Privacy policy

Information about the processing of personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 on Data Protection and the guarantee of digital rights (LOPDGDD).

This is a courtesy translation. In case of any discrepancy, the Spanish version prevails.

1. Data controller

Controller: {{NOMBRE_TITULAR}} (tax number {{NIF}}), owner of La Rotonda – Café Bistro & Cocktails
Address: C. Calvario, 39, 29567 Alozaina (Málaga), Spain
Phone: +34 697 24 05 38
E-mail: reservas@larotondaalozaina.com

The controller's identifying details are still to be confirmed and must be completed before the site goes live.

2. Purposes of processing

Handling booking requests sent through the form on this website.
Answering enquiries received through the form, WhatsApp, phone or e-mail.
Confirming, changing or cancelling a booking and letting you know about anything affecting it.

We do not build profiles, send marketing, or pass your data on for commercial purposes.

3. Legal basis

Article 6(1)(b) GDPR — performance of a contract or pre-contractual steps taken at your request: handling the booking you asked for.
Article 6(1)(f) GDPR — legitimate interest in answering enquiries and organising service in the restaurant.

4. Data processed

Date, time and number of guests, your name, your phone number and, if you give them, your e-mail address and the notes you write (for example a terrace preference, allergies or the name of an event). We ask for nothing beyond what the booking needs; please do not put sensitive information in the notes field.

5. Retention

Bookings: until the date of the booking plus one year.
Enquiries: one year from the last message.
After that the data is deleted, unless a legal obligation requires us to keep it longer (for example tax or accounting duties).

6. Recipients and processors

Web hosting provider: Cloudflare, Inc.
E-mail delivery provider: Lettermint, used to deliver your request to the restaurant.
WhatsApp (Meta Platforms Ireland Ltd.): only if you choose that channel to contact us; WhatsApp's own terms and privacy policy then apply as well.

There are no international data transfers outside the European Economic Area beyond those these providers may carry out in delivering their services, covered by the safeguards set out in Chapter V GDPR (standard contractual clauses and supplementary measures).

7. Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw consent where processing is based on it, by writing to reservas@larotondaalozaina.com or to the postal address above, proving your identity.

If you feel your request was not handled properly, you may lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.

8. Automated decisions

No automated decision-making or profiling takes place with your data.

9. Security

We apply reasonable technical and organisational measures to protect data against loss, unauthorised access or disclosure. The site is served entirely over HTTPS.

Last updated: 7 September 2026.

← Home