1. Data controller
Company name: MASIDE 2011, S.L.U.
Trade name: Restaurante Casa Tomás
Tax ID (CIF): B54583356
Address: Carrer Santa Maria de la Cabeza, 2, local 2, 03330 Crevillent (Alicante)
Phone: +34 966 10 78 87
Email: casatomascrevillent@gmail.com
2. Data we collect
We only collect the data needed for each service you use. Our services are not aimed at children under 14.
- Bookings: first name and surname, telephone, email (optional), date, time and number of guests, and any special requests you give us.
- Newsletter: your name and email, your consent, the date you gave it and the date you confirmed your email.
- Gift vouchers: name, email and telephone (optional) of the buyer; name of the recipient and dedication (optional); and, if you ask for an invoice, name or company name, tax ID and address. Payment is processed by Stripe: we never see or store your card details.
- Website assistant (chat): the messages you write. Please do not include health data or other sensitive data in the chat; for allergies, speak to our staff.
- “Vote for your favourite wine”: name, email or telephone and the wine you voted for.
- Browsing: anonymous, aggregated visit statistics, without cookies, and the server's technical logs (IP address, date and page visited) for security. If you accept “Usage statistics”, also the pages you view and the actions you take on the website (buttons, dishes or wines you open, form steps), linked by a random identifier, never your name or what you type in forms. And always, the website's technical errors, without personal data.
Phone assistant: When you call our number, your call may be answered by an automated voice assistant. In that case, the telephone number you are calling from is automatically recorded in order to link it to your booking. The call may be recorded for quality and security reasons; if so, we will inform you at the start of the call.
3. Purposes and legal basis
Booking management
Performance of a contract (Art. 6.1.b GDPR)
Creation, consultation, modification and cancellation of bookings at the restaurant.
Communications related to the booking
Legitimate interest (Art. 6.1.f GDPR)
Confirmation, reminders or cancellations of your booking by phone or email.
Security and abuse prevention
Legitimate interest (Art. 6.1.f GDPR)
Call logging, usage limits on the forms and an exclusion list to prevent misuse of the booking system.
Newsletter (news and offers)
Consent (Art. 6.1.a GDPR)
Occasional sending of news, events, special menus and offers from Casa Tomás to your email, using the name and email from the booking. Only if you tick the specific newsletter checkbox when booking: it is independent of the acceptance of the booking conditions, is unticked by default and is not necessary in order to book. Ticking the checkbox does not subscribe you yet: we only sign you up when you confirm your booking from the link in the email we send you (double verification), which proves that the email is yours; if the booking is confirmed by another route (for example, by phone) or is cancelled beforehand, we do not subscribe you. You may withdraw your consent and unsubscribe at any time, free of charge, from the link included in every email; unsubscribing takes effect immediately. See the newsletter conditions
Sale of gift vouchers
Performance of a contract (Art. 6.1.b GDPR)
Charging for the voucher, emailing it to you with its code and checking it when it is redeemed at the restaurant.
Invoicing and accounting
Legal obligation (Art. 6.1.c GDPR)
Issuing the invoice if you ask for one and keeping the sales records required by tax and commercial law.
Website assistant (chat)
Pre-contractual steps at your request (Art. 6.1.b GDPR)
Answering your questions about the menu, opening hours or bookings. Answers are generated automatically and no decision is taken about you based on them.
Favourite wine vote and prize draw
Consent (Art. 6.1.a GDPR)
Counting the votes, holding the draw among participants and notifying the winner. One vote per email or telephone.
Website usage statistics
Legitimate interest (Art. 6.1.f GDPR)
Knowing how many visits each page receives, anonymously and in aggregate, in order to improve the website.
Our own usage statistics (journeys)
Consent (Art. 6.1.a GDPR)
Only if you accept “Usage statistics”: knowing which pages and buttons are used during a visit, what is viewed on the menu and where a booking or a purchase is abandoned, in order to improve the website. You can withdraw your consent at any time from “Cookie settings”.
Detection of website errors
Legitimate interest (Art. 6.1.f GDPR)
Recording the website's technical failures (without personal data or identifiers) in order to fix them.
4. Retention periods
Bookings: Booking data is kept for the period of validity of the booking and, once it has ended, for a maximum of 2 years to deal with possible claims.
Call logs: The records generated by the phone assistant (calling number, duration, summary) are automatically deleted after 3 months.
Chat conversations: They are kept for a maximum of 12 months to deal with queries and improve the answers; they are then deleted.
Gift vouchers and invoices: For as long as the voucher is valid and, afterwards, for 6 years, the period required by commercial and tax law for sales records.
Favourite wine vote: Until the draw has been held and the winner notified; all entries are then deleted.
Newsletter: For as long as you do not withdraw your consent. When you unsubscribe we stop sending you the newsletter immediately; we may keep the record of your consent, of the confirmation of your email and of your unsubscription for as long as necessary to prove them in the event of claims.
Website statistics and errors: Our own usage statistics are deleted after 90 days and technical errors after 180 days.
Cookies: See the cookies section for the specific periods of each cookie.
6. Your rights
In accordance with the GDPR and Spanish Organic Law 3/2018 (LOPD-GDD), you may exercise the following rights:
Access
Find out what data we hold about you.
Rectification
Correct inaccurate or incomplete data.
Erasure
Request the deletion of your personal data.
Objection
Object to certain processing based on legitimate interest.
Portability
Receive your data in a structured, readable format.
Restriction
Ask us to suspend processing in certain cases.
Withdraw consent
For the newsletter and the vote, at any time and without affecting earlier processing.
To exercise any of these rights, contact us at casatomascrevillent@gmail.com stating your name and the right you wish to exercise, and attaching a copy of your ID card or equivalent document.
If you consider that the processing does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).
7. Service providers and transfers
To provide the service we use the following providers, which process data on our behalf under a data processing agreement. Some are located in the United States: the transfer is covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.
Supabase (database): Storage of bookings, gift vouchers, chat conversations, votes and website usage statistics and errors. Servers in the European Union (Ireland). Privacy policy
Vapi (AI voice assistant): Processing of telephone calls. United States. Privacy policy
OpenAI (language model): Interpretation of calls and answers from the website assistant (chat). United States. Privacy policy
Vercel (web hosting): Website infrastructure and anonymous visit statistics. United States. Privacy policy
Resend (email sending): Sending the booking emails, the gift vouchers and, if you have subscribed, the newsletter. United States. Privacy policy
Stripe (payments): Card payment for gift vouchers. Stripe processes payment data as an independent controller. Privacy policy
Mapbox (interactive wine map): Only if you accept the optional map cookie. Privacy policy
8. Contact
For any questions about privacy or data protection, you can contact:
📧 casatomascrevillent@gmail.com
📍 Carrer Santa Maria de la Cabeza, 2, local 2, 03330 Crevillent (Alicante)