Privacy Policy
In accordance with current legislation, grupolavasca.com (hereinafter, the "Website") is committed to adopting the technical and organisational measures required by the level of security appropriate to the risk of the data collected.
Applicable legislation
This privacy policy complies with the Spanish and European regulations in force regarding the protection of personal data on the internet. Specifically, it complies with the following:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
- Spanish Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).
Data controller
The controller of the personal data collected on grupolavasca.com is:
- Kamaleonico Grupo La Vasca S.L., Tax ID (NIF) B09919721
- Address: Calle Bonaire, 19 – BJ, 07012 Palma, Illes Balears, Spain
- Phone: (+34) 971 10 73 16
- Email: mariana@grupolavasca.com
What data we collect and why
The Website only collects personal data through its contact and private-event forms: name, email, phone number and the content of the message. This data is used exclusively to handle the enquiry or request submitted (group bookings, private events, catering, general enquiries or job applications) and to maintain the communication arising from it.
Under no circumstances are special categories of personal data processed within the meaning of Article 9 GDPR, nor is any profiling or automated decision-making carried out with the data provided.
Legal basis for processing
The legal basis for processing personal data is the User's consent, expressly given when submitting any of the Website's forms. The User has the right to withdraw consent at any time, without this affecting their use of the Website.
Retention period
Personal data will be kept only for the minimum time necessary to handle the request and, in any case, for a maximum of 1 year, or until the User requests its deletion.
Recipients and data processors
In order to provide the service, the data submitted through the forms is processed by the following technology providers:
- Resend, Inc. — email delivery service that forwards the content of the forms to the restaurant.
- Vercel, Inc. — hosting platform for the Website, which technically processes the requests.
- Google Ireland Ltd. (Google Workspace) — provider of the corporate mailbox where messages are received and handled.
Some of these providers may process data on servers located outside the European Economic Area. In such cases, the transfer is covered by the safeguards provided for in the GDPR (adequacy decisions or standard contractual clauses of the European Commission).
Data of minors
Only persons over 14 years of age may lawfully give their consent for the processing of their personal data by grupolavasca.com. For minors under 14, the consent of parents or guardians is required.
Data security
The Website is served entirely over secure HTTPS (SSL/TLS certificate), so personal data is transmitted encrypted between the User's browser and the server. grupolavasca.com undertakes to notify the User, without undue delay, of any personal data security breach likely to entail a high risk to their rights and freedoms.
Your rights
The User may exercise at any time the following rights recognised by the GDPR and the LOPD-GDD:
- Access: to know whether we process your data and obtain a copy of it.
- Rectification: to correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): to have your data deleted.
- Restriction of processing: to restrict the use of your data in the cases provided for by law.
- Portability: to receive your data in a structured, commonly used format.
- Objection: to object to the processing of your data.
To exercise them, simply send a written communication with the reference "RGPD — grupolavasca.com", together with a document proving the identity of the applicant, to either of these addresses:
- Postal address: Calle Bonaire, 19 – BJ, 07012 Palma, Illes Balears, Spain
- Email: mariana@grupolavasca.com
Complaints to the supervisory authority
If the User considers that there is a problem or breach of current regulations in the way their personal data is being processed, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
Acceptance and changes to this policy
Use of the Website implies acceptance of this Privacy Policy. grupolavasca.com reserves the right to amend it at its own discretion or due to legislative or case-law changes; Users are advised to review it periodically.