Privacy Policy

What this website does with your data (in short: almost nothing).

1. Data controller

2. What data is collected

• This website has no forms, no user accounts, no analytics and no advertising, and it does not ask you for any personal data.
• Cookies: the public website does not use any cookies, which is why there is no cookie banner. (The private menu-management area used by the restaurant uses one strictly technical session cookie, only for whoever logs in.)
• Server logs: like any website, the hosting server records technical data of each visit (IP address, date, page requested, browser) for security and to keep the service running. They are kept for a limited time and are not used to identify you.

3. Third parties

Fonts, scripts and the menu are hosted on this same website. The only external resource that loads automatically is the map: its tiles are downloaded from OpenStreetMap servers, which receive your IP address (see the OpenStreetMap privacy policy). The "Get directions" and "Google reviews" links take you to Google Maps only if you click them.

4. Calls and emails

If you call us from the "Call" button or write to us, your number or email is only used to answer your enquiry, booking or order.

5. Purpose, legal basis and retention

• Server logs: security and operation of the website. Legal basis: legitimate interest (art. 6.1.f GDPR). Kept for as long as the hosting provider sets, usually a few weeks.
• Enquiries by phone or email: to answer you. Legal basis: your consent when contacting us and, if you place an order, the commercial relationship (art. 6.1.a and 6.1.b GDPR). Kept as long as needed and for the periods required by law.
• Data is not shared with third parties unless required by law. The web hosting company processes the technical logs as data processor. No automated decisions or profiling take place.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to manuel.bohoyo@gmail.com, or in person or by post at the address above, proving your identity. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Last updated: October 2026.