Privacy Policy

PDH Fairlight Holdings, S.L., NIF B23917354 [Pending confirmation], registered office Plaza de la Solidaridad 12, 5th floor, 29006 Málaga, Spain.

Contact for data protection matters: [Pending confirmation]

The company has not appointed a Data Protection Officer, as it is not required to under Article 37 GDPR and Article 34 of Spanish Organic Law 3/2018 (LOPDGDD). [Pending confirmation]

Purpose: to read and answer the enquiry you send us, and to keep a record of it.

Data: name, company (optional), email address, subject, message and language of the page. We also record the date and time of the message. Please do not include sensitive data.

Required fields: name, email, subject and message are needed to answer you; if you do not provide them, we cannot process the enquiry.

Legal basis: our legitimate interest in answering enquiries that you send us yourself (Article 6(1)(f) GDPR). Where the enquiry concerns a possible business relationship with you, the basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). Your data will not be used for marketing.

Retention: for as long as needed to deal with the enquiry and, after that, for [Pending confirmation]. After this period, messages are deleted.

Enquiries about Loulu Bistró or Monalú: these establishments are operated by Komoyo, S.L. Please contact them directly through their own channels. If an enquiry about them reaches us through this form, it will only be passed to Komoyo, S.L. if needed to answer it. [Pending confirmation]

When you visit the website, our hosting providers process your IP address and basic technical data (browser, time of request) to deliver the pages and protect them against abuse. Legal basis: legitimate interest in the security and operation of the website (Article 6(1)(f) GDPR). Retention: according to the providers' log settings. [Pending confirmation]

The contact form includes anti-spam checks (a hidden field and a minimum completion time). These do not use cookies or create profiles.

The Loulu Bistró and Monalú pages display ratings, reviews and photographs supplied by Google through its Places service. Our server requests this information from Google and shows it to you; photographs are delivered through our own server, so your browser does not connect to Google when viewing them, and no personal data about you is sent to Google for this purpose.

Reviews show the name and, where available, the profile link of their authors exactly as Google supplies them. This information is displayed only temporarily, is refreshed at least every 6 hours and is not stored permanently. If you are a review author, you can manage your review in your Google account.

If you click on a Google link (for example, 'View on Google' or 'Location & directions'), you will leave this website and Google's privacy policy will apply: https://policies.google.com/privacy

We do not sell your data or transfer it to third parties for their own purposes, unless required by law (for example, to courts or public authorities).

The following technical providers process data on our behalf as data processors: Lovable (website hosting and platform) and its infrastructure providers, including Cloudflare (content delivery and security) and Supabase (database where messages are stored). Google acts as a provider of the Places service used by our server. [Pending confirmation]

Some of these providers are based in the United States or may process data outside the European Economic Area. Where this happens, transfers rely on the mechanisms provided by the GDPR, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. The location of the data and the guarantees applicable to each provider are being verified. [Pending confirmation]

You can ask for access to, rectification or erasure of your data, restriction of processing, and data portability where applicable. You may also object at any time, on grounds relating to your particular situation, to processing based on legitimate interest.

To exercise your rights, write to [Pending confirmation] stating which right you wish to exercise. We will reply within one month, which may be extended by two months for complex requests.

If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, C/ Jorge Juan 6, 28001 Madrid.

We do not make automated decisions or create profiles.