Privacy policy

1. Data controller

• Owner: Ana María Delgado Domínguez
• Tax ID (NIF): 78209528Y
• Address: Carrer Parc 46, 07014 Palma de Mallorca, Balearic Islands, Spain
• Email: elclubdelashadas@gmail.com
• Phone: +34 627 01 00 02
• Website: www.elclubdelashadas.es

“El Club de las Hadas” is the trade name under which Ana María Delgado Domínguez provides children's party and event services.

2. What data we collect

Through the booking form on this website we collect:

• The name of the person making the booking.
• Contact phone number and email address.
• The name and age of the birthday child.
• Approximate number of guests.
• Party preferences: menu, workshops, cake, and any notes you give us in the notes field (for example, allergies or intolerances).
• The requested date and time.

We do not collect payment details through the website: the deposit is paid directly by Bizum and that transaction does not go through this site.

3. Children's data

The form asks for the name and age of the birthday child, and may collect information about allergies or intolerances if you provide it in the notes field. This data is always supplied by the parent or legal guardian making the booking, and is used solely to organise and deliver the service you have booked.

It is not used for advertising, is not shared with third parties for commercial purposes, and is not kept beyond the periods set out in section 6. By submitting the form you confirm that you are the child's parent or legal guardian, or that you have their authorisation.

4. Why we use it and on what legal basis

• To handle your booking request and contact you to confirm it, answer questions and organise the party. Legal basis: performance of a contract, or pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• To meet our legal obligations, in particular tax and accounting requirements. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
• To measure website use in aggregate and anonymous form, in order to improve it. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). See section 7.

We do not make automated decisions or build profiles from your data, and we do not use it to send you advertising unless you expressly ask us to.

5. Who else accesses your data

We do not sell or share your data. To operate, the website relies on the following providers, which act as data processors and only access what is strictly necessary:

• Google Ireland Ltd. — Google Calendar, where the booking is recorded; and Google Maps, to show how to find us.
• Vercel Inc. — website hosting and audience measurement.
• Resend — sending the email notification for each new booking.
• Umami Software — aggregated usage statistics.

Some of these providers may process data outside the European Economic Area. In those cases, transfers are covered by European Commission adequacy decisions or by standard contractual clauses.

Your data may also be disclosed to public authorities where required by law.

6. How long we keep it

Booking data is kept for as long as the service is being provided and, afterwards, for the periods required by law to address any liabilities — generally six years for records with accounting and tax effects. Once those periods have passed, the data is deleted.

7. Cookies and audience measurement

This website does not set any first-party cookies. The analytics tools we use (Vercel Web Analytics and Umami) work without cookies and without cross-site tracking: they do not create a persistent identifier and cannot recognise you on other websites. The data they collect is aggregated — page views, country, device type and which step of the form is abandoned — and does not identify you.

We do use the browser's local storage to remember that you have already seen the cookie notice. That value never leaves your device.

The contact section embeds a Google Maps map. When it loads, Google may set its own cookies in your browser under its own privacy policy, over which we have no control. You can prevent this by blocking third-party cookies in your browser settings.

8. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw any consent you have given.

To do so, write to elclubdelashadas@gmail.com stating which right you wish to exercise and attaching a copy of your identity document. We will reply within one month at the latest.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, Spain.

9. Security

We apply reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access. The website is served entirely over encrypted HTTPS.

10. Changes to this policy

We may update this policy to reflect legal changes or new services. The version in force will always be the one published on this page, together with its last updated date.