Privacy policy

1. Data controller

• Owner: Ana María Delgado Domínguez
• Tax ID (NIF): 78209528Y
• Address: Carrer Parc 46, 07014 Palma de Mallorca, Balearic Islands, Spain
• Email: elclubdelashadas@gmail.com
• Phone: +34 627 01 00 02
• Website: www.elclubdelashadas.es

“El Club de las Hadas” is the trade name under which Ana María Delgado Domínguez provides children's party and event services.

2. What data we collect

Through the booking form on this website we collect:

• The name of the person making the booking.
• Contact phone number and email address.
• The name and age of the birthday child.
• Approximate number of guests.
• Party preferences: menu, workshops, cake, and any notes you give us in the notes field.
• The requested date and time.

We do not collect health data through the website. Allergies and intolerances are needed to prepare the food, but we ask you about them over the phone when we confirm the booking, not in the form.

We do not collect payment details through the website: the deposit is paid directly by Bizum and that transaction does not go through this site.

3. Children's data

The form asks for the name and age of the birthday child. This data is always supplied by the parent or legal guardian making the booking, and is used solely to organise and deliver the service you have booked.

We deliberately do not collect any health data about the child through the website (allergies, intolerances or any other condition). If you give us that information over the phone when confirming, it is used only to prepare the food and is not added to any other processing.

It is not used for advertising, is not shared with third parties for commercial purposes, and is not kept beyond the periods set out in section 6. By submitting the form you confirm that you are the child's parent or legal guardian, or that you have their authorisation.

4. Why we use it and on what legal basis

• To handle your booking request and contact you to confirm it, answer questions and organise the party. Legal basis: performance of a contract, or pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• To meet our legal obligations, in particular tax and accounting requirements. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
• To measure website use in aggregate and anonymous form, in order to improve it. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). See section 7.

We do not make automated decisions or build profiles from your data, and we do not use it to send you advertising unless you expressly ask us to.

5. Who else accesses your data

We do not sell or share your data. To operate, the website relies on the following providers, which act as data processors and only access what is strictly necessary:

• Google Ireland Ltd. — Google Calendar, where the booking is recorded and from which the invitation is sent to the email address you give us; and Google Maps, to show how to find us.
• Vercel Inc. — website hosting and audience measurement.
• Resend — sending the email notification for each new booking.
• Umami Software — aggregated usage statistics.

Some of these providers may process data outside the European Economic Area. In those cases, transfers are covered by European Commission adequacy decisions or by standard contractual clauses.

Your data may also be disclosed to public authorities where required by law.

6. How long we keep it

Booking data is kept for as long as the service is being provided and, afterwards, for the periods required by law to address any liabilities — generally six years for records with accounting and tax effects. Once those periods have passed, the data is deleted.

7. Cookies and audience measurement

This website sets no first-party or advertising cookies. The analytics tools we use (Vercel Web Analytics and Umami) work without cookies and without cross-site tracking: they do not create a persistent identifier and cannot recognise you on other websites. The data they collect is aggregated — page views, country, device type and which step of the form is abandoned — and does not identify you.

We do use the browser's local storage to remember the choice you make in the cookie notice. That value never leaves your device.

The Google Maps map in the contact section is the only element that can set third-party cookies, which is why it does not load on its own: you will see a notice with a button instead. Until you accept in the banner or press “Show the map”, your browser sends no request to Google. If you would rather not load it, the address is available through the link next to the notice, which only opens Google Maps if you choose to click it.

You can change your mind at any time from the “Cookie settings” link in the footer: it reopens the notice so you can accept or reject again.

8. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw any consent you have given.

To do so, write to elclubdelashadas@gmail.com stating which right you wish to exercise and attaching a copy of your identity document. We will reply within one month at the latest.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, Spain.

9. Security

We apply reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access. The website is served entirely over encrypted HTTPS.

10. Changes to this policy

We may update this policy to reflect legal changes or new services. The version in force will always be the one published on this page, together with its last updated date.