Privacy policy

The Spanish version is the legally binding text: Política de Privacidad.

Data controller

NUEVOCAFE INVERSIONES, S.L. (trade name: La Vaca y La Huerta), Tax ID (CIF) B83771139, registered address Calle de Recoletos, 7, 28001 Madrid, Spain. Contact: vacayhuerta@gmail.com · +34 917 811 586.

Events form

We use the name, contact details and information you send us only to reply to your enquiry. Legal basis: your request (art. 6.1.b GDPR).

Retention: we keep each enquiry for an initial maximum of 12 months from submission, or less if it is no longer needed earlier. A daily automatic process deletes enquiries older than that, except those for events with a future date still pending. If the enquiry leads to a contract, the necessary data will be kept for the periods required by law.

Virtual assistant

To answer your questions, the assistant processes the messages in the conversation at that moment; this processing is necessary to give you an answer. Visitor conversation logging is currently disabled and we do not store your conversations. If it is enabled in the future, we may store questions and answers to analyse frequent queries, detect incomplete answers and improve our service. The log groups messages under a random conversation identifier, not linked to an account, advertising cookie or IP address.

Before storing questions and answers, we apply automatic cleaning to reduce detectable personal data such as emails, phone numbers, ID documents, card or account numbers and some stated names. This cleaning has limitations and does not guarantee the removal of all personal data: conversations should not be considered fully anonymous. Please avoid sharing personal or health data; for allergy questions, call the restaurant.

Intended legal basis for that log, if enabled: legitimate interest in improving the service (art. 6.1.f GDPR), subject to a prior assessment that has not yet been completed. Conversations are not used for training or commercial tracking.

Retention: an automatic process runs every hour and deletes the questions, answers and data of each conversation once they exceed 90 days. Because of this technical execution margin, a message may be kept for at most about 90 days plus one hour. Afterwards only aggregated statistical counts remain, which identify no one.

Providers involved

Lovable (Lovable Labs Incorporated): website hosting and database (Lovable Cloud) for the events form and the conversation log, with access restricted to authorised staff. This project's database is hosted in the European Union region (Ireland). The website is served through a global delivery network. According to the Data Processing Agreement published by Lovable, it does not use its customers' personal data to train AI models and only transfers data outside the European Economic Area with the safeguards set out in that agreement; its list of sub-processors is published on lovable.dev.
Virtual assistant AI service: messages are sent through Lovable's AI gateway to an OpenAI model (GPT-6 Luna) to generate answers, which may involve processing outside the European Economic Area.
CoverManager: manages bookings on its own external platform, as controller or processor according to its own terms.

Pending verification: formal acceptance of the data processing agreement with Lovable for this account, the specific transfer mechanism applied to each sub-processor, and how long the AI provider keeps messages processed through the gateway. They are not stated because they could not be confirmed.

Before enabling visitor logging the legitimate interest assessment must be completed and documented and the provider conditions above confirmed.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to vacayhuerta@gmail.com, and lodge a complaint with the Spanish Data Protection Agency (aepd.es).