On this page
This Privacy Policy explains how El Colmado handles your personal data when you visit our website, contact us, or ask about our catering. We follow the EU General Data Protection Regulation (GDPR) and Dutch data-protection law (UAVG).
1. Who we are
El Colmado — Little Spanish Place is the controller of your personal data.
- Store & visiting address: Klaasstraat 60, 5911 JR Venlo, Limburg, The Netherlands
- Registered (billing) address: Parade 78A, 5911 CE Venlo, The Netherlands
- VAT (BTW): NL004070447B40 · KvK: [to confirm]
- Email: [email protected] · WhatsApp: +31 6 59116243
We are a small business and are not required to appoint a Data Protection Officer. For any privacy question, use the contact details above.
2. What data we collect and why
When you contact us
Our contact and catering forms open WhatsApp with the details you typed (your name, your phone or email, and your message) so you can send them to us. We use this only to answer you and to plan a possible order or event. If you write to us on WhatsApp, by phone or by email, we process what you send us for the same purpose.
When you browse the site
- Necessary data: our hosting provider keeps standard server logs (including IP address) to keep the site secure and running.
- Analytics (only with your consent): if you accept, we use analytics cookies to see, in aggregate, how the site is used so we can improve it.
- Marketing (only with your consent): if you accept, we may use marketing/advertising pixels to measure and improve our promotion.
We do not sell your data, and we do not make automated decisions that have legal effects on you.
3. Legal grounds
- Consent (Art. 6(1)(a) GDPR) — for analytics and marketing cookies. You can withdraw consent at any time.
- Steps prior to a contract (Art. 6(1)(b)) — to handle your catering or order enquiry.
- Legitimate interests (Art. 6(1)(f)) — to answer your messages, keep the site secure, and prevent abuse.
4. Cookies and tracking
We ask for your consent before placing any non-essential cookie. You can change your choice at any time via . Full details are in our Cookie Policy.
5. Who we share data with
We only share data with service providers that help us run the business, and only for the purposes above:
- Meta Platforms Ireland — WhatsApp (your messages to us), Instagram (if you visit our profile), and Meta Pixel (only with consent).
- Google Ireland — Google Maps (the map on our site) and Google Analytics (only with consent).
- Our web host / developer — Binoma, which builds and hosts the site on our behalf.
- Authorities — only if we are legally required to.
6. International transfers
Some providers (Google, Meta) may process data outside the European Economic Area, including the United States. Where they do, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
7. How long we keep it
- Enquiry and catering messages: for as long as needed to help you, and up to [e.g. 24 months — confirm] afterwards.
- Your cookie choice: about 6 months, then we ask again.
- Analytics data: retained by the analytics provider per its settings (typically up to 14 months).
- Server logs: a short period for security.
8. Your rights
Under the GDPR you can ask us to: access your data; correct it; erase it; restrict or object to its use; receive it in a portable format; and withdraw consent at any time. To exercise a right, contact us using the details in section 1 — it’s free and we will respond within one month.
You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
9. Security & children
We take appropriate technical and organisational measures to protect your data. Our site and services are not directed at children under 16; we do not knowingly collect their data.
10. Changes & contact
We may update this policy; the date at the top shows the latest version. Questions? Email [email protected] or message us on WhatsApp.