Privacy policy

This policy explains what personal data is processed when you visit www.tabogocafe.com or write to us, why, and what your rights are. The website has no forms, user accounts, newsletter, online shop, or analytics or advertising tools.

Data controller: TABOGO CAFE, S.L. (single-member limited company) Tax ID (NIF): B93979433 Address: Calle General Etxague 7, ground floor and basement, 20003 Donostia / San Sebastián (Gipuzkoa), Spain Email: hola@tabogocafe.com

Browsing the website. When you visit the website, your browser sends the server technical data: your IP address, the date and time, the page you request, the page you came from and the type of browser and device. We use it only to show you the website and to keep it secure and working, on the basis of our legitimate interest (article 6(1)(f) of the General Data Protection Regulation, GDPR). We do not use it to identify you or to compile statistics. It is logged by our hosting provider, Vercel, and deleted automatically within one day.

Emails. If you write to hola@tabogocafe.com, we process your email address, your name if you give it and whatever you tell us, in order to reply and to deal with your request. The legal basis is our legitimate interest in answering people who write to us and, when you ask us for a service, taking steps before a contract or performing it (article 6(1)(b) and (f) GDPR). We keep messages for as long as the conversation lasts and for up to one year afterwards, unless we must keep them longer because of a legal obligation or to deal with a claim. If you write to us on Instagram, we handle your message in the same way. If you send us data we did not ask for, such as a CV, we delete it as soon as we see we do not need it to reply.

Google Maps. The home page includes a Google Maps map that does not load until you press "Show map": until then, your browser does not connect to Google. When you press it, or follow the "Get directions" link, your browser connects to Google, which receives your IP address and browser data and may use its own cookies. Google LLC processes that data as a controller, under its own privacy policy (policies.google.com/privacy).

Instagram. The Instagram links lead to our account @tabogocafe. The website does not include any Instagram content or code: Meta only receives your data if you follow the link, and processes it under its own privacy policy (privacycenter.instagram.com).

Recipients. We do not share your data with anyone unless the law requires it. The providers who give us these services process it on our behalf, under a data processing agreement: Vercel Inc. (website hosting), ImprovMX (forwarding of mail sent to hola@tabogocafe.com), Google (Gmail, mailbox) and STUDIO MAGNT DONOSTIA, S.L. (website development and maintenance).

International transfers. Vercel Inc. is based in the United States. It participates in the EU-U.S. Data Privacy Framework, which the European Commission considers to ensure an adequate level of protection (Decision of 10 July 2023), and its agreement also includes the Commission's standard contractual clauses. Google LLC, which provides the mailbox and only receives your browsing data if you load the map or open Google Maps, also participates in that framework. If any other provider processes data outside the European Economic Area, it does so with the safeguards of the GDPR, such as standard contractual clauses.

Your rights. You can ask us for access to your data, its rectification or erasure, the restriction of its processing or its portability, and object to our processing it, by writing to hola@tabogocafe.com. We will reply within one month. If you think we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es). We do not make automated decisions or build profiles with your data.

Cookies. This website uses a single first-party cookie: Name: magnt-locale Purpose: to remember the language you choose in the language switcher (Spanish, Basque or English) When it is set: only when you choose a language in the switcher Duration: one year

It is a technical preference cookie that you request yourself by choosing the language, so it does not need your consent (article 22.2 of the LSSI-CE). We do not use analytics or advertising cookies. Google can only set its own cookies if you press "Show map" or open Google Maps, as explained above. You can delete or block cookies in your browser settings; the website will keep working, but it will not remember the language you chose.

Changes. If what the website does changes, for example if we add a form or a newsletter, we will update this policy before doing so.

Last updated: 11 November 2026.