Privacy policy

1. Data controller

• Controller: Walid Pérez Toro
• Tax ID (NIF): 51778826F
• Address: Calle La Hoya 14, 38400 Puerto de la Cruz, Santa Cruz de Tenerife
• Privacy contact: ibericosgastrobar@gmail.com

2. What data is processed

This site has no user accounts and no forms of its own for collecting data. Technical data is nevertheless processed to display and protect the website. Specifically:

• Privacy choice. When you accept, reject or save your preferences, that choice stays in your browser’s local storage. The website does not send this preference to a server.
• Preferred language. If you select a language using the language selector, that preference also stays in your browser.
• Bookings through TheFork. Details you enter into the booking engine are sent to TheFork, which handles the process on its platform under its own policy.
• Email enquiries. If you write to the contact address, we receive your email address and any details you include in your message.
• Technical connection data. Cloudflare receives request data, such as your IP address, the address of the page requested and your browser type, to deliver and protect the site. It may process this data and keep technical logs to operate the service and prevent abuse. External services you choose to load or visit may also receive connection data.

3. Purposes

• Displaying and maintaining the website and its technical functions, and protecting it against abuse and operational incidents.
• Remembering your privacy and language choices.
• Letting you reach external booking, map, review and social media services if you choose to.
• Answering enquiries sent to the contact address.

4. Legal basis

The processing of technical data needed to serve and protect the site is based on our legitimate interest in maintaining its availability and security (Article 6(1)(f) GDPR).

Storage strictly necessary for the website functions you request does not require consent (Article 22.2 LSSI-CE). Loading optional content from TheFork and Google Maps is based on your consent, given through the banner, the settings panel or each block’s own button.

Handling enquiries is based on our legitimate interest in replying and, where relevant, on steps taken before entering into a contract.

5. Retention

• Browser preferences. Your privacy and language preferences stay in your browser until you clear the site’s storage or change them.
• Email enquiries. Emails we receive are kept for as long as needed to deal with the enquiry and then for the applicable limitation periods.
• Cloudflare technical logs. Retention depends on operational and security purposes and applicable obligations, in line with the criteria in its privacy policy. Its Data Processing Addendum also applies to data it processes on our behalf.
• External platforms. Their respective policies describe how long they retain data received when you load their content or use their services.

6. Recipients and third parties

Hosting and security. We use Cloudflare, Inc. to host, deliver and protect the site. This service involves processing technical connection data from the moment you request a page, even if you do not enable the map or booking engine. For data it processes on our behalf, Cloudflare acts as a data processor under its Data Processing Addendum. Its privacy policy also explains processing for which it acts as a controller in its own right.

Optional content and links. TheFork and Google Maps receive technical data when you allow their embedded content. Opening links to TheFork, Google Maps, Tripadvisor, Instagram or Facebook establishes a connection with the relevant platform. Any details you provide there, for example to complete a booking, are subject to its policies. Rejecting these optional blocks does not prevent the technical processing involved in hosting.

International transfers. Cloudflare may process data outside the European Economic Area. Its addendum incorporates the European Commission’s standard contractual clauses where a transfer is subject to those safeguards. External platforms explain their transfers and safeguards in their own policies.

The site’s fonts are hosted on this domain, so no connection is made to Google Fonts.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time without retroactive effect. Write to ibericosgastrobar@gmail.com, proving your identity where necessary. If you believe your rights have not been respected, you can complain to the Spanish Data Protection Agency (aepd.es).

8. Security

The site is served entirely over HTTPS, with technical and organisational measures proportionate to the risk to protect the data described in this policy. No system is completely invulnerable.

9. Children

This site is not aimed at collecting data from children and does not ask them for information.

10. Updates

Last updated: 18 October 2026. This policy will be reviewed if new processing, contact channels or external tools are added.