Privacy Policy
Last updated: 21 de junio de 2026
1. Data controller
- Controller: [TU NOMBRE COMPLETO O RAZÓN SOCIAL]
- Tax ID: [TU NIF O CIF]
- Address: [DIRECCIÓN COMPLETA, CIUDAD, CÓDIGO POSTAL]
- Contact email: info@huelvavip.com
2. What data we collect
When you make a booking through the website, we collect:
- First and last name
- Email and phone number
- Booking details: venue, table chosen, date, time and party size
- Payment data for the deposit, processed directly by Stripe (see point 5). HuelvaVIP never stores your full card number at any point.
3. What we use your data for
- Managing and confirming your booking with the chosen venue
- Processing the deposit payment
- Sending you confirmations or notices related to your booking
- Answering enquiries you send us via WhatsApp, email or phone
The legal basis for this processing is the performance of the booking contract you accept when paying the deposit, and, where applicable, your explicit consent when requested.
4. Who we share your data with
We share only the data strictly necessary with:
- The booked venue (restaurant, club, etc.), so it can prepare and confirm your table.
- Stripe, Inc., as data processor for payment data, under its own privacy policy, available at stripe.com/en-es/privacy. Stripe may process data outside the European Economic Area, applying the safeguards required by the GDPR (such as standard contractual clauses).
We do not sell or share your data with third parties for advertising purposes.
5. How long we keep your data
We keep your booking data for as long as necessary to manage it, and for the period legally required to address any tax or legal liabilities arising from the deposit payment.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by writing to info@huelvavip.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you believe we have not handled your data correctly.
7. Security
We apply reasonable technical and organisational measures to protect your data. Payment is always processed through Stripe's secure platform, certified under the PCI-DSS standard.
8. Minors
This website is not directed at minors. If we become aware that a minor's data has been provided without guardian consent, we will delete it as soon as we are made aware.