Privacy policy
Last updated: September 29, 2026
Spain at the Table is a static website. We don’t have user accounts, comments, newsletters or forms, and we don’t set cookies. The only thing this site stores in your browser is your light/dark mode choice (in local storage), and only if you use the switch. It never leaves your device.
Who is responsible
The data controller is the site owner identified in our legal notice, reachable at hello@spainatthetable.com.
What we process, why and for how long
| What | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Technical data of each visit (IP address, browser, page requested, time) | To deliver the pages and protect the site against attacks and abuse | Our legitimate interest in running a secure website (Art. 6(1)(f)) | Kept by our hosting provider for a short period in its security and traffic logs, then deleted or anonymized |
| Aggregate statistics (page views, country, referring site, page speed) | To know which guides are useful | Legitimate interest (Art. 6(1)(f)) | Only aggregate figures, which don’t identify you |
| Emails you send us | To reply to you | Your request (Art. 6(1)(b)) and our legitimate interest in answering | As long as needed to deal with your message, then deleted |
We don’t sell or share data for advertising, we don’t build profiles and we don’t use your data for automated decisions.
Statistics
We use Cloudflare Web Analytics. It doesn’t use cookies or local storage, doesn’t fingerprint your browser and doesn’t follow you across sites or over time. We only see aggregate numbers.
Hosting and email
- Hosting: the site is served by Cloudflare, Inc. Like any web server, it processes the technical data above to deliver pages and stop attacks. Cloudflare acts as our processor.
- Email: messages sent to hello@spainatthetable.com are stored by our email provider, which also acts as our processor.
Transfers outside the EU
Cloudflare is a US company and may process data in the United States. It is certified under the EU-US Data Privacy Framework (and its UK extension), which the European Commission recognizes as providing an adequate level of protection.
Affiliate links
When you click a link to Amazon or another retailer, you leave this site. That retailer may set its own cookies to attribute your purchase to us, under its own privacy policy. We only receive anonymous sales reports (which products were bought), never your name, address or contact details.
Your rights
You can ask for access to, correction or deletion of your data, object to its processing or ask to restrict it, by writing to hello@spainatthetable.com. Because we don’t collect personal data ourselves, there is usually nothing to access beyond your emails. If you think we haven’t handled your data properly, you can complain to a data protection authority: in Spain, the Agencia Española de Protección de Datos (AEPD). This also covers requests under the UK GDPR or US state privacy laws.