This English version is provided for convenience. In case of discrepancy, the Spanish version prevails.
1. Data controller
- Controller: [RAZÓN SOCIAL] (El Ländle)
- Tax ID (NIF): [NIF]
- Address: [DOMICILIO FISCAL]
- Phone: 659 86 43 59
- Email: [CORREO ELECTRÓNICO]
2. What data we process
When you book a table with the form, we process: your full name, phone number, email (optional), the number of people, any notes you add, and the day, time and table chosen.
Health data. The notes field may contain food allergies or intolerances, which the GDPR treats as health data, a special category of data (art. 9). We only process this if you give explicit consent by ticking the specific checkbox in the form, and it is only used by the restaurant's kitchen and floor staff to prepare your meal safely. We do not use it for any other purpose or share it with third parties. Please write only what is necessary.
3. What we use it for
- Managing your booking: keeping the table, contacting you to confirm or change it, and serving you on the day of your visit.
- Preparing your meal taking into account the allergies or intolerances you tell us about (only used by the restaurant's kitchen and floor staff).
- Sending you the booking confirmation, if you leave us your email.
We do not build profiles, make automated decisions, or use your data for advertising.
4. Legal basis
Taking pre-contractual steps at your request (art. 6.1.b of Regulation (EU) 2016/679, GDPR) and the consent you give by ticking the form's checkbox (art. 6.1.a GDPR). You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
For the allergies and intolerances in the notes, the legal basis is your explicit consent (art. 9.2.a GDPR), given by ticking the specific checkbox. If you don't want to give it, leave the notes blank and tell the staff on the day, or book by phone. You may withdraw it at any time by writing to [CORREO ELECTRÓNICO], and we will delete that data.
5. How long we keep it
Booking data is kept for [PLAZO DE CONSERVACIÓN, p. ej. 12 meses tras la reserva]. If the visit generates an invoice, the data it contains will be kept for the periods required by tax and commercial law.
6. Who we share it with
We do not share your data with third parties, except where legally required. To run the website we rely on providers that process data on our behalf (data processors), under contract and with adequate safeguards:
- Supabase: the database where bookings are stored.
- Cloudflare: website hosting (Cloudflare Pages).
- Resend: sending confirmation emails and the booking alert to the restaurant.
Some of these providers may process data outside the European Economic Area. In those cases, the transfer is covered by the safeguards provided for in the GDPR, such as the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [CORREO ELECTRÓNICO] or contacting the restaurant, stating which right you wish to exercise. If you believe we have not properly handled your request, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Cookies, map and local storage
This website does not use advertising, analytics or third-party cookies, and fonts are served from the same domain. The OpenStreetMap map only loads if you click "Show the map"; your browser then connects to OpenStreetMap's servers, which receive your IP address. Your browser stores your chosen language (Spanish, Catalan, English or German) to remember it on your next visit. The private admin area stores the authorised user's session in the browser, strictly necessary for it to work.
9. Security
We apply technical and organisational measures to protect data: encrypted connections, booking access restricted to authorised restaurant staff, and storage with providers offering security guarantees.