Legal
Last updated: 6 October 2026
The controller of your data is [PENDENT: nom i cognoms o raó social del titular], tax ID (NIF) [PENDENT: NIF], with registered address at [PENDENT: adreça fiscal completa]. For any privacy question, write to us at [PENDENT: email de contacte per a privacitat].
Bookings and gift cards: first name, last name, email, phone and number of people, to manage the booking or voucher, take payment and send you the confirmation. The day after the workshop we send you a single email asking for a review.
Date proposals: email, proposed date, number of people and language, to know how many people want each date, confirm your proposal and let you know if we open it.
Notifications and group enquiries: your email and whatever you write to us, to reply or to let you know when bookings open.
Reminders and new dates: if you tick the consent box when booking, we use your email to remind you once about a booking whose payment wasn't completed and to let you know when we open new dates. So we never send that reminder twice, we keep a hashed code of your email (never the email itself) in Upstash for one week.
Bookings and vouchers are processed to perform our contract with you. Date proposals, notifications, the reminder about an unfinished booking and new-dates emails rely on your consent, which you can withdraw at any time. The review email relies on our legitimate interest, and you can object by replying to it.
We don't sell your data. It is processed on our behalf by providers that keep us running: Stripe (payments), Resend (email delivery and the proposals list), Vercel (website hosting and visit statistics with Vercel Analytics), Upstash (counts of visits and of how many visitors reach each booking step, stored in the United States: made with a hashed code that changes every day, with no IP addresses and no cookies), Formspree (booking and enquiry records), Google (the workshop's internal calendar) and Meta (campaign measurement, with your email hashed). Some are outside the European Economic Area, where the safeguards set out in the GDPR, such as standard contractual clauses, apply.
Booking and voucher data, for as long as accounting and tax obligations require. Date proposals and notifications, until you withdraw your consent or they are no longer useful for that purpose.
You can request access, rectification, erasure, objection, restriction or portability of your data, and withdraw your consent, by writing to [PENDENT: email de contacte per a privacitat]. If you believe we have not handled it properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).