Privacy policy
Last updated: 08/09/2026
1. Data controller
Owner: GS Legal Innovation Services, S.L.
NIF/CIF: B02858215
Registered address: Calle Mallorca 272, 9/3 · 08037 Barcelona
Web: https://madrelievito.es
2. What data we process and why
We process the personal data you provide in the following cases:
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Table booking (HIOPOS platform) | Name, phone, email, date, number of guests, comments | Manage your booking and contact you about it | Performance of a contract / pre-contractual measures |
| Event enquiry (email or WhatsApp) | Name, email, phone, company (if applicable), event details | Prepare and send you a proposal and manage the event | Pre-contractual measures at your request |
| Company invoicing | Company name, tax ID, tax address | Issue invoices | Legal obligation |
| Browsing the website | Technical and usage data (see Cookie Policy) | Website operation, analytics and advertising | Consent (non-essential cookies) and legitimate interest (technical cookies) |
We do not knowingly process data of children under 14. We do not make automated decisions or profile users with legal effects.
3. Data retention
Booking and event data are kept for the duration of the relationship and afterwards for the statutory limitation periods (generally up to 5 years; invoicing data for the periods required by tax and commercial law).
4. Recipients
Your data may be processed by service providers acting as processors under the corresponding contracts: the booking platform HIOPOS, our hosting provider 10Web, email providers and, where applicable, Google analytics and advertising tools. Some providers may be located outside the European Economic Area; in that case, transfers are covered by Standard Contractual Clauses approved by the European Commission or other appropriate safeguards. We do not share your data with third parties for their own purposes unless legally required.
If you contact us via WhatsApp, the service is provided by WhatsApp Ireland Ltd. (Meta) under its own terms and privacy policy.
5. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent at any time, in writing, by post to the controller's address given above, enclosing a copy of your ID if necessary. If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
We apply appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of your data, taking into account the state of the art and the risks of the processing.
7. Social media
Madre Lievito has profiles on Instagram and Facebook. When you interact with them, the processing of your data is governed by those platforms' privacy policies.
8. Changes to this policy
We may update this Privacy Policy to reflect legal or service changes. The current version is always the one published on this page.