Legal Notice

1. Site owner

In accordance with art. 10 of Spanish Law 34/2002 (LSSI-CE):

Company name	DLazaro Toys S.L.
Tax ID (NIF)	B16592040
Registered address	C/ Santiago Álvarez Avellán nº 16, 4º izquierda, 07009 Palma de Mallorca, Spain
Email	info@españabares.es
Website	www.españabares.es

2. Terms of use

Accessing the site means accepting these terms, which DLazaro Toys S.L. may change at any time.

EspañaBares is a directory and promotion platform for hospitality businesses in Spain. Users undertake to use the site lawfully, not to distribute unlawful content, not to impersonate anyone and to provide truthful information. DLazaro Toys S.L. reserves the right to remove content or close accounts that breach these terms.

3. Intellectual property

All content on this site (texts, designs, logos, source code, graphics and databases) is protected by intellectual and industrial property law. Reproduction or distribution without express authorisation is prohibited. EspañaBares and España Bares are registered trade marks.

4. Disclaimer

DLazaro Toys S.L. accepts no liability for: service interruptions caused by technical faults or force majeure; damage caused by viruses introduced by third parties; the accuracy of content published by the listed businesses; or the content of external websites linked from this site.

5. Privacy and data protection

In accordance with the GDPR (EU 2016/679) and Spanish Organic Law 3/2018 (LOPDGDD):

Data controller

DLAZARO TOYS S.L. · NIF B16592040 · Calle Santiago Álvarez Avellán nº 16, 4º izquierda, 07009 Palma de Mallorca, Illes Balears, Spain.
Email for data protection matters: gestiondatos@españabares.es

What we process, and why

Registering a business: name, tax ID, address, phone, email, username and password → to manage the account and publish the venue listing. Legal basis: performance of a contract (art. 6.1.b GDPR).
Contact form: name, email and message → to answer the enquiry. Legal basis: consent (art. 6.1.a).
Usage measurement: pages viewed, search terms, referral source, device type and QR code scans, linked to a random browser identifier. Legal basis: consent (art. 6.1.a), requested in the cookie notice.
Personalisation: venues you mark as favourites and those you have already visited → to remember them and suggest similar ones. Legal basis: consent.
Commercial use and sharing with third parties: building a profile from the above, sending our own commercial communications, and disclosing or sharing that data with hospitality companies and commercial partners. Legal basis: separate, specific consent (art. 6.1.a), asked for separately in the cookie notice and refusable without losing any functionality.

Automated decisions

We take no automated decisions producing legal effects on individuals.

How long we keep it

Business account data: for as long as the relationship lasts and, afterwards, for the statutory retention periods.
Contact form enquiries: 12 months from the last communication.
Measurement and QR usage data: 24 months. After that the detail is deleted and only daily aggregate counts are kept, which identify no one.
Proof of consent (date, version of the text accepted and an encrypted fingerprint of the IP address): kept for as long as it may be needed to demonstrate it, under art. 7.1 GDPR.

Recipients and disclosures

Account and contact data are not shared with third parties except where legally required. Data in the "commercial use and sharing with third parties" group is disclosed to third parties only if you have expressly agreed to it, and only to hospitality companies and commercial partners. You can withdraw that permission at any time, with future effect, from the "Cookie settings" link at the bottom of any page. To measure how the site is used we rely on Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as a processor, through Google Analytics 4, and only where the measurement group has been accepted. Google may process that data on servers outside the European Economic Area; the transfer is covered by the EU-US Data Privacy Framework, to which Google adheres, and by the standard contractual clauses approved by the European Commission. Apart from that case, no international data transfers take place.

Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time, by writing to gestiondatos@españabares.es with your name and a copy of an identity document. Response time: one month. If you are not satisfied, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

6. Cookies

The first time you arrive, a notice lets you accept everything, reject everything or choose group by group. Rejecting takes exactly the same effort as accepting, no group is pre-ticked, and you can change your mind whenever you like from the "Cookie settings" link at the bottom of any page.

Site functionality	Session, language and your own cookie choice. These are essential, so they are not asked for (art. 22.2 LSSI). Cookies: `PHPSESSID`, `eb_consent`.
Measurement	Pages viewed, referral source, searches and QR code scans, with a random identifier that carries no personal data. Our own cookie `eb_uid`, 24 months. In addition, and only if this group is accepted, Google Analytics 4 is loaded and sets its own cookies (`_ga` and `_ga_<id>`, up to 24 months). Requires consent.
Personalisation	Favourites, venues already visited and suggestions. Requires consent.
Commercial use and sharing with third parties	Profiling, commercial communications and possible sharing with companies in the sector. Requires consent and can be refused without losing any functionality.

Our own measurement (pages viewed, searches and QR code scans) is stored entirely on our servers. The only third-party cookie on this site is Google Analytics 4, from Google Ireland Limited, and it is not loaded unless the measurement group is accepted: until you accept, your browser does not request a single file from Google. IP addresses are truncated, and advertising signals and ad personalisation are switched off — those depend on the "commercial use and sharing with third parties" group. Beyond that, data does not leave our servers except in the sharing case described above, which requires your express permission.

The QR codes on digital menus carry a marker in their address that lets us tell the menu was opened by scanning the code. We record the venue, the date and the time — never the location of the device — and only if the measurement group has been accepted.

7. Minors

These services are intended for people over 18. Minors need permission from a parent or guardian.

8. Governing law

These terms are governed by Spanish law. The parties submit to the courts of Palma de Mallorca, except where a mandatory jurisdiction applies.