Privacy policy

Last updated: 17 September 2026

This notice explains how personal data is processed on this website under the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Spanish Law 34/2002 on information-society services (LSSI-CE).

Data controller

The controller responsible for the processing described below is:

No data protection officer has been appointed for this processing. Privacy enquiries can be sent directly to the email address above.

Data processed and its source

We process information you provide directly through reservation or collection forms: name, email address, telephone number, preferred date and time, number of guests, selected dishes and optional notes. Hosting may generate technical access data such as IP address, time, URL, browser and device information. The cart is stored only in your browser. We do not obtain personal data from public or third-party sources.

Purposes and lawful bases

Required information

Fields marked as required are needed to handle your request; without them, the form cannot be submitted. Telephone, messages and other details are optional only when labelled accordingly. You are not required to provide health or allergy information through the form and may instead contact the restaurant by telephone.

Recipients and processors

Access is limited to relevant restaurant staff and the service providers needed for each purpose:

• Vercel Inc. for hosting, delivery and technical security logs.
• Plus Five Five, Inc. (Resend) for transmitting requests by email.
• Authorities, courts or advisers where required by law or necessary for legal claims.

Personal data is not sold or disclosed for third-party advertising.

International transfers

Vercel and Resend are US providers and may process data in the United States or through subprocessors in other countries. Where a destination does not provide an adequate level of protection, the providers rely in particular on the European Commission’s Standard Contractual Clauses and supplementary safeguards. See the Vercel Data Processing Addendum and Resend Data Processing Addendum. Google receives data only if you actively load the map or open an external Google link.

Retention periods

• Requests are generally retained for up to twelve months after final handling and then deleted, unless a resulting contract or legal dispute requires longer retention.
• If a request results in a business transaction, supporting records required by tax or commercial law are retained for the applicable statutory periods.
• Technical security logs are kept only as long as needed for security, abuse prevention and troubleshooting under the hosting configuration in use.
• The cart remains in local browser storage until a request is sent successfully, the cart is emptied or browser data is cleared.

Your data-protection rights

You may request access, correction, deletion, restriction and portability, and object where processing relies on legitimate interests. Consent may be withdrawn at any time for the future. Send requests to Tajindian2025@gmail.com; proof of identity may be requested to prevent unauthorised disclosure. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Cookies and similar technologies

• This website does not use first-party analytics or advertising cookies.
• The cart uses local browser storage under the key tajindian.cart.v1. This storage is necessary for the cart function requested by the user and contains no contact details.
• Google Maps is not loaded automatically. A connection to Google is made only after the load button is activated; Google may then use cookies or similar technologies under its own terms. See the Google Privacy Policy.

Children

The forms are not directed independently at children. Anyone under 14 should not submit personal data without permission from a parent or legal guardian.

Security

Appropriate technical and organisational safeguards are used, including encrypted HTTPS transmission, access restrictions and data minimisation. No internet service can guarantee absolute security.

Automated decisions

There is no profiling or automated decision-making with legal or similarly significant effects. Restaurant staff review reservation and collection requests personally.

Changes to this policy

This policy will be updated when services, processing activities or legal requirements change. The latest revision date appears at the top of the page.