Last updated: August 2026
1. Controller
UKRATEN PALMIRA SLU (La Parma), tax ID B04968715 — C. el Jable 40, 38678 Callao Salvaje, Santa Cruz de Tenerife (Spain) · +34 611 67 82 03 · [e-mail].
2. Purpose and data processed
To handle your booking request and communicate with you about it. We process the name, phone number and booking details (date, time, number of guests, seating and comment) you provide. The e-mail address is optional: if you give one, we use it solely to send you the booking confirmation. If you send feedback, we process it to monitor and follow up on the quality of our service: the rating, the aspects you select, your comment and, if given, your name.
3. Legal basis
For bookings: your explicit consent (Art. 6(1)(a) GDPR), given by ticking the box, and pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). For feedback: your consent (Art. 6(1)(a) GDPR), expressed by voluntarily submitting the form after reading this notice.
4. Recipients and transfers
Your request or feedback is handled by processors acting on our behalf: the database is hosted in the European Union (Supabase), the site is hosted by Vercel Inc. and, if you provided an e-mail address, the confirmation is sent through Resend, Inc. The request or feedback is also forwarded to the team via Telegram (Telegram Messenger Inc.), which processes it under its own terms. If you accept the analytics cookie category and analytics is switched on, Google Analytics 4 (Google LLC) also processes pseudonymised browsing data on our behalf. No data is shared with other third parties and no automated decisions are made.
5. Retention
Booking data is kept for as long as needed to handle the reservation and afterwards for the statutory limitation period. Feedback and internal management records are kept while they serve the follow-up of service quality, and at most for that same period.
6. Your rights
You may exercise the rights of access, rectification, erasure, restriction, objection and portability, and withdraw consent at any time, by writing to [e-mail] or calling the restaurant. Withdrawal does not affect the lawfulness of processing carried out beforehand. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Provision of data and minors
The name and phone number are necessary to handle the booking; without them we cannot confirm the reservation. The e-mail address is optional and serves only to receive the confirmation in writing. The form is not intended for children under 14, who should not provide their data without parental or guardian consent.
8. International transfers
When the request or feedback is forwarded to the team via Telegram, Telegram Messenger Inc. may process the data outside the European Economic Area under its own safeguards (data processing agreement: [DPA-TELEGRAM]); for bookings this occasional transmission is necessary for the pre-contractual steps you request (Art. 49(1)(b) GDPR). If you provided an e-mail address, Resend, Inc. processes it in the United States under the standard contractual clauses approved by the European Commission; Vercel Inc. (hosting) operates under the same clauses. If you accept analytics cookies, Google LLC processes the browsing data in the United States under the EU-U.S. Data Privacy Framework and the standard contractual clauses. You can request a copy of those clauses by writing to [e-mail]. If you prefer, you can book by phone on +34 611 67 82 03.