policies for their transfers.

Retention and security

Data is retained for as long as needed for its purpose, legal obligations or the defence of rights. Enquiries and booking data should not be kept indefinitely without a basis. Provider retention also depends on their policies and service settings.

We apply technical and organisational measures proportionate to the processing, including access limited to people who need the data. No system guarantees absolute security. Avoid sending unnecessary data through public channels.

Your rights

Subject to legal conditions and limits, you may request access, rectification, erasure, restriction or portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

Send requests to dunas@petiscaria.pt, explaining the subject and your relationship with the restaurant. We may request only the information needed to verify your identity. We normally respond within one month; any extension allowed by law will be communicated.

You may complain to the Portuguese supervisory authority, CNPD. Requests concerning TheFork’s or Google’s own processing should also be sent to the relevant controller.

Updates

This policy may be updated to reflect website, service or legal changes. The revision date is shown at the top. Changes requiring additional information or consent will be handled according to the law.