Privacy Policy

Introduction

VortexMeadow S.L. ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our restaurant, use our website vortexmeadow.world, or engage with our services.

Data Controller Information

The data controller for your personal information is VortexMeadow S.L., a company registered in Spain with registration number B-91238574. Our registered address is Calle San Juan 5, 07605 Palma de Mallorca, Balearic Islands, Spain.

Data We Collect

We collect various types of personal data to provide and improve our services. The data collection includes the following categories of information:

• Contact Information: Name, email address, phone number, and postal address
• Reservation Details: Dining preferences, special requirements, party size, and booking history
• Website Usage Data: IP address, browser type, device information, and pages visited
• Communication Records: Messages sent through our contact forms or email correspondence
• Marketing Preferences: Your consent for receiving promotional communications

How We Use Your Information

We use of your data is based on legitimate interests and your consent where required. How we use your information includes the following purposes:

• Processing and managing restaurant reservations and bookings
• Providing customer service and responding to your enquiries
• Sending booking confirmations and important service updates
• Improving our website functionality and user experience
• Sending marketing communications (with your explicit consent)
• Complying with legal obligations and regulatory requirements
• Preventing fraud and ensuring the security of our services

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract Performance: To fulfil our obligations when you make a reservation
• Legitimate Interests: To improve our services and operate our business effectively
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell your personal information. We may share your data with trusted third parties in the following circumstances:

• Service providers who assist with website hosting, payment processing, or reservation management
• Marketing platforms for sending communications (only with your consent)
• Legal authorities when required by law or to protect our rights
• Business partners for joint marketing activities (with your explicit consent)

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy. Reservation data is typically kept for 3 years for business records and customer service purposes. Marketing data is retained until you withdraw your consent. Website analytics data is anonymised after 26 months. We regularly review our data retention practices to ensure compliance with applicable laws.

Your Rights

Under GDPR, you have several rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Correct any inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Opt out of certain types of processing, including marketing
• Right to Withdraw Consent: Withdraw consent for processing based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses approved by the European Commission.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding your personal data, please reach out to us:

Complaints

If you believe we have not handled your personal data in accordance with this policy or applicable data protection laws, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos) or your local supervisory authority.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Governing Law

This Privacy Policy is governed by Spanish law and the General Data Protection Regulation (GDPR). Any disputes arising from this policy will be subject to the jurisdiction of the Spanish courts.