Legal information
Privacy policy
How we handle your personal data, under GDPR (EU) 2016/679 and Spain's LOPDGDD 3/2018. The binding text is the Spanish version.
1. Data controller
- ControllerPipilacha, S.L.
- Tax ID[NIF/CIF to be confirmed]
- AddressCalle del Azulejo, 2, 28028 Madrid (Spain)
- Emailinfo@pipilacha.es
- Phone+34 919 12 59 98
2. What data we process and why
We only process the data you give us. Depending on how you get in touch:
| When… | Data | Purpose |
|---|---|---|
| You book a table | What TheFork asks for (name, phone, email, party size, date) | Manage the booking and look after you at the restaurant |
| You write or call | Name, email or phone and the content of your message | Answer your query |
| You buy a gift card | Contact details and those of the recipient | Issue and send the card |
We do not build profiles or make automated decisions, and we do not process special categories of data.
3. Legal basis
Bookings and their management are based on performing a contract or pre-contractual steps (art. 6.1.b GDPR). Answering queries is based on your consent or on our legitimate interest in helping you (art. 6.1.a and f). Meeting legal obligations —for example, tax ones— is based on art. 6.1.c. Analytics cookies are processed only with your consent (art. 6.1.a).
4. How long we keep it
We keep your data for as long as needed for the purpose it was collected for and, afterwards, for the applicable statutory limitation periods (for example, tax and accounting ones). When it is no longer needed, we delete it.
5. Who we share it with
We do not sell or transfer your data. Only the providers who serve us as processors have access, under contract and with safeguards:
- TheFork — online booking system. Processes your booking data under its own privacy policy.
- Google (Google Analytics) — anonymous, aggregate visit statistics, loaded only if you accept analytics cookies.
- Arsys Internet, S.L.U. — website hosting (servers in the European Union).
- Public authorities and banks, where the law requires it.
If any provider processed data outside the European Economic Area, it would be done with the safeguards set out in the GDPR.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time, and withdraw your consent. Write to info@pipilacha.es stating the right you are exercising; we may ask you to prove your identity.
If you feel we haven't handled your request well, you can complain to the Spanish Data Protection Agency (aepd.es).
7. Cookies
We use technical cookies and, only if you accept them, those of TheFork's booking system and Google Analytics. We detail this in the Cookie policy.
Last updated: July 2026.
See also Legal notice and Cookie policy.
