Privacy Policy

1. Introduction
1.1. Grano Pasta Fresca values the privacy of its users and is committed to protecting the personal information you provide when accessing our website and using our services.

1.2. This Privacy Policy explains how we collect, use, share, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law.

2. Data Collected

2.1. Restaurant Reservations
Reservations may be managed through third-party platforms (such as TheFork). These platforms collect and process your personal data independently. Trama Pasta Fresca does not control how these platforms handle your data. We recommend reviewing their respective Privacy Policies.

2.2. Job Applications
If you apply for a job through our website, we may collect personal information such as your name, email, phone number, and CV. This data is used solely for recruitment purposes.

2.3. Automatically Collected Information
We may automatically collect certain data when you visit our website, including:

  • IP address

  • Browser type

  • Pages visited

  • Access times

This information helps us improve website performance and user experience.

2.5. Cookies
We use cookies to personalize your experience and analyze website traffic. You can manage or disable cookies through your browser settings. For more details, please refer to our Cookie Policy.

3. How We Use Personal Data

3.1. Personal data is used for the following purposes:

  • Managing reservations via third-party partners

  • Processing takeaway and delivery orders

  • Handling job applications and recruitment processes

  • Responding to inquiries and customer requests

  • Improving website functionality and user experience

  • Complying with legal and regulatory obligations

4. Legal Basis for Processing

4.1. We process personal data based on:

  • Your consent (e.g., job applications, marketing communications)

  • The performance of a contract (e.g., reservations, orders)

  • Compliance with legal obligations (e.g., invoicing requirements)

  • Legitimate interests (e.g., improving services and preventing fraud)

5. Sharing of Personal Data

5.1. We may share personal data with:

  • Reservation platforms (e.g., TheFork)

  • Payment service providers

  • IT and hosting service providers

  • Public authorities, when required by law

5.2. All third parties are required to process personal data securely and in compliance with GDPR.

6. Data Security

6.1. We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, or alteration.

6.2. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Data Retention

7.1. Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

7.2. Job application data may be retained for up to one year after submission, unless a longer retention period is required or consent is provided.

7.3. Website usage data (e.g., cookies and analytics) is retained only for the time necessary to analyze traffic and improve services, in accordance with applicable laws.

8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request deletion of your data

  • Restrict processing

  • Request data portability

  • Object to processing (including for marketing purposes)

  • Withdraw consent at any time

To exercise your rights, please contact us using the details below.

9. Changes to This Privacy Policy

9.1. Grano Pasta Fresca reserves the right to update this Privacy Policy at any time. Updates will be published on this page.

9.2. Where required by law, we will notify users of significant changes.

10. Contact

For questions or requests regarding this Privacy Policy or your personal data, please contact us:
Email: geral@granopastafresca.com

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD).

Last updated: April 2026