Legal information
Privacy policy
El Mesón de los Arcos processes the personal data that users may provide through the contact channels available on this website in order to manage information requests, bookings or communications related to the restaurant.
1. Data controller
Controller: Eduardo Aldirez Alvarez
NIF: 34728037S
Address: Edificio S’Abanell, Carrer d’Enric Morera, 2, 17300 Blanes, Girona
Trade name: El Mesón de los Arcos
Email: meson.los.arcos@hotmail.com
Phone: 972 358 429
2. Data that may be collected
The data the user voluntarily provides when contacting us by phone, WhatsApp or email, such as name, phone number, email and any information shared in the enquiry or booking.
3. Purpose of processing
To manage bookings, respond to enquiries and maintain the commercial relationship with the customer. No unsolicited commercial communications are sent.
4. Legal basis
The legal basis for processing is the user's consent when contacting the restaurant and, where applicable, the performance of the requested booking.
5. Data retention
Data will be kept for as long as a relationship with the user exists (enquiry or booking) and, thereafter, for the legal limitation periods for tax and commercial liabilities, up to 6 years under the Spanish Commercial Code.
6. Recipients
Data will not be transferred to third parties except by legal obligation. If messaging tools such as WhatsApp are used, the data shared through that channel will be subject to the provider's own terms.
7. User rights
The user may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability by sending a request to the email meson.los.arcos@hotmail.com. In addition, if you consider that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
8. International transfers
Bookings made via WhatsApp involve sending data to Meta Platforms Ireland / WhatsApp Ireland, whose parent company is based in the United States, a transfer covered by the EU-US adequacy framework (Data Privacy Framework). This site also uses Google Analytics (Google Ireland / Google LLC, USA), likewise covered by the same adequacy framework, which is only activated if the user accepts analytics cookies.
9. Security
Reasonable technical and organisational measures are applied to protect personal data against unauthorised access, loss or alteration.
10. Contact
For any question about this policy you can write to meson.los.arcos@hotmail.com.