Data controller
Nombre Fiscal, S.L. (NIF B00000000), Carretera de les Marines, s/n, 03700 Dénia. Contact: bagatge@bagatgerestaurant.es.
What data we process
- Identification and contact details: name, email and phone number (used to send booking confirmations and reminders by email and text message).
- Booking details: date, time, number of guests, menu and notes.
- Guarantee card: stored and processed by Stripe Payments Europe, Ltd.; we only see the brand and last four digits. Nothing is charged when booking, only the penalty if you do not show up or cancel late.
- Allergies, intolerances and dietary requirements you choose to tell us (health data).
- Requests for private events, gift cards or general enquiries.
Purposes and legal basis
- Managing your booking or request and sending you related communications (confirmation, reminder, changes): performance of a contract or pre-contractual steps (art. 6.1.b GDPR).
- Adapting the menu to your allergies or intolerances: your explicit consent when you provide them (art. 9.2.a GDPR). You can withdraw it at any time; we will then be unable to adapt the dishes.
- Remembering your preferences on future visits (customer record): our legitimate interest in offering a personalised service (art. 6.1.f GDPR). You can object at any time.
- Sending occasional news, only if you tick the box: consent (art. 6.1.a GDPR).
Retention
Booking data are kept for as long as necessary to provide the service and, afterwards, for the periods required by law. Customer records are deleted automatically after two years without visits. Marketing data are kept until you withdraw consent.
Recipients and processors
We do not sell or transfer your data. We use providers acting as data processors under contract: Netlify, Inc. (website hosting and storage), Resend (transactional email), Twilio (text messages) and, where enabled, Cloudflare, Inc. (anti-spam check). These providers may process data in the United States under the EU–US Data Privacy Framework or standard contractual clauses.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to bagatge@bagatgerestaurant.es. If you consider that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).