Privacy notice

Who is responsible for your data

Magdalena Córcoles, trading as Spain at U Table, at Van Duivenvoordelaan 85, 2241 SP Wassenaar, the Netherlands. Dutch Chamber of Commerce number (KVK): 68227167. For anything to do with your data, write to mada72@gmail.com.

What we collect, and when

Your details, only when you fill in the form on the home page. As you browse, the only thing recorded is our own anonymous counter: which page was seen, in which language and on which day, adding one to the total. No IP address, no cookies and nothing that identifies you: we know how many visits there were, not who made them.

• Your name.
• Your email, your phone number, or both. We need at least one, otherwise we cannot reply.
• The date of the event, the place and how many of you there are.
• What the occasion is.
• Whatever you choose to tell us in the free-text field.

Your IP address

It is used for a moment, in the server memory, to stop repeated automated submissions. It is not written to any database, it is not linked to your request, and it is gone within an hour. We use no CAPTCHA, precisely so that no third-party code is loaded into the page.

What we use it for

One thing only: preparing the quote you asked for and replying to you. We do not use it for marketing, we do not build profiles, and no automated decision is made about you.

On what legal basis

Article 6(1)(b) of the General Data Protection Regulation: steps taken at your request before entering into a contract. In other words, we handle your data because you asked us for a quote.

That is why there is no consent box to tick. Putting one there would suggest you could say no and still get the quote, which would not be true.

For how long

30 days from the moment you send the form. An automated job deletes expired requests every night, together with the notice they generated.

If we end up talking by email or WhatsApp in the meantime, that conversation lives in those services, under their own terms.

Who else sees it

• Google. When a request comes in, a notice goes to a Gmail account so that we know there is something new. That notice carries only the date, the time if you gave one, the place and the number of people: not your name, not your email, not your phone, not what you wrote. That stays on the server and is only seen by whoever signs in to the admin panel with one of the two authorised Google accounts.
• Hostinger, the company hosting the server where the site and the database live.
• Nobody else. The visit counter runs on our own server, with no third-party measuring service, and the site carries no tracking cookies and no social buttons. Opening the page does not make your browser talk to any third party.

What you can ask us for

You can ask to see your data, to have it corrected or deleted, to have its use restricted, to object to our using it, or to be given a copy in a file you can take elsewhere. Write to mada72@gmail.com and we will reply. Bear in mind that once the period above has passed there is nothing left to show you.

If you are not happy

You can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority, at autoriteitpersoonsgegevens.nl.