Book a Table
Book a Table
Last updated: 27 July 2026
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing your table booking | Name, telephone, email, number of guests, date and time, plus any comments or allergies you tell us about | Performance of pre-contractual steps at your request (art. 6.1.b GDPR) | While the booking is being handled and thereafter for the statutory limitation period |
| Answering enquiries by email, phone or WhatsApp | The data you provide in the communication | Legitimate interest in responding to those who contact us (art. 6.1.f GDPR) | One year from the last interaction, unless a different legal obligation applies |
| Measuring use of the website in order to improve it | Aggregated browsing data obtained through analytics cookies | Your consent (art. 6.1.a GDPR) | As stated in the Cookies Policy |
If you tell us about allergies or intolerances so we can prepare for your visit, you are providing health data (a special category). We process it solely so we can serve you safely, on the basis of your explicit consent (art. 9.2.a GDPR), and we delete it once the service has ended.
We do not sell or transfer your data. It is only accessed by the suppliers needed to provide the service, who act as data processors under a signed contract:
Data may also be disclosed to public authorities where there is a legal obligation to do so.
Our main suppliers are established in the European Economic Area. Should any processing involve a transfer outside the EEA, it would be carried out under an adequacy decision of the European Commission or under standard contractual clauses, with any additional safeguards required.
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given without this affecting the lawfulness of processing carried out beforehand.
To do so, write to us at cassenyor@gmail.com, stating the right you wish to exercise and enclosing a document proving your identity.
If you believe we have not dealt with your request properly, you may complain to the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan, 6, 28001 Madrid.
We apply appropriate technical and organisational measures to protect your data against destruction, loss, alteration or unauthorised access, including encryption of communications by SSL certificate and access control to our systems.
We may update this policy to reflect legislative developments or changes to our services. The version in force will always be published on this page, together with its update date.
