
Privacy policy
Last updated: 1 November 2026. This is an English translation provided for information purposes; in the event of any discrepancy, the Spanish version prevails.
Data controller
- Owner: Restaurante Borrasco de Lerín
- Address: Calle Abadejo 2, 31260 Lerín (Navarra)
- Email: info@restauranteborrasco.com
What data we process and why
This website has no forms or user area. We only process personal data in the following cases:
- Bookings and enquiries by phone or WhatsApp: we process your name, telephone number, date and number of diners, as well as any allergies or preferences you tell us about, for the sole purpose of managing the booking and assisting you.
- Email: if you write to us, we process your address, name and the content of the message in order to reply to your enquiry.
- Web analytics (only if you accept): Google Analytics 4 collects aggregated browsing data (pages visited, device, duration) with anonymised IP. It is not used to identify you or for advertising.
- Google Map (only if you accept): when the map loads, Google may collect technical and browsing data in accordance with its own policy.
Legal basis
- Bookings and enquiries: performance of pre-contractual measures and the service relationship (art. 6(1)(b) GDPR) and, where applicable, consent for health or allergy data (art. 9(2)(a) GDPR).
- Analytics and maps: your consent (art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings”.
- Legal obligations: compliance with tax and consumer obligations (art. 6(1)(c) GDPR).
How long we keep them
- Bookings: for the duration of managing the booking and the time necessary to deal with any issues.
- Email or WhatsApp enquiries: for the duration of the conversation and, afterwards, for the period necessary to meet any liabilities.
- Browsing data: according to the Google Analytics settings (maximum 14 months). Your cookie preference is stored in your browser until you delete it.
Recipients and transfers
We do not share your data with third parties unless required by law. For the website's services we use providers acting as data processors:
- Google Ireland Limited (Google Analytics and Google Maps), with safeguards for international transfers under the EU-US privacy framework.
- WhatsApp Ireland Limited, when you choose to contact us through that channel.
- Website hosting provider.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@restauranteborrasco.com, stating the right you are exercising and enclosing a document proving your identity. You can also withdraw your consent for cookies via the “Cookie settings” link in the footer.
If you believe we have not handled your request correctly, you can lodge a complaint with the Spanish Data Protection Agency, www.aepd.es.
Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. The website is served entirely over HTTPS.
Minors
The website's services are not aimed at children under 14. If you are under 14, ask your father, mother or guardian to make the booking or enquiry.
Changes to this policy
We may update this policy to adapt it to legal or operational changes. The version in force is the one published on this page.
