Privacy policy

Controller

The controller is Ignacio Julian Iruarrizaga Gastaldi, Individual entrepreneur / self-employed professional, trading as Baristas Club.

Address: Calle Tendería 30, 48005 Bilbao, Bizkaia, España. Email: atbaristas@gmail.com. Website: https://baristasclub.es.

Data processed

This public website does not include registration forms, a private area, online bookings, an online store or user profiles. The App Club is a separate service and its processing activities are not mixed with this public website.

• Basic technical information needed to serve the website and keep it secure.
• The consent preference stored in the browser.
• Analytics browsing data only if the visitor accepts analytics.
• Data voluntarily sent when writing to the public contact email address.

Purposes

• Display, maintain and protect the website.
• Ensure technical operation and security.
• Remember the analytics preference.
• Measure aggregated website use through Google Analytics 4 when consent has been given.
• Respond to messages voluntarily sent to the public email address.

Legal bases

Technical operation and security rely on the owner’s legitimate interest in keeping the website available and secure, and on compliance with applicable obligations where relevant.

The consent preference is stored to manage the visitor’s choice. Google Analytics 4 is used only on the basis of consent. Emails sent to the public contact address are handled depending on the content of the request: pre-contractual steps, consent or legitimate interest in replying and managing the communication.

Google Analytics 4

The website is prepared to use Google Analytics 4 only when the visitor accepts analytics. The measurement ID is configured through the NEXT_PUBLIC_GA_MEASUREMENT_ID variable; it is not active in Preview and in Production it loads only after consent.

The planned measurement includes page views and events such as menu visits, clicks on Get directions, Enter the Club and phone links, language switches and the Euskola promotion view when it is shown.

Names, email addresses, phone numbers, form text and internal customer identifiers are not sent to Google Analytics. Country or city reports are approximate. Advertising, remarketing and ad personalisation are not enabled, Google Ads is not connected at this stage and Google Signals is not enabled from the code.

Recipients and providers

The website uses Vercel Inc. for hosting, deployment and distribution. When analytics is accepted, Google Analytics is involved; in the European environment it is provided by Google Ireland Limited according to Google’s terms.

These providers may process data from countries outside the European Economic Area. Where an international transfer exists, the mechanisms and safeguards required by applicable law, including Standard Contractual Clauses where applicable, and each provider’s processing terms will apply.

Retention

The consent preference is kept in the browser until the visitor changes it or deletes local storage. Analytics data will be retained according to the GA4 property settings and for as long as needed for aggregated analysis.

Email communications will be kept for as long as needed to reply and handle possible legal responsibilities. Technical data will be kept for the periods needed for security, operation and incident management.

Rights

You may request access, rectification, erasure, objection, restriction and portability where applicable, and withdraw consent without retroactive effect, by writing to atbaristas@gmail.com.

Additional information to verify identity will only be requested when necessary. You may also lodge a complaint with the Spanish Data Protection Agency.

Children

The website is not specifically aimed at collecting children’s data and does not include registration forms.

Security and changes

Reasonable measures are applied to protect the website and reduce technical risks. This policy may be updated if the website, providers used or applicable law changes.