At MIGAS MADRID SL we are committed to protecting your privacy and processing your personal data in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data Controller
- Company Name: MIGAS MADRID SL
- Tax ID (CIF): B86847431
- Registered Address: Calle Fuente del Berro 20, 1º C, 28009 Madrid, Spain
- Email: [email protected]
- Phone: +34 910 22 14 33
2. Data We Collect
Booking & Inquiries
When you book a table or reach out to us, we may collect: your full name, email address, phone number, date/time of the booking, and party size.
Browsing Data
If you consent to analytical cookies, we gather anonymized browsing statistics via Google Analytics (pages visited, device type, session duration). IP addresses are anonymized.
We do not process special categories of sensitive personal data.
3. Purposes and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Table reservations and service delivery | Performance of a contract / Pre-contractual steps (Art. 6.1.b GDPR) |
| Inquiries and customer service | Legitimate interest (Art. 6.1.f GDPR) |
| Web analytics (Google Analytics) | Consent (Art. 6.1.a GDPR) |
| Newsletters or updates | Consent (Art. 6.1.a GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c GDPR) |
4. Recipients and Data Transfers
We do not sell or transfer your personal data to third parties for independent commercial use. We rely on service processors adhering to European Standard Contractual Clauses:
- Google LLC (Google Analytics) — web analytics provider.
- Vercel Inc. — cloud hosting infrastructure.
For inquiries about cross-border safeguards, contact [email protected].
5. Retention Period
- Reservations and inquiries: Retained for the duration of the relationship and up to 3 years to cover potential liabilities.
- Analytics: In accordance with Google Analytics retention settings (up to 14 months).
- Consented communications: Until consent is withdrawn.
6. Your Rights
You have the right to access, rectify, erase ("right to be forgotten"), restrict processing, object to processing, or request data portability.
To exercise your rights, email us at [email protected] with proof of identification. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).
7. Security
We implement technical and organizational measures to safeguard your personal data against unauthorized access, loss, or alteration.