Legal

Privacy policy

Last updated: 21 April 2026

Data controller

  • Controller: Restauración Intervejer S.L. (Spanish Tax ID B90358920).
  • Address: Calle Judería 3A, 11150 Vejer de la Frontera, Cádiz, Spain.
  • Privacy contact email: vejer@lajuderiadevejer.com.
  • Phone: +34 956 90 74 71.

This policy explains how we handle personal data that may reach us through the website https://www.lajuderiadevejer.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

What data we process and why

The website is primarily informational and does not include our own contact form. We do not collect personal data from browsing beyond what is described in the cookie policy.

The only processing activities carried out directly by the restaurant in connection with the website are:

1. Enquiries initiated by the user

If you write to vejer@lajuderiadevejer.com or call +34 956 90 74 71, we will process the data you provide (name, email, phone and the content of your enquiry) in order to respond to it.

  • Legal basis: the legitimate interest of the controller in handling enquiries (Art. 6.1.f GDPR) and, where applicable, pre-contractual steps taken at the data subject’s request (Art. 6.1.b GDPR).
  • Retention period: the time needed to respond and, thereafter, the period required to handle potential liabilities.

2. Bookings made through the CoverManager widget

The website integrates the CoverManager booking service (CoverManager, S.L.). When you make a booking through the embedded widget, your data (name, email, phone, number of guests, notes) are collected directly by CoverManager, S.L., which acts as a data processor for that service. The restaurant subsequently accesses the booking information in order to manage it.

3. Statistical measurement via Google Analytics 4

The website uses Google Analytics 4 (Measurement ID G-VCJEV982VP) to obtain aggregated traffic statistics, only once you have given your consent through the cookie banner.

  • Service: Google Analytics 4 (aggregated statistical measurement of web traffic).
  • Data processor: Google Ireland Ltd.
  • Registered office: Gordon House, Barrow Street, Dublin 4, Ireland.
  • Purpose: aggregated analysis of visits, page views and browsing behaviour in order to improve the website.
  • Legal basis: the data subject’s consent (Art. 6.1.a GDPR and Art. 22.2 LSSI-CE).
  • International transfer: yes, to Google LLC (United States), under the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023).
  • Provider’s privacy policy: https://policies.google.com/privacy.

Recipients of the data

We do not share personal data with third parties except where legally required. Data collected through CoverManager are processed by that provider as a data processor. In addition, embedded third-party services (Google Maps, Matterport and, potentially in the future, video platforms such as YouTube) may process technical data such as your IP address on their own servers; those processing activities are governed by the respective providers’ privacy policies.

International data transfers

Some of the providers mentioned (for example, Google or Cloudflare) may process data outside the European Economic Area. These providers rely on appropriate safeguards under the GDPR, such as the Standard Contractual Clauses adopted by the European Commission.

Your rights

You may exercise the following rights:

  • Access to your personal data.
  • Rectification of inaccurate data.
  • Erasure (“right to be forgotten”).
  • Objection to processing.
  • Restriction of processing.
  • Data portability.
  • Not to be subject to automated decisions with legal effects.

To exercise these rights, please write to vejer@lajuderiadevejer.com or to the postal address above, enclosing a copy of a document proving your identity.

If you feel your request has not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or alteration. The website is served over encrypted connections (HTTPS).

Children

The website is not directed at children under 14, and we do not knowingly process their data without the consent of their legal representatives.

Changes to this policy

We may update this policy to reflect legal changes or new services. The version in force will always be the one published on this page, together with its last-updated date.

Last updated: 21 April 2026.

← The house
Book a table