Privacy Policy

• —Controller: HEREFORD, S.L.
• —Tax ID (CIF): B76258466
• —Address: Av. de las Islas Canarias, 11, Local 6, 35508, Costa Teguise, Lanzarote (Las Palmas), España
• —Contact email: info@labohemialanzarote.es
• —Phone: +34 928 59 17 72

This Privacy Policy has been drafted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR") and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights ("LOPDGDD").

We process your personal data for the following purposes:

• —To manage table reservation requests made through the booking widget or the WhatsApp channel.
• —To handle enquiries, requests for information and communications received through the Website's contact channels (phone, email or WhatsApp).
• —To analyse the use and performance of the Website for statistical purposes, using web analytics tools.
• —To ensure the security, proper operation and protection of the Website against unauthorised access or attacks.
• —To comply with applicable legal obligations.

The legal basis for processing your data is, depending on the case: performance of the pre-contractual or contractual relationship arising from your reservation request; your consent, given when accepting non-essential cookies or when providing your details through the contact form or WhatsApp; and the controller's legitimate interest in ensuring the security of the Website.

Depending on the service requested, we may process the following categories of data: identification data (first and last name), contact details (phone and/or email), reservation details (date, time, number of guests, special requests) and, where applicable, the content of communications exchanged via WhatsApp. We do not process special categories of data, nor do we take automated decisions producing legal effects on the data subject.

To provide its services, HEREFORD, S.L. relies on the following providers, which act as data processors or independent controllers, as applicable:

• —Sirvo — an online booking management system and AI-based WhatsApp reservation assistant. Sirvo processes the data provided during the booking process (name, phone, email, reservation details) in accordance with its own privacy policy, available at sirvo.es, to which we refer the User for full details of that processing.
• —Google Analytics (Google Ireland Limited) — a web analytics tool used to understand Website usage through cookies. This may involve a transfer of data to Google LLC (USA), covered by the safeguards set out in the GDPR.
• —Cloudflare, Inc. — an infrastructure, content delivery network (CDN) and security provider, which processes IP addresses and technical connection data to ensure the security and availability of the Website. This may involve a transfer of data to the USA, covered by the safeguards set out in the GDPR.
• —No data is shared with third parties other than those listed above, except where required by law.

Some of the providers listed above may be located, or may process data, outside the European Economic Area (EEA), in particular in the United States. In such cases, these transfers are carried out under the safeguards provided for in the GDPR, such as the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission.

Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected (for example, managing your reservation) and, thereafter, for the statutory limitation periods that apply. Browsing data processed through cookies will be kept for the period indicated in our Cookie Policy.

Any individual has the right to obtain confirmation as to whether HEREFORD, S.L. is processing personal data concerning them. Data subjects have the right to access their personal data, to request rectification of inaccurate data, and, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request that we restrict the processing of their data, in which case we will only keep it for the exercise or defence of claims. They may also object to processing and request data portability.

These rights may be exercised by sending a request, together with a copy of an identity document, to info@labohemialanzarote.es or to the postal address indicated in Section 1. Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) if they consider that the processing of their personal data does not comply with applicable law.

HEREFORD, S.L. has adopted the technical and organisational measures necessary to ensure the security and integrity of the personal data processed and to prevent its alteration, loss, unauthorised processing or access.

Access to and use of the Website, including making reservations, is restricted to adults. HEREFORD, S.L. does not knowingly collect data from minors through the Website.

HEREFORD, S.L. may amend this Privacy Policy to adapt it to legislative or case-law developments, as well as to industry practices. Users are advised to periodically review this page.