HOLA PATATAS
Privacy policy
This policy explains how customer and visitor data is handled.
Last updated: September 2026
Controller
Company name: Terragiuliana S.L. · Legal form: Sociedad Limitada (S.L.) · CIF: B21819115 · Trading name: HOLA PATATAS · Address: Calle Mallorca, 25 – Local 8, Ed. Euromarina III, 03170 Rojales, Alicante, España · Email: info@holapatatas.es
Data and purposes
We process email, name, phone number, account data, order contents, collection time and communications to authenticate customers, manage orders, answer requests, prevent abuse and meet legal obligations.
For franchise enquiries, we also process the intended location, current activity and experience, available investment, timeline, premises status and project description to assess the application and contact the interested person.
Allergy notes are optional and used only to manage the order. Serious allergies must be confirmed directly with staff before consumption.
Legal basis
Processing mainly relies on pre-contractual steps and performance of the order contract. A franchise enquiry is processed at the applicant's request in view of a possible pre-contractual relationship and on the consent given when submitting the form. Service security, legal claims and required retention rely on legitimate interests or legal obligations. Marketing communications require consent where applicable.
Retention and recipients
Customer data is retained during the relationship and for applicable tax, accounting and claims periods. Franchise application data is retained while it is assessed and for no more than 24 months after the last contact, unless earlier deletion is requested or a legal duty applies.
Supabase, Vercel, Resend and Stripe act as necessary technical, hosting, email and payment providers. We do not sell personal data.
Transfers and rights
Transfers outside the European Economic Area use GDPR safeguards. You may request access, correction, deletion, objection, restriction or portability using the published email, and complain to the Spanish Data Protection Agency at aepd.es.
Security and minors
Reasonable access controls and technical safeguards are used. Orders must be placed by persons with legal capacity. Alcohol is restricted to people aged 18 or over and identification may be requested.
