This policy describes how the personal data of people who visit the digital menu of La Vuelta is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

1. Data controller

The controller of the data collected on this website is the owner of the establishment:

  • Company name: QMenut Development
  • Tax ID: DEV00000000
  • Registered address: Development environment
  • Data protection contact: dev-owner@example.com

2. Data processor

The QMenut platform (murga.ing, tax ID Z1225135E) provides the digital-menu technology service and acts as a processor on behalf of the establishment, in accordance with Article 28 of the GDPR.

3. Data processed and purposes

  • Contact form: the name and message you choose to send are used only to respond to your enquiry.
  • Technical connection data: the IP address and basic browser data are processed temporarily to serve the page securely (abuse prevention and error logging). They are not used to create profiles.
  • Loyalty programme (when enabled): if the establishment enables its points programme and you choose to participate, your email, name, and date of birth will be processed to manage your points and benefits. You will be informed when you register.

4. Cookie-free analytics

To understand which dishes and sections attract the most interest, PostHog (PostHog EU, with data hosted in the European Union) is used anonymously: without cookies, without storing data on your device, and without identifying you across visits. Recorded events (for example, viewing the menu or opening a dish) are not associated with your identity.

5. Legal basis

  • Contact form: consent of the data subject (Article 6(1)(a) GDPR).
  • Technical data and anonymous analytics: legitimate interest in security and service improvement (Article 6(1)(f) GDPR).
  • Loyalty programme: performance of the relationship with the participant (Article 6(1)(b) GDPR).

6. Recipients and processors

Data is not disclosed to third parties except where legally required. The following providers act as processors:

  • QMenut — digital-menu platform.
  • Cloudflare, Inc. — hosting and content delivery network.
  • PostHog EU — anonymous, cookie-free analytics (data hosted in the EU).
  • Email delivery provider — transactional messages (e.g. access codes).

Payments by the establishment to the platform are handled by Stripe and do not affect visitors’ menu data.

7. Retention

Contact messages are kept for as long as necessary to handle the enquiry. Loyalty-programme data is kept while you participate or until you request removal.

8. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability by writing to the controller and proving your identity. If you believe the processing is not compliant, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Cookies and storage technologies

This website does not use cookies or equivalent storage technologies on your device for advertising or tracking. That is why no cookie banner is displayed. Only the technical storage strictly necessary for the website to function is used (for example, remembering the language you selected to view the menu), which is exempt from consent under Article 22.2 of the LSSI-CE.

10. Changes to this policy

This policy may be updated to reflect regulatory or service changes. The current version will always be published on this page.

Last updated: 7 July 2026.

MenuHighlightsContactRewards