Last updated: 14 April 2026

In compliance with Regulation (EU) 2016/679 (GDPR) and applicable local data protection law, we inform you of the following:

1. Data Controller

Cafe La Ola

Cafe La Ola Restaurant

Address: Av. de las Playas, 10, 35510 Puerto del Carmen, Las Palmas, Spain

Phone: +34 619 96 75 45

Email: Geraldine.mcfadden@gmail.com

2. Purpose of Data Processing

Your personal data is processed for the following purposes:

Responding to contact form enquiries and information requests

Managing the business relationship with the user

Sending commercial communications, with express prior consent

Improving website performance and user experience via analytics

Complying with applicable legal obligations

3. Legal Basis for Data Processing

We process your data under the following lawful bases:

User consent — checkbox acceptance on forms

Pre-contractual or contractual relationship — to respond to and manage enquiries

Legitimate interest — website analytics and security

Legal obligation — compliance with applicable law

Consent can be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Personal Data Processed and Source

We may collect the following personal information:

Name

Email address

Phone number (if voluntarily provided)

IP address (collected automatically)

Source: contact forms completed voluntarily by the user. Users are responsible for the accuracy of data provided. Data will not be used for purposes other than those listed above.

5. Link Policy

This website may contain links to third-party sites. Cafe La Ola is not responsible for the content or privacy practices of linked sites. Users should review the privacy policies of any external sites they visit.

6. Personal Data Retention Period

Data is retained while the business relationship is active, or until the user requests deletion. Data may be retained longer where required by law or to defend legal claims. Withdrawn consent results in data being blocked and retained only as required by applicable law.

7. Confidentiality and Security of Personal Data

Cafe La Ola implements appropriate technical and organisational measures to protect personal data, including SSL encryption, secure servers, and restricted access. All staff and processors with access are bound by confidentiality obligations.

8. Data Transfers and Recipients

Data will only be shared where legally required (e.g. public authorities) or where necessary to fulfil the purposes above. Third-party processors include:

Wix — website hosting and contact form management. Privacy policy → https://www.wix.com/about/privacy

Each processor is bound by data processing agreements.

9. User Rights

Under GDPR, you have the right to:

Access — request a copy of the data we hold about you

Rectification — ask us to correct inaccurate data

Erasure — request deletion of your personal data (“right to be forgotten”)

Restriction — ask us to limit how we use your data

Portability — receive your data in a portable format

Objection — object to processing based on legitimate interest

To exercise any right, please write to Geraldine.mcfadden@gmail.com with the subject line “Data Rights Request”, attaching a copy of your ID.

You may also lodge a complaint with the relevant supervisory authority: Spanish Data Protection Agency (AEPD) at www.aepd.es