Privacy policy

1. Data controller

The controller of your data is Guillermo Palop Navarro, tax ID 51140428c, registered at paseo serra de espada, 5. You can write to us at info@paellaxcasa.com or call us on +34 614 647 086.

2. What data we collect, and why

We only process the data you give us, or data needed to deliver the service:

• Booking form and event requests. Date, number of guests, event address, cooking setup, allergies or dietary needs, and your contact details (name, email and, if you give it, phone). Legal basis: performance of the contract and, at the enquiry stage, your consent. This data is sent to our server and stored on the site so that we can reply to you and organise the service.
• Customer account. Email, public name and an encrypted password. We use double opt-in confirmation: we send you a code by email and the account is not activated until you enter it. Legal basis: performance of the contract.
• Purchases and payments. Billing and shipping details, amount, products booked and order history. Legal basis: performance of the contract and legal obligations (tax and accounting).
• Newsletter. Your email, if you subscribe. Legal basis: your consent, which you can withdraw at any time through the unsubscribe link included in every message.
• Technical data. IP address, browser type and pages visited, for security and for the operation of the site. Legal basis: legitimate interest.

3. Shop and payments — WooCommerce

The shop and cart run on WooCommerce, integrated into this same site. WooCommerce stores your order, billing and shipping details and purchase history in our database, and sets the technical cookies needed to keep the cart and session alive while you browse.

Payments are processed through PayPal (which includes Bizum and card payment) and, where applicable, by SEPA transfer. We never store your full card details: you enter them directly in the payment provider’s environment, which acts as an independent controller and may involve an international data transfer covered by the European Commission’s standard contractual clauses. See PayPal’s privacy policy for further detail.

For confirmed bookings a 50% deposit is paid through these same methods; the remaining 50% is paid on the day of the event.

4. Bookings and calendar — Amelia

Calendar availability and appointment management rely on the Amelia booking plugin, installed on this same site. Amelia stores the requested date and time, the chosen service and the contact details attached to the booking in our database, and uses them to check availability and avoid overlaps. The data does not leave our server for this purpose: it is not passed to the plugin’s manufacturer.

5. Google services

This site may use the following Google Ireland Limited services:

• Google Fonts. Typefaces are served locally hosted from our own server. As a result no connection is made to Google’s servers and your IP address is not communicated when the site loads.
• Google Maps, if we ever embed a map to show a location. In that case Google will receive your IP address and may set its own cookies. The map will only load with your prior consent.
• Google Reviews, when we display public customer ratings. Only already-public information is shown; we do not send any of your data to Google for you to view them.

When these services are active, data may be processed on servers located outside the European Economic Area, covered by the European Commission’s standard contractual clauses. You can withdraw your consent at any time.

6. Third-party icons and images

The icons and illustrations on the site (the Tabler Icons, IcoFont and unDraw collections) are served from our own server, under their respective open licences. No resource is loaded from an external CDN, so their use involves no data transfer to third parties. The Permanent Marker typeface is used under the Apache 2.0 licence, also hosted locally.

7. Retention

We keep booking and billing data for the periods required by tax and accounting rules (generally six years). Account data is kept for as long as you keep the account active. Newsletter data is kept until you unsubscribe.

8. Recipients

We do not sell or transfer your data. The only parties with access are our hosting provider, the payment provider and, where applicable, our tax advisers — always as processors and under a signed contract.

9. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@paellaxcasa.com, stating which right you wish to exercise. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

10. Cookies

We use technical cookies necessary for the cart, the session and security, which do not require consent. Any analytics or third-party cookie (an embedded map, for example) will only be activated if you expressly authorise it. You can delete cookies from your browser settings at any time.