Privacy policy
Last updated: 24 September 2026. Versión en español
This is a courtesy translation. If there is any difference between versions, the Spanish version prevails.
This policy explains what personal data is processed through this website and our contact channels, for what purpose, on what legal basis, and what rights you have. It has been drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: Roya Elite Holdings, S.L.U.
- Tax ID (NIF): B19778893
- Address: Carrer de Miquel Arcas 1, local 4, 07010 Palma de Mallorca, Illes Balears, Spain
- Email: elparchesf@gmail.com
No data protection officer has been appointed, as none of the cases in article 37 of the GDPR applies.
2. What data we process
This website has no forms and no sign-up area: you can browse it without giving any data. The data that may be processed is:
- Browsing data. Pages viewed, device type, language, traffic source and cookie identifiers. Only if you accept analytics or advertising cookies.
- Contact data you give us. If you message us on WhatsApp or call us: your phone number, your name and whatever you tell us to handle your order or booking.
We do not knowingly process special categories of data or data about minors.
3. Purposes and legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Handling your order, booking or enquiry. | Performance of a contract or pre-contractual steps at your request (art. 6.1.b GDPR). | For as long as the relationship lasts and then for the legal limitation periods. |
| Meeting tax and accounting obligations. | Legal obligation (art. 6.1.c GDPR). | The periods set by tax and commercial law. |
| Measuring how the website is used and how well campaigns work. | Your consent (art. 6.1.a GDPR), which you can withdraw at any time. | According to each tool’s periods; see the cookie policy. |
4. Who can access your data
We do not sell or share personal data. Only the providers needed to deliver the service have access, acting as processors under the contract required by article 28 of the GDPR:
- Web hosting provider: Hostinger International Ltd. (Hostinger), with servers in the European Union.
- Google Ireland Ltd. — analytics (Google Analytics 4), maps and fonts.
- Meta Platforms Ireland Ltd. — campaign measurement and WhatsApp messaging.
- Foodyservice — online ordering platform for our locations.
Data may also be disclosed to public authorities where required by law.
5. International transfers
Some of these providers may process data outside the European Economic Area, mainly in the United States. Those transfers rely on the safeguards in chapter V of the GDPR: the adequacy decision for the EU–US Data Privacy Framework or, failing that, the standard contractual clauses approved by the European Commission.
6. Your rights
You can exercise the following rights at any time:
- Access to the data we hold about you.
- Rectification of inaccurate data.
- Erasure of your data when it is no longer needed.
- Restriction of processing in the cases provided for.
- Objection to processing on grounds relating to your particular situation.
- Portability of the data you have given us.
- Withdrawal of consent at any time, without affecting the lawfulness of earlier processing.
To exercise them, write to elparchesf@gmail.com stating which right you wish to exercise and attaching a copy of a document proving your identity. We will reply within one month.
If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).
7. Automated decisions
No automated decisions or profiling with legal effects on you are carried out.
8. Security
We apply reasonable technical and organisational measures to protect data against loss, unauthorised access or misuse.
9. Changes
This policy may be updated if our services or the law change. The date of the latest version is shown above.