Privacy policy

Last updated: July 2026

At OSTERIADAGIANNI, S.L. we process the information you provide in order to deliver and improve our services, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

1. Data controller

2. What data do we process, and for what purpose?

• Table bookings: name, telephone, email, number of guests, date and time. Purpose: to manage and confirm your booking. Bookings are made through the CoverManager platform.
• Enquiries: the data you provide by telephone, through the website chat or on social networks, in order to deal with your request.
• Browsing: technical data on your use of the website and cookies, as set out in the Cookie policy.

We do not carry out profiling or automated decision-making with your data.

3. Legal basis

• Performance of pre-contractual measures (art. 6.1.b GDPR): to manage your booking.
• Consent (art. 6.1.a GDPR): to deal with enquiries and for non-essential cookies.
• Legitimate interest (art. 6.1.f GDPR): for the operation and security of the website.

4. Who do we share your data with?

We do not disclose your data to third parties except where legally required. We use suppliers who act as data processors and process the data solely in accordance with our instructions:

• CoverManager — booking management.
• Google (Google Maps) — website map. This may involve international transfers covered by the appropriate safeguards provided for in the GDPR.
• Hostinger — website hosting.

5. How long do we keep your data?

We keep the data for as long as necessary for the purpose for which it was collected and, thereafter, for the periods required by law. Booking data is kept for as long as necessary to manage the booking and to address any potential liabilities.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by contacting the controller at the address or email indicated above, providing proof of your identity.

If you consider that the processing does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.