Privacy policy

1. Data controller

Amagatall Cafè i Jocs, S.L., Tax ID B21971833, registered at Carretera Nova, 4, 08530 La Garriga, and Passatge de Joan Puig, 2, 08500 Vic (Barcelona), Spain, is the controller responsible for the personal data collected through this website. For any data protection matter, you can contact hola@lamagatalljocs.com.

2. What data we collect

Through the booking form: the child's name and age, the contact person's name, email and phone number, party details (venue, date, number of children and adults, catering and decoration preferences), allergies or special diets, and any additional notes you provide.

We never store payment card data: the deposit payment is processed directly by Stripe, which acts as an independent data processor under its own privacy policy.

3. Purpose of processing

Managing your request and booking, communicating with you to confirm details and answer queries, complying with legal and tax obligations arising from the booking, and, if you give your consent, sending you L'Amagatall marketing communications.

4. Legal basis

Processing the data needed to manage the booking is based on the performance of a contract. Sending marketing communications is based on your explicit consent, which you can withdraw at any time.

5. Who we share data with

We use the following providers, which act as data processors: Stripe (payment processing), Resend (transactional emails) and Supabase (database and website infrastructure hosting). We do not share your data with third parties for their own commercial purposes.

6. Data retention

We keep data for as long as needed to manage the booking and, afterwards, for as long as there is a legal obligation to retain it (for example, for tax or accounting purposes).

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by writing to hola@lamagatalljocs.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you believe your rights have not been respected.

8. Cookies and the Meta Pixel

This website only uses necessary technical cookies and, if you give explicit consent via the corresponding banner, the Meta (Facebook) Pixel for statistical and marketing purposes. You can withdraw this consent at any time by clearing your browser's browsing data for this site.

9. Security

We apply reasonable technical and organisational measures to protect your data, including restricted access, encrypted connections and access controls on the back office.