Privacy policy

1. Controller and scope

The controller for the processing described here is Christian Dann Gutierrez, the self-employed owner of Café Wien. Contact: cafewiengc@gmail.com, +34 928 13 99 40, or C.C. Cita, first floor, Avenida de Francia, 35100 Maspalomas, Gran Canaria, Spain.

This policy covers the information website and enquiries and related matters handled through the published contact details. It does not describe employee records, CCTV or other internal business processing.

2. Data processed and their source

Enquiries: information you provide when writing or calling, such as your name, email address, telephone number, request and documents needed to respond. Identity documents or sensitive data are not requested for an ordinary enquiry.

Browsing: when a page or image is requested, the hosting service receives technical connection information, such as the IP address, date and time, requested resource and browser details. These may appear in server logs used for operation and security.

Language preference: the browser stores only the language code you selected (de, es or en) in this website’s local storage. This function does not create a personal tracking identifier.

3. Purposes and lawful bases

Enquiries and matters relating to a requested service are handled to take pre-contractual steps or perform the relevant relationship (GDPR Article 6(1)(b)). Other voluntary enquiries are handled on the legitimate interest in answering and managing communications addressed to the business (Article 6(1)(f)). You may object to processing based on legitimate interests as provided by law.

Technical data are used to serve the website, detect errors and protect it against misuse or incidents, based on the legitimate interest in maintaining a secure and available service (Article 6(1)(f)). Café Wien does not use them for behavioural advertising.

Documents that must be retained under a legal obligation are processed for that purpose (Article 6(1)(c)). Café Wien sends no promotions through these enquiries, offers no newsletter subscription and does not make automated decisions or build advertising profiles on this website.

4. Providing information

Contacting us is voluntary. Without a reply address or the information needed to understand a request, we may be unable to deal with it. Provide only relevant information; avoid sending health information, passwords or unnecessary personal documents.

Simply visiting the website does not constitute consent to advertising or authorise other uses of your data.

5. Retention criteria

Enquiries and related matters remain open until resolved and any requested follow-up is completed. Information that is no longer needed is then deleted. If a communication evidences a contractual relationship, legal obligation or claim, only the necessary part is retained while that obligation or the applicable limitation period remains; access is restricted and data are blocked where required.

Technical logs are retained according to the hosting service’s rotation cycle for operation and security. During an incident investigation, only the logs necessary to resolve it and, where applicable, address legal liabilities are retained. You can request information about the period applicable to your connection data.

Language: the localStorage value has no programmed automatic expiry. It remains until you change the language, clear site data or your browser deletes it. It is not kept in a remote Café Wien profile.

6. Providers and recipients

Hosting and technical infrastructure are supplied through Hostinger and the providers involved in its service. Processing on behalf of customers is described in its data processing addendum. We do not claim that all its infrastructure or support access is limited to Spain.

The published email address uses Google’s Gmail. Messages are transmitted, stored and managed through this service. Use is subject to the Google service terms used by the owner, including Google’s own processing described in its privacy policy.

Data may be provided to competent authorities or bodies where required by law or necessary to deal with a claim lawfully. Enquiries are not used to sell data or create advertising lists.

7. International transfers

Technology providers may process data outside the European Economic Area. Hostinger provides for standard contractual clauses for certain transfers; Google describes adequacy decisions and standard contractual clauses depending on the service and circumstances. Their application depends on the service and transfer, not merely the café’s location.

See Hostinger’s terms and Google’s data transfer frameworks. You may contact the controller for further information and the means of obtaining a copy of applicable safeguards.

8. Your rights

You may request access, rectification, erasure, restriction and, where applicable, portability, and object to processing based on legitimate interests. If processing were based on consent, you could withdraw it without affecting its earlier lawfulness.

Send your request to cafewiengc@gmail.com or the business postal address, identifying the right and enough information to locate your data. An ID copy is not required by default; proportionate verification will only be requested if there are reasonable doubts about your identity.

Requests are normally answered within one month. If a lawful extension is needed because of complexity or the number of requests, you will be informed within that first month. You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

9. Linked services and changes

Opening Instagram or Google Maps follows a link to another service with its own privacy rules. The presence of a link does not itself integrate their tracking into this website.

This information must be updated before introducing new purposes, forms, non-exempt measurement, advertising or embedded third-party content. Legal framework: Regulation (EU) 2016/679 (GDPR).