Privacy policy

1. Controller

Nobel Green Restaurante, S.L. (Queenz Dinner Show) · Tax ID (NIF) B67224840 · Registered office: Centro Comercial Oasis 46, Sitges (Barcelona), Spain · Venue: Calle Espalter 2, 08870 Sitges · info@queenzdinnershow.com · WhatsApp +34 638 20 81 78

2. What data we process

• Online booking: name, email, phone, language, date, number of guests, menus and extras, occasion and comments.
• Allergies and accessibility (only if you provide them): allergies, dietary needs and the need for the wheelchair entrance. This is health data and we only use it with your explicit consent.
• Payment: payments are handled by Redsys (Banco Santander), Stripe or PayPal. We never see or store your full card number; we receive the payment reference, the card type and its last 4 digits.
• Contact and group requests: the details you send us via a form, email or WhatsApp.
• News: your email, only if you tick the box to receive news about shows and offers.

3. Purposes and legal basis

• Handling your booking, payment, changes, cancellations and refunds, and sending you the confirmation and your personal link: performance of a contract (Art. 6(1)(b) GDPR).
• Preparing your menu and table according to your allergies or accessibility needs: your explicit consent (Art. 9(2)(a) GDPR). You can withdraw it at any time before your visit by writing to us.
• Accounting and tax obligations: legal obligation (Art. 6(1)(c) GDPR).
• Answering your questions and group requests: steps taken at your request before a contract and legitimate interest (Art. 6(1)(b) and (f) GDPR).
• Payment security and fraud prevention: legitimate interest (Art. 6(1)(f) GDPR).
• Sending you news: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We do not make automated decisions or create profiles.

4. How long we keep it

• Booking and payment data: as long as needed for your booking and any follow-up; after that, for the legal accounting and tax periods (up to 6 years).
• Allergies and accessibility: deleted automatically 30 days after your visit.
• Contact and group requests: up to one year after our last contact, unless they lead to a booking.
• News: until you unsubscribe.

5. Who receives your data

We do not sell or share your data. It is only processed on our behalf by the providers needed for the service:

• Supabase (booking database, servers in the European Union, Ireland).
• Cloudflare (website hosting and security).
• A2 Hosting (our email).
• Redsys / Banco Santander, Stripe and PayPal (payments and refunds), each also responsible for its own legal obligations.
• WhatsApp (Meta), if you contact us via WhatsApp.

Some of these providers are US companies. In that case the transfer is protected by the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses. Authorities may receive data where the law requires it.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to info@queenzdinnershow.com with the subject "Data protection". If you are not satisfied, you can complain to the Spanish Data Protection Agency (www.aepd.es) or the authority in your country.

7. Children

Bookings must be made by adults (18+). Children's data is only processed as part of an adult's booking (for example, the kids menu).

8. Security

The website and payments use encrypted connections (HTTPS). Access to booking data is limited to our team and password-protected.

9. Cookies

We do not use cookies. See our cookie policy.