Mesa Nostra

Privacy Policy

Last updated: 22/06/2026

This is a courtesy translation. The Spanish version is the legally binding one.

1. Data controller

2. What data do we process?

This website is informational and has no data-collection forms. We only process the data that the user voluntarily provides when contacting us by email or WhatsApp (name and contact details, and the content of the message).

3. Purpose

To handle enquiries, information requests and bookings made by the user through those channels.

4. Legal basis

The legal basis is the data subject’s consent when making contact and the legitimate interest in replying (Art. 6.1.a and 6.1.f GDPR).

5. Retention

Data is kept for as long as necessary to handle the enquiry and, thereafter, for the legally required periods.

6. Recipients

Data is not shared with third parties except where legally required. Data may be processed by technology providers (e.g. the web hosting provider) acting as processors under the GDPR.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@mesa-nostra.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Cookies

This site only uses strictly necessary technical cookies. It does not use analytics, tracking or advertising cookies, and therefore requires no consent banner.

9. Security

Reasonable technical and organisational measures are applied to protect data against unauthorised access, loss or alteration.

Legal Notice →