Data controller
Sandra Romero Conde, trading as Mery Rose Mery – Tailor Made Gastronomy, is the controller of the personal data processed through this website and in connection with its services.
NIF: 26977666T · Calle San Vicente 1, Marbella, Málaga, Spain · 8meryrosemery@gmail.com · +34 618 486 119.
Data we may process
We may process your name, email address, telephone number, service date and location, guest number and adult/child composition, gastronomic preferences, requested services, estimate and booking information, billing details and communications.
Where you voluntarily provide them, we may also process allergies or health-related dietary requirements. These are requested through the separate field “Allergies or health-related dietary requirements”.
Purposes and legal bases
Data is used to answer enquiries, prepare proposals, manage bookings, design and adapt menus, provide the service, manage payments and invoicing, communicate about a booking, handle incidents and meet administrative, tax and legal obligations.
The applicable bases are pre-contractual measures, performance of a contract, legal obligations and, for allergies or health-related information, your explicit consent. Health-related information is not used for marketing.
Allergies and health-related information
If the separate allergies or health-related dietary-requirements field contains this type of information, explicit consent is requested by an unticked checkbox. It is processed only to assess, adapt, prepare and provide the requested service, and only for as long as necessary for that purpose and related legal obligations.
Recipients and international transfers
We do not sell personal data. Data may be shared, where necessary, with technology providers, professionals needed to provide the service and public authorities when legally required. If you choose to use WhatsApp, Gmail or another external platform, that platform applies its own privacy policy.
Optional analytics uses Google Analytics for browsing measurement and Telegram for internal browsing and calculator alerts. Cloudflare supports the website’s technical operation and delivery of these alerts.
Some technology providers may process data outside the European Economic Area. Where applicable, the corresponding safeguards or transfer mechanisms are used.
Retention
Enquiries are kept for the time needed to respond and prepare a proposal. Booking, billing and related records are retained for the duration of the relationship and the legal periods that apply. Health-related information is not kept longer than necessary for its service purpose.
The limited calculator summary in the browser lasts for the tab’s session. Copies already sent to Telegram are retained separately from browser storage. Ending the session or withdrawing Analytics consent does not automatically delete those alerts. You can request erasure using the contact details above.
Your rights
You may request access, rectification, erasure, objection, restriction or portability, and withdraw consent at any time, by contacting 8meryrosemery@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
Analytics and external media
With Analytics consent, Google Analytics measures browsing. Our internal Telegram alerts can also include a current calculator summary: service type, guest-number bands, duration bands, estimated-price band and calculation status, even when you do not send a request. This helps us understand how the website is used and improve it.
The calculator summary is linked to your session identifier and browsing journey. It excludes your name, contact details, exact service date or location, free text and health information. A session identifier does not by itself make the data anonymous.
Withdrawing Analytics consent stops new collection and transmission for this optional analytics. Instagram or Meta remote media requires separate External media consent. You can change or withdraw these choices through Cookie settings.
Automated decisions
The calculator and enquiry form do not make decisions based solely on automated processing that produce legal effects or similarly significant effects for you.