Privacy notice

Last updated: August 2026

1. Who is responsible for processing your data

Alberto Daniel Méndez Peña, national ID (DNI) 61377196V, registered at Calle Las Margaritas 2, Monte Pego, Alicante, 03780, Spain. Contact: booking@labandadelaabuela.com.

2. What data we process and why

Quote request form (/reservas): name, phone, email, social media handle (if you provide one) and event details (date, time, venue, type, guest count, desired line-up, approximate budget and anything else you share in the free-text message). We use this to reply with a proposal and, if it goes ahead, to manage the booking.
Review form (/valorar): name, comment, rating and, optionally, the event name, its date and your social media handle. We use this to publish your review on /valoraciones after reviewing it.
IP address: we log it briefly when the request form is submitted, only to prevent automated or repeated submissions. It is not cross-referenced with your contact details.

We don't ask for payment data: this site doesn't take payments online.

3. Why we can process your data

Your consent, by voluntarily filling in and submitting either form.
Our legitimate interest in responding to your request and protecting the site from spam or abuse.
If your request moves forward to a contract, the performance of that contract.

4. Who we share your data with

We don't sell or share your data with third parties for commercial purposes. To provide the service, some providers process your data on our behalf (data processors):

Supabase: database hosting, in the European Union.
Resend: sending the confirmation email for your request.
Cloudflare: routing email for our domain.
Telegram: notifies us internally when a new request or review comes in.
Google Calendar: if your event is confirmed, we add it to our booking calendar.

When any of these providers processes data outside the European Economic Area, it does so under the applicable legal safeguards (such as the European Union's standard contractual clauses).

5. How long we keep your data

Requests that don't lead to a booking: up to 12 months, in case you get back in touch; after that we delete or anonymize them.
Requests that become a booking: for as long as the relationship lasts and, after that, for as long as tax and commercial law requires (generally up to 6 years).
Published reviews: until you ask us to remove them.

6. Your rights

You can ask us to access your data, correct it if it's wrong, delete it, restrict or object to its processing, and request portability. Write to booking@labandadelaabuela.com stating what you'd like to exercise; we'll reply within the legal timeframe (one month, extendable if the request is complex). If you believe we haven't handled your data properly, you can file a complaint with the Spanish Data Protection Agency (AEPD).

7. Minors

This site is not directed at minors under 14. If we find that data was provided without the authorization of a legal guardian, we will delete it.

8. Security

We apply reasonable technical and organizational measures (restricted access, encryption in transit, providers based in the EU where possible) to protect your data from unauthorized access, loss or alteration.

9. Changes to this notice

We may update this notice as our processing activities or the applicable law change. The last-updated date appears at the top of this page.