Privacy policy
1. Data controller
| Owner | [TO BE COMPLETED: full name or company name] |
|---|---|
| Tax ID | [TO BE COMPLETED] |
| Address | [TO BE COMPLETED: registered fiscal address] |
| villa.esmeralda@hotmail.com | |
| Phone | +34 632 91 52 25 |
2. Personal data we process
A. Reservation form
The reservation form collects: name or alias, phone number, number of guests, and preferred date and time. This data is not sent to any server operated by the restaurant. When you tap «Book via WhatsApp», your device opens WhatsApp with a pre-filled message that you can edit before sending. Data is transmitted directly between your device and WhatsApp (Meta Platforms Ireland Ltd.), and is subject to WhatsApp's privacy policy. The restaurant only receives and processes the information you send via that WhatsApp message, solely to manage your booking.
B. Server technical logs
This website is hosted on Vercel. When you access it, Vercel's servers automatically record technical data such as IP address, browser type and pages requested, to ensure the security and proper operation of the service.
C. Google Maps
The home page includes an embedded Google Maps map. If you accept cookies, Google may process technical data (IP address, device type) in accordance with its own privacy policy. If you decline cookies, the interactive map does not load.
3. Purposes and legal basis
| Processing activity | Purpose | Legal basis |
|---|---|---|
| Reservation form (WhatsApp) | Manage booking request | Art. 6(1)(b) GDPR — pre-contractual measures |
| Server technical logs | Security and technical maintenance | Art. 6(1)(f) GDPR — legitimate interest |
| Google Maps (with cookies) | Display interactive map | Art. 6(1)(a) GDPR — consent |
4. Recipients
- WhatsApp / Meta Platforms Ireland Ltd. (Dublin, Ireland): receives booking data when the user sends the message.
- Vercel Inc. (California, USA): web hosting provider, processes server logs as a data processor.
- Google Ireland Ltd. (Dublin, Ireland): Google Maps service. Only processes data if the user accepts cookies.
5. International transfers
Vercel Inc. and Google LLC (both US-based) participate in the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023). Transfers are also covered by Standard Contractual Clauses. Transfers from Meta Platforms Ireland to Meta Platforms Inc. are covered by Standard Contractual Clauses.
6. Retention periods
- Booking data (WhatsApp): retained in the restaurant's WhatsApp history. Recommended to delete once the booking is fulfilled.
- Server logs (Vercel): maximum 30 days.
- Google Maps data: see Google's privacy policy.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, object to, restrict, and port your data, and to withdraw consent at any time (for Google Maps: change your cookie preferences in the footer). To exercise these rights: villa.esmeralda@hotmail.com
You also have the right to lodge a complaint with the competent supervisory authority. In Spain: Agencia Española de Protección de Datos (AEPD) — www.aepd.es.
8. Security and updates
This website uses HTTPS encryption. Appropriate technical and organisational measures are applied to protect the security of personal data. Last updated: October 2024.