Privacy policy

1. Data controller

[PENDING: legal entity name] (Tax ID [PENDING: tax ID]), with registered address at [PENDING: registered address], operator of Taberna La Bola (C/ de la Bola 5, 28013 Madrid). Contact: labola@labola.es. Data protection contact: [PENDING: data protection contact, if applicable].

2. Data we collect

• Contact data: name, phone and email.
• Order data: dishes, amount, pickup day and time, and notes.
• Payment data: handled directly by Stripe; we do not store your full card details.

3. Purpose

To manage and prepare your order, process payment, contact you if needed, and comply with legal and tax obligations.

4. Legal basis

The legal basis is the performance of the contract (your order) and compliance with legal obligations.

5. Retention and recipients

We keep the data for as long as needed to manage the order and meet legal obligations. We share data with the payment provider (Stripe) and, where applicable, our customer management system. [PENDING: list data processors].

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to labola@labola.es. You may also complain to the Spanish Data Protection Agency (www.aepd.es).