Privacy and Cookies Policy
Last update: 4 July 2025
1. Data Controller
INFORMAL COSTA BRAVA SL (hereinafter, “the Owner”), with Tax ID B72497522 and registered address at Calle Viladomat, 36, 2º 1ª, 08015 Barcelona (Spain), is responsible for the processing of personal data collected through the website www.informal-baqueira.com and other electronic means linked to the activity of L’Informal Baqueira (restaurant and pizzeria with takeaway service).
Contact for data protection matters: hola@informal-baqueira.com
2. Personal data processed
Depending on the services used and your relationship with the Owner, we may process the following categories of data:
- Identification data: name and surname.
- Contact data: telephone number, email address.
- Transaction/service data: table reservations, takeaway orders, order preferences, payment method (if applicable) and billing data.
- Preferences and remarks: special requests (e.g., outdoor table, timings).
- Optional sensitive data (only if you voluntarily provide it): allergies or dietary preferences necessary to prepare orders or ensure food safety.
- Browsing and usage data: IP address, access logs and analytical metrics (see Cookies Policy).
The Owner does not proactively request special categories of data. Information about allergies or dietary preferences will only be processed if you voluntarily provide it in order to fulfil your request.
3. Purposes and legal bases
- Management of reservations and orders (incl. takeaway): to confirm, prepare and deliver your service.
Legal basis: performance of a contract or pre-contractual measures (Art. 6.1.b GDPR). - Billing and legal compliance: tax, accounting obligations and response to legal requirements.
Legal basis: legal obligation (Art. 6.1.c GDPR). - Customer service and operational communications: responses to queries, incidents or changes to your reservation/order.
Legal basis: legitimate interest and/or pre-contractual measures (Art. 6.1.f / 6.1.b GDPR). - Commercial communications: offers, news and newsletters when requested, or, where applicable, regarding similar products/services for existing customers.
Legal basis: consent (Art. 6.1.a GDPR) or legitimate interest under Art. 21.2 LSSI (if you are a customer). You may object at any time. - Security and fraud prevention: access control and service protection.
Legal basis: legitimate interest (Art. 6.1.f GDPR). - Statistical analysis of the Website: aggregated and anonymised measurement to improve content and performance.
Legal basis: legitimate interest (Art. 6.1.f GDPR), and/or consent where required under cookie regulations. - Processing of allergies or dietary preferences (optional): to ensure your safety and adapt food preparation.
Legal basis: explicit consent (Art. 9.2.a GDPR) when providing such information voluntarily; you may withdraw it at any time.
4. Recipients
As a general rule, data will not be disclosed to third parties except under legal obligation or when necessary for service provision, in which case appropriate data processing agreements will be formalised (e.g., payment gateway, booking/order software, web hosting and internal analytics).
No international data transfers outside the European Economic Area are envisaged.
5. Retention periods
- Accounting and tax documentation: 6 years (Art. 30 Commercial Code) and any additional terms required by tax regulations.
- Reservation and order data: up to 5 years from the last interaction/service, unless longer terms are legally required.
- Data for commercial communications: until consent is withdrawn or unsubscribed.
- Allergy/preferences data (optional): only as long as necessary to fulfil your specific reservation/order and, if applicable, during legal liability periods.
6. Rights of data subjects
You may exercise your rights of access, rectification, erasure, restriction, portability and objection by sending a communication to hola@informal-baqueira.com or in writing to the Owner’s address, including a copy of an identity document.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe that the processing does not comply with current regulations.
7. Security measures
The Owner implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Art. 32 GDPR, including access controls, encryption where applicable and data minimisation policies.
8. Automated decisions
No automated decisions are made that produce legal effects or similarly significantly affect you.
9. Updates
This Policy may be amended to adapt to regulatory or service changes. Significant changes will be communicated through appropriate channels (website notice, email where applicable).
Cookies Policy
Last update: 4 July 2025
1. What are cookies?
Cookies are small text files stored in your browser when you visit certain web pages. They allow the site to function properly, remember your preferences and collect anonymous usage statistics.
2. Types of cookies we use
This Website uses its own technical and analytical cookies for essential and aggregated measurement purposes:
- Technical/functional (own): necessary for basic operation, navigation, management of reservations/orders and security.
- Analytical (own): aggregated and anonymised measurement of site usage (e.g., Matomo on own server), without profiling or disclosure to third parties.
When analytical cookies are configured so that they do not identify the user and are hosted on our own server without transfer to third parties, they may be considered exempt from consent under applicable guidelines. Otherwise, we will request your consent via the cookie banner.
3. Own analytical cookies (Matomo example)
If Matomo is used on a private server, the cookies may include:
| Cookie | Purpose | Duration |
|---|---|---|
| _pk_id# | Stores an anonymous visitor ID to recognise returning visits. | 13 months |
| _pk_ses# | Records the duration of the visit. | <<
