Privacy policy
Last updated: 20 October 2026
1. Data controller
- Owner: LA BUHA DE LA CEBADA, S.L.
- Tax ID (CIF): B87104154
- Registered office: Plaza de la Cebada, 10, 28005 Madrid (Spain)
- Email: info@tabernaselbuo.eu
- Phone: +34 913 661 160
- Trade name: La Buha y El Buo · Grupo El Buo
2. What data we process
This website has no forms, requires no registration and uses no analytics or advertising tools. We only process personal data in these cases:
- Bookings and enquiries made by phone, email or at the venue: name, phone, email and booking details (date, time, number of guests and, if you tell us, allergies or special needs).
- Technical browsing data logged by the server for security (IP address, date and time, page requested and browser).
- Authorised staff accessing the website management panel: username and log of access and changes.
3. Purpose and legal basis
- Managing your booking or answering your enquiry: pre-contractual measures or performance of a contract (art. 6.1.b GDPR). Allergy information is only used to prepare your booking and with your explicit consent (art. 9.2.a GDPR).
- Keeping the website and management panel secure: legitimate interest (art. 6.1.f GDPR).
- Complying with legal, tax and accounting obligations: legal obligation (art. 6.1.c GDPR).
4. Retention
Booking and enquiry data are kept for as long as needed to handle them and then blocked for the legal limitation periods. Server logs are kept for a limited period and deleted regularly.
5. Recipients
We do not share your data with third parties unless required by law. We use providers acting as data processors under GDPR-compliant contracts:
- IONOS, website and email hosting provider.
- Google (Google Fonts): when the website loads, your browser downloads fonts from Google servers, which receive your IP address. Google LLC is certified under the EU-US Data Privacy Framework, which covers this possible international transfer.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to info@tabernaselbuo.eu or by post to LA BUHA DE LA CEBADA, S.L., Plaza de la Cebada, 10, 28005 Madrid (Spain), stating the right you wish to exercise and proving your identity.
If you believe your rights have not been properly handled, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), password-protected access to the management panel and activity logging.
8. Minors
This website is not aimed at children under 14 and does not knowingly collect their data.
9. Changes to this policy
We may update this policy to reflect legal or website changes. The date of the last update is shown at the top.