← Back to the homepage

Mi Locura

Privacy policy

Mi Locura undertakes to adopt the technical and organisational measures required, at a level of security appropriate to the risk of the data collected, in accordance with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018, de 5 de diciembre (the Spanish Data Protection Act, LOPDGDD). In this policy we explain, plainly, what data we process when you book a table or write to us, what we use it for, how long we keep it and what you can ask of us.

1. Applicable legislation

This privacy policy is adapted to the Spanish and European legislation in force on the protection of personal data on the internet. Specifically, it complies with the following rules:

2. Data controller

There is no obligation to appoint a data protection officer, so none has been appointed. For any matter relating to your data you can contact the controller directly using the details above.

3. What data we process and where it comes from

We only process the data you give us voluntarily through this website. There is no user registration, there are no accounts, no payments are taken on this website and we do not buy or rent databases from third parties.

3.1. Booking form

If you request a table using the booking form on this website, we process the data you enter in it: first name and surname, contact telephone number, email address, preferred date and time, number of diners and any notes you wish to add. The fields marked as required are those essential for managing the booking; if you do not provide them, we will not be able to process it.

If in the notes field you voluntarily tell us about food allergies or intolerances, you are providing data concerning health. We will use it solely in order to look after you safely during your visit, on the basis of your explicit consent, and we will delete it once the service has been provided. If you would rather not put it in writing, just tell us when you arrive at the restaurant.

3.2. Bookings through the digital menu or WhatsApp

Some buttons on this website take you to our digital menu (app.cartadigitalfacil.es), where you can also request a booking, or open a WhatsApp conversation with the establishment. In those cases the data is collected outside this website:

3.3. Contact form

If you write to us through the contact form on this website, we process your name, your email address or telephone number and the content of the message, for the sole purpose of replying to you. The same applies if you write directly to our email address or call us on the telephone: we process only the data you give us in order to deal with your enquiry.

3.4. Technical browsing data

The hosting provider for this website automatically logs technical data about the requests it receives (IP address, browser type, date and time, page requested) in order to keep the service running and protect it against abuse and attacks. These logs are not used to build profiles or for advertising. This website does not use analytics or tracking tools.

4. Purposes, legal basis and retention

ProcessingPurposeLegal basisRetention
Bookings Managing, confirming, amending or cancelling your table booking and organising the dining room service. Steps taken at the request of the data subject prior to entering into a contract (Art. 6.1.b GDPR). For any health data you provide voluntarily, your explicit consent (Art. 9.2.a GDPR). Up to 12 months from the date of the booking, so that its handling can be evidenced and any complaints dealt with. Health data is deleted after the service.
Enquiries and contact Dealing with and replying to your enquiry, suggestion or complaint. Your consent when you send us the message (Art. 6.1.a GDPR). Up to 12 months from the last communication, unless the enquiry gives rise to another relationship.
Technical logs Security, maintenance and availability of the website. Legitimate interest in guaranteeing the security of the website (Art. 6.1.f GDPR). The log retention period of the hosting provider, in any event limited and proportionate.
Legal obligations Complying with tax, accounting or other obligations where they apply. Compliance with a legal obligation (Art. 6.1.c GDPR). The periods laid down in the applicable legislation (as a general rule, up to 4 years for tax matters and up to 6 years for commercial matters).

Once the periods indicated have elapsed, the data is deleted or blocked, remaining available solely to judges, courts, the public prosecutor or the competent public authorities for the limitation period of any liabilities that may arise.

We do not send marketing communications or newsletters using the data collected on this website, nor are automated decisions taken or profiles built with it.

5. Recipients of the data

We do not disclose your data to third parties, except where required by law. The following providers do access it, on behalf of the controller and solely in order to provide the service, acting as data processors under a contract signed in accordance with Article 28 of the GDPR:

Some of these providers may be established outside the European Economic Area or use servers in third countries. In that case, international transfers are covered by an adequacy decision of the European Commission or by the standard contractual clauses approved by it, together with any additional safeguards that may apply.

6. Principles applicable to the processing

The processing of your data is governed by the principles set out in Article 5 of the GDPR: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; and integrity and confidentiality. We only ask for the data that is strictly necessary and we do not use it for anything other than what is explained here.

7. Security measures

The website is served over an encrypted connection (HTTPS). Access to booking data is limited to the establishment's staff and the technology provider, by means of personal credentials, and measures are in place to protect against unauthorised access to, loss of or alteration of the information. Should a security breach occur that poses a high risk to your rights, we will inform you and notify the supervisory authority within the periods laid down by law.

8. Accuracy of the data and third-party data

The user warrants that the data provided is truthful, accurate and up to date, and undertakes to notify us of any change. If you provide another person's data (for example, when booking in someone else's name), you must have informed them beforehand of the content of this policy and have their authorisation.

9. Minors

The forms on this website are not aimed at children under 14. If we find that we have received data from a child under that age without the consent of the holder of parental responsibility or guardianship, we will delete it.

10. Your rights

As the data subject, you have the right to:

You can exercise these rights free of charge by written communication addressed to the controller, quoting the reference «RGPD - https://mi-locura.vercel.app/», either by post to Av. Descubrimientos, 14, 41927 Mairena del Aljarafe, Sevilla, or by email to ismaelmorenolop@gmail.com, including:

We will reply to your request within a maximum of one month from receipt, which may be extended by a further two months if the complexity or the number of requests so requires, in which case we will let you know.

If you consider that we have not dealt with your rights properly, you can lodge a complaint with the Agencia Española de Protección de Datos (the Spanish Data Protection Agency), C/ Jorge Juan 6, 28001 Madrid (www.aepd.es), which is the competent supervisory authority.

11. Cookies

This website does not use analytics, advertising or tracking cookies. You can see the details of the technical storage that is used in our Cookie Policy.

12. Acceptance of and changes to this policy

Using this website means that you have read and accept the data protection conditions set out here. The controller reserves the right to amend this policy in order to adapt it to legislative or case-law developments or to changes in how the site works. Changes are not notified individually, so we recommend that you check this page from time to time; the date of the last update always appears at the bottom.

For more information, please also see our Legal Notice and the Accessibility Statement.