Privacy policy

Data controller

• Company name: Can Exemple SL
• NRT (tax ID): L-000000-X
• Address: Avinguda Meritxell 1, AD500 Andorra la Vella
• Email for privacy matters: privacitat@can-exemple.test

What data we process

When you make a booking: your name, email address, phone number (optional), number of guests, date and time, any comments you add and the language of the booking. If you mention allergies or intolerances in the comments, they will only be used to serve you properly.

When you visit the website: our own visit counter, which does not use cookies or store your IP address. It records the date, language, device type and where the visit came from (for example, a search engine), with an anonymous fingerprint that changes every day and cannot be used to identify you.

What we use it for

• To manage your booking and inform you of its confirmation, changes or cancellation.
• To send you a reminder before your booking.
• To notify the establishment of your booking.
• To produce anonymous statistics on visits to the website.

Legal basis

Booking management is based on your request and on the consent you give by ticking the box accepting this policy.

Visit statistics are based on the owner's legitimate interest in understanding how the website is used, without identifying anyone.

How long we keep it

Booking data are kept for as long as necessary to manage the booking and for a maximum of 12 months. After that period, they are anonymised: your name, email, phone number and comments are deleted, and only data that cannot identify you (date, time and number of guests) are kept for statistical purposes.

Detailed visit records are deleted after 90 days.

Who has access to it

We do not share your data with third parties, except where required by law. To provide the service, the following have access to it as data processors: AndorRest, which provides the technology service for the website and bookings, and its providers:

• Supabase: database, with servers in the European Union.
• Vercel: website hosting.
• Resend: sending of emails.
• Cloudflare: protection of the booking form against spam.

International transfers

Some of these providers may process data outside Andorra. In that case, processing is carried out with the appropriate safeguards provided for in data protection legislation.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time.

To do so, write to privacitat@can-exemple.test stating the right you wish to exercise. If we need to verify your identity, we will ask you for the necessary documentation.

You may also lodge a complaint with the Andorran Data Protection Agency (APDA).

Cookies

This website does not use tracking, analytics or advertising cookies. That is why we do not ask for your consent with a banner.

The booking form includes a Cloudflare security check (Turnstile) to prevent spam, which may process technical browser data for this sole purpose.

Changes to this policy

The owner may update this policy. The version in force is always the one published on this page.