Legal

Privacy policy

Last updated: 31 August 2026

Data controller

Controller: [Owner — pending], based at [full address — pending; only the area is confirmed, Ruzafa, Valencia]. In accordance with the GDPR (EU 2016/679) and LOPDGDD 3/2018.

Data we process

This site has no server of its own, but the "Reservations" form does send your data to a cloud service to check availability and confirm your table instantly: name, phone, date, time, party size and note are recorded in a Google spreadsheet, and an event with that data is created in AURA's Google Calendar. If the group is larger than 4 people, or there's no table available at that time, the reservation is instead handled via WhatsApp: the form composes the message on your own device and that data is sent directly to AURA via WhatsApp, outside this site. Communication with the business can also take place by phone or Instagram. Technical browsing data is also processed (see Cookie policy).

Purpose and legal basis

Reservation data is used solely to manage your table, on the basis of carrying out that request. Technical data is used for the correct operation of the site, based on legitimate interest and, for non-essential cookies, your consent.

Retention period

Data from an automatically confirmed reservation (name, phone, date, time, party size, note) is kept in AURA's spreadsheet and Calendar for as long as needed to manage it, plus a reasonable period afterwards in case an issue needs resolving; you can ask for it to be deleted sooner by writing to the controller. Your cookie preference is stored in your own browser (not on a server) until you change or delete it. Messages you send via WhatsApp, phone or Instagram are retained according to those platforms' own policies, outside this site.

Recipients and international transfers

Data from automatically confirmed reservations is stored in Google Sheets and Google Calendar, run by Google LLC (United States), covered by the international transfer mechanisms provided for under the GDPR. If you accept non-essential cookies, the embedded map in the "How to find us" section may also transfer technical browsing data to Google. Reservations handled via WhatsApp are processed directly by Meta/WhatsApp Ireland Limited, under its own privacy policy. AURA does not sell or share your data with anyone else.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to the controller. You can also file a complaint with the Spanish Data Protection Agency.

Controller details (company name, tax ID and address) pending completion before publishing.