In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter "GDPR") and Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights ("LOPDGDD"), the following details of the data controller are provided:
Controller: ARMEA HOSPITALITY, S.L.
Tax ID (CIF): B26687723
Registered address: Calle Mendizábal, 24 — 35001 Las Palmas de Gran Canaria (Vegueta), Spain
Contact email: info@flowlaspalmas.com
Phone: +34 828 99 31 54
The personal data you provide will be processed for the following purposes:
| Purpose | Legal basis (Art. 6 GDPR) | Retention period |
|---|---|---|
| Manage table reservations and queries received by email, phone or web form | Performance of contract or pre-contractual measures | Duration of the relationship, then 5 years for tax obligations |
| Manage event registrations (Grand Opening and future events) | Performance of contract | Up to 1 year after the event |
| Send newsletters with updates, new menus and events | Explicit user consent (double opt-in) | Until the user unsubscribes |
| Respond to queries, complaints and suggestions | Legitimate interest of the controller | Maximum 2 years after resolution |
| Comply with legal obligations (tax, accounting, health) | Compliance with legal obligation | Periods set by applicable law |
Depending on the contact channel, we may process the following data:
We do not collect or process special categories of data (health, racial origin, beliefs, etc.), except for any food allergy or intolerance you voluntarily share with us to ensure your safety during your meal. In that case, the data is processed solely for that purpose and deleted when the reservation ends.
Your data is not disclosed to third parties except under legal obligation. However, to deliver our services, some data may be processed by data processors that meet the requirements of Art. 28 GDPR:
International data transfers outside the European Economic Area are not anticipated. Should any provider make transfers outside the EEA, they will always be carried out with adequate safeguards under Chapter V of the GDPR (standard contractual clauses, adequacy decisions or others).
As data subject, you may exercise the following rights at any time:
You may exercise these rights by sending a request to info@flowlaspalmas.com or by postal mail to our address, attaching a copy of your ID or equivalent document.
You are also informed of your right to file a complaint with the Spanish Data Protection Agency (AEPD), particularly when you have not obtained satisfaction in exercising your rights. You can do so via their electronic office: www.aepd.es.
We apply appropriate technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing or access. These measures include: encryption of communications (HTTPS/SSL), restricted access to information, periodic backups, and confidentiality commitments from our collaborators and data processors.
Our online services are not specifically directed at children under 14 years of age. If you are below this age, you will need the consent of your parents or legal guardians to provide us with personal data. If we detect that we have received data from a minor without such consent, we will delete it immediately.
We reserve the right to modify this policy to adapt to legislative or case-law developments or changes in our practices. In case of substantial changes, the user will be informed through the website or by email (if registered).
This policy has been drafted in accordance with the GDPR and the Spanish LOPDGDD. Legal review before final publication is recommended.