Legal
Privacy Policy
Last updated: February 2026
1. Data Controller
In accordance with Regulation (EU) 2016/679 (GDPR), we inform you that the data controller is:
Bowl & Soul, S.L. (operating as TRUE ROOTS)
Cabanes 38Bis, Pl. BJ 1
08005 Barcelona, Spain
NIF: B56595051
Operating address: Carrer de Pere IV, 313, Sant Martí, 08020 Barcelona, Spain
Email: tr.bcn@trueroots.es
Contact hours: Monday – Friday, 9:00 AM – 5:00 PM
2. What Data We Collect
Through our website, catering request forms, and services, we may collect:
Contact Information
- Full name
- Email address
- Phone number
- Delivery/event address
Service-Related Information
- Event date and location
- Guest count
- Budget information
- Event details and notes
- Dietary preferences
- Allergen information
- Bistro reservation details
Technical Information
- IP address, browser type, device information
- Pages visited, time spent on site
We do not intentionally collect special category data beyond food-related dietary information necessary to provide catering and bistro services.
3. Purpose of Processing
We process your data for the following purposes:
- To respond to catering and bistro inquiries
- To prepare proposals and event planning
- To execute catering services and manage reservations
- To process orders and deliveries
- To manage invoicing and payments
- To send service confirmations and updates
- To send newsletters and promotional communications (with your consent)
- To comply with legal and tax obligations
- To improve our services
4. Legal Basis
The legal basis for processing your data is:
- Contract execution (Art. 6.1.b GDPR)
- Legitimate interest in responding to inquiries (Art. 6.1.f GDPR)
- Legal obligation for tax compliance (Art. 6.1.c GDPR)
- Consent for marketing communications (Art. 6.1.a GDPR)
Dietary and allergen information is processed strictly for service provision and food safety purposes.
5. Data Retention
We retain personal data:
- Active clients: duration of service + 6 years (Spanish tax law)
- Inquiries not converted into clients: maximum 2 years
- Newsletter subscribers: until unsubscribe or deletion request
- Accounting data: as required by Spanish law
6. Data Sharing
We do not sell your data.
Your data may be processed by service providers acting as data processors, such as:
- Shopify (website hosting and e-commerce platform)
- Fillout (form processing service)
- Banking institutions (for payments)
- Delivery partners (for catering order fulfillment)
- Email service providers (for newsletters and communications)
- Google Analytics (website analytics, anonymized data)
All providers process data under GDPR-compliant agreements.
7. International Transfers
Some service providers may process data outside the European Union. In such cases, appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions are implemented in accordance with GDPR.
8. Your Rights
You have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request deletion ("right to be forgotten")
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent (for consent-based processing)
- Lodge a complaint with the Spanish Data Protection Authority (AEPD)
To exercise your rights, contact us at: tr.bcn@trueroots.es
We will respond to your request within 30 days.
9. Security Measures
We implement appropriate technical and organizational measures to protect your data, including:
- Secure hosting (SSL/TLS encryption)
- Access control and limited personnel access
- Encrypted databases
- Regular security assessments
However, no method of transmission over the internet is 100% secure.
10. Cookies and Tracking
Our website uses cookies for functionality and analytics:
Essential Cookies
Required for website functionality (shopping cart, session management).
Analytics Cookies
Google Analytics (anonymized data to understand site usage).
Marketing Cookies
Used with your consent for targeted advertising.
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.
For more information, see our Cookie Policy.
11. Newsletter and Marketing
If you subscribe to our newsletter, we will send you updates about:
- New menu items and seasonal offerings
- Events and workshops
- Special promotions and offers
You can unsubscribe at any time by:
- Clicking "unsubscribe" in any email
- Contacting us at tr.bcn@trueroots.es
12. Children's Privacy
Our services are not directed to individuals under 16. We do not knowingly collect data from children.
13. Updates to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services constitutes acceptance of the updated policy.
14. Contact Us
For questions, concerns, or to exercise your rights:
TRUE ROOTS
Email: tr.bcn@trueroots.es
Address: Carrer de Pere IV, 313, Sant Martí, 08020 Barcelona, Spain
Hours: Monday – Friday, 9:00 AM – 5:00 PM
15. Supervisory Authority
If your concerns are not addressed, you may lodge a complaint with:
Agencia Española de Protección de Datos (AEPD)
Website: www.aepd.es
Email: info@aepd.es
