Privacy policy
1. Data controller
The controller of the personal data collected on www.laurbanaburgerbar.com is:
| Item | Detail |
|---|---|
| Company name | INDOS GALICIA SLU |
| Tax ID (CIF) | B10557163 |
| Registered address | Avenida Infanta Elena, C.C. As Termas, local 107 |
| Telephone | 982 818 964 |
| Privacy email | direccion@laurbanaburgerbar.com |
| Data protection officer | direccion@laurbanaburgerbar.com |
This policy complies with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
2. What data we process, why, and on what legal basis
We only process the data you give us through the website, and only for the purpose for which we collect it.
| Processing | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, email and message | Reply to your enquiry | Consent of the data subject (Art. 6.1.a GDPR), given by sending the form |
| Web analytics | Browsing data (pages viewed, device, approximate location) | Understand how the website is used in order to improve it | Consent, from the cookie banner (Art. 6.1.a GDPR) |
| Instagram content | Browsing data that Meta receives when its videos load | Show Instagram posts and videos on the website | Consent, from the cookie banner (Art. 6.1.a GDPR) |
| Advertising (Google Ads and Meta pixel) | Browsing data, cookie identifiers and website events (pages viewed, user actions) | Measure the effectiveness of campaigns on Google, Facebook and Instagram and show personalised advertising | Consent, from the cookie banner (Art. 6.1.a GDPR) |
Table bookings are made in the CoverManager module shown on this website. CoverManager collects and processes the booking data and is the controller of that processing; its own privacy policy applies.
We do not make automated decisions or build profiles using your data.
3. How long we keep the data
| Processing | Period |
|---|---|
| Contact form | The time needed to answer the enquiry and, at most, 1 month |
| Table bookings | Managed by CoverManager, which is the controller of that data |
| Web analytics | 14 months (Google Analytics setting) |
| Advertising (Google Ads and Meta pixel) | Up to 90 days (lifetime of the Google Ads and Meta pixel cookies) and up to 13 months for the Google advertising cookie |
Where there is a commercial relationship involving invoicing, data is kept for the periods required by tax and commercial law (at least 5 years). Once those periods end, the data is blocked for as long as the law requires to deal with possible liabilities and then deleted.
4. Who we share data with
We do not sell or hand over data to third parties, except where required by law. To make the website work, some providers process data on our behalf (data processors), under contract and only following our instructions:
| Provider | Service | Location and safeguard |
|---|---|---|
| Netlify, Inc. | Website hosting and receipt of contact form messages | USA — EU-US Data Privacy Framework |
| Make (Celonis s.r.o.) | Automation that receives the form message and sends it to the log | EU |
| BO Marketing Solutions S.L. (Estudio BO) | Website maintenance and management of the contact form message log | Spain (EU) |
| Notion Labs, Inc. | Log of messages received from the contact form (sub-processor of Estudio BO) | USA — EU-US Data Privacy Framework |
| Google Ireland Ltd. | Web analytics (Google Analytics) and advertising (Google Ads), only with consent | EU, with possible transfers to the USA — EU-US Data Privacy Framework |
| Meta Platforms Ireland Ltd. | Instagram content and advertising pixel, only with consent | EU, with possible transfers to the USA — EU-US Data Privacy Framework |
With the Meta pixel, La Urbana and Meta Platforms Ireland Ltd. are joint controllers for the collection of browsing data and its transmission to Meta (Art. 26 GDPR). In that case Meta does not act as a data processor: it uses the data for its own purposes, according to its privacy policy (https://www.facebook.com/privacy/policy).
For Google Ads advertising, Google uses browsing data to measure campaigns and show personalised advertising, according to its privacy policy (https://policies.google.com/privacy). It is only activated if you accept the “Advertising” category in the cookie banner.
Home delivery orders are placed on the Waitry platform, outside this website. Its own privacy policy applies there.
5. Your rights
You can exercise these rights over your data at any time:
- Access: find out whether we process your data and which data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete the data when it is no longer needed.
- Objection: object to a specific processing activity.
- Restriction: ask us to keep the data without using it, in the cases set out by law.
- Portability: receive your data in a commonly used format or have us send it to another entity.
- Withdraw any consent you have given, without affecting earlier processing.
To exercise them, write to direccion@laurbanaburgerbar.com or send a letter to the controller’s address, stating the right you are exercising and attaching a document proving your identity. We will reply within one month.
If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
6. Security, minors and changes to this policy
Security. We apply technical and organisational measures to protect data against loss, unauthorised access or alteration. The website always runs over an encrypted connection (HTTPS).
Minors. The website’s forms are not aimed at children under 14. If you are under 14, you need your parents’ or guardians’ consent to send us data (Art. 7 LOPDGDD).
Accuracy of data. Whoever sends a form guarantees that the data is true and, if it belongs to someone else, that they have that person’s permission.
Changes. We may update this policy when the regulations or our processing change. The current version is always the one published on this page.
Last updated: 6 November 2026.