1. Data controller
- Controller: (pending) (NIF 72906767X)
- Address: C/ Pintor Maximino Peña, 10, local bajo, 42003 Soria
- Contact: (pending)
2. What data we process and why
When you contact us
If you call us, write to us on WhatsApp, by email or on social media, we process your name, your contact details and whatever you tell us, in order to answer your query or handle your booking. Legal basis: your consent and taking steps at your request (art. 6.1.a and 6.1.b GDPR). We keep the data for as long as needed to deal with your request and, at most, one year, unless the law requires otherwise.
When you browse the website
This website does not use analytics or advertising cookies and does not build profiles. Our providers' servers record technical data (IP address, browser, date and time) to keep the service secure. Legal basis: legitimate interest (art. 6.1.f GDPR). These records are kept for a short period.
Map
The Google Maps map only loads if you tap "Show map". From then on, Google processes your data under its own privacy policy (policies.google.com/privacy).
Staff panel
The private panel stores the login details of the people who manage the website, for internal management. Legal basis: the employment or professional relationship (art. 6.1.b GDPR).
3. Who has access to the data
We do not share your data with third parties unless required by law. We use these service providers, bound by data processing agreements:
- Supabase (database; servers in the European Union, Ireland).
- Cloudflare (website hosting and delivery).
- Google (map and review score, only as described above).
Some of these providers are based in the United States. Any international transfer is covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.
4. Your rights
You can access, rectify or erase your data, object to or restrict its processing, request its portability and withdraw your consent at any time by writing to (pending), stating which right you wish to exercise. If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
5. Minors
This website is not intended to collect data from children under 14.
6. Changes
We may update this policy to adapt it to changes in the law or in our services. The date of the last update is shown at the top.