Privacy Policy
In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), El Invernadero de Rodrigo de la Calle informs users of its personal data processing policy.
1. Data controller
- Controller: El Invernadero de Rodrigo de la Calle
- Registered name: GASTROBOTANICA, S.L.
- Tax ID (CIF): B86310851
- Registered address: Calle Ponzano, 85, Local Bajo, 28003 Madrid
- Contact email: reservas@elinvernaderorestaurante.com
- Telephone: +34 628 93 93 67
2. Data we collect
We collect the personal data that users provide voluntarily through the forms on this website (name, email, telephone, message) and data arising from browsing (IP address, technical cookies). We do not collect special categories of data.
3. Purpose of processing
Personal data is used solely to:
- Answer the enquiries sent through the forms or the contact channels.
- Send commercial information about our products or services, only where the user has expressly agreed to it.
- Comply with the applicable legal obligations.
4. Legal basis
Depending on the case, the legal basis for processing may be: the user's consent (which can be withdrawn at any time); the performance of a contract or of pre-contractual steps requested by the data subject; the legitimate interest in answering the enquiries we receive and improving our services; and compliance with the applicable legal obligations.
5. Data retention
Data is kept for as long as necessary for the purpose for which it was collected and, in any case, for the periods established by law.
6. Recipients and processors
Data is not shared with third parties except where required by law. To provide the service we use suppliers acting as processors under contract: web hosting and form delivery on cloud infrastructure; web analytics; and, where applicable, contact management (CRM) and email platforms. Some of these suppliers may be located outside the European Economic Area (for example, in the USA); in that case, international transfers are covered by appropriate safeguards under the GDPR: adequacy decisions of the European Commission (such as the EU-US Data Privacy Framework) or standard contractual clauses.
7. Your rights
Users may exercise at any time their rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw the consent they gave (without affecting the lawfulness of processing carried out beforehand) and not be subject to automated individual decisions. To do so, simply send a request to reservas@elinvernaderorestaurante.com stating the right you wish to exercise. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We have adopted the technical and organisational measures needed to guarantee the security and confidentiality of personal data, preventing its alteration, loss, unauthorised processing or access.
Last updated: 2026.