Privacy policy
Data controller
The data controller for this website is panAustria - Thomas Ackermann, Ronda Migjorn 145A, 07620 Llucmajor, Islas Baleares, Spain. Contact: info@panaustria.es, +34 601 90 46 93.
Legal basis
Personal data is processed on the basis of the GDPR and Spanish data protection law (LOPDGDD 3/2018). Depending on the case, the legal basis is consent (Art. 6(1)(a) GDPR), performance of a contract or pre-contractual measures (Art. 6(1)(b)), or our legitimate interest (Art. 6(1)(f)), e.g. in providing this website securely and reliably.
Server log files when visiting the website
When you visit this website, our hosting provider automatically records technical data such as IP address, browser type, and date/time of access. These server logs are used solely for the security and stability of the service and are deleted after 30 days at the latest. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). We have a data processing agreement with our hosting provider under Art. 28 GDPR.
Contact by phone, WhatsApp or email
If you contact us by phone, WhatsApp or email, we process the data you provide (e.g. name, contact details, content of your inquiry) solely to handle your request. This website does not contain its own contact form; contact happens directly via the linked channels. The legal basis is the performance or preparation of a contract (Art. 6(1)(b) GDPR). Data is deleted once it is no longer needed for that purpose, unless legal retention periods apply.
Google Maps (interactive map)
On our contact page you can load an interactive map via the Google Maps Embed API to help you find us. By default we only show a static map image with no connection to Google at all; only once you actively click "Load interactive map" is the map embedded and a connection established to servers operated by Google Ireland Limited (or Google LLC in the US), transmitting your IP address to Google and allowing Google to set its own cookies. This happens regardless of whether you have a Google account or are logged in. The legal basis is the consent you give by clicking (Art. 6(1)(a) GDPR). More information: Google's privacy policy at policies.google.com/privacy.
Google reviews
We display a selection of genuine Google reviews about our business on this website. Review text and star ratings are fetched once, at the time the website is built, via the Google Places API and embedded statically — visiting the page does not, by itself, establish a connection to Google. However, the profile photos shown alongside reviews are loaded directly from Google's servers, which transmits your IP address to Google when you view these reviews. The legal basis is our legitimate interest in displaying customer feedback (Art. 6(1)(f) GDPR).
Facebook posts
We may display a selection of recent posts from our Facebook page on this website. Post text is fetched at the time the website is built via the Meta Graph API and embedded statically — visiting the page does not, by itself, establish a connection to Meta/Facebook. If posts contain images, these are loaded directly from Facebook's servers, transmitting your IP address to Meta Platforms Ireland Limited. The legal basis is our legitimate interest in up-to-date business communication (Art. 6(1)(f) GDPR). More information: Meta's privacy policy at facebook.com/privacy/policy.
Fonts
The fonts used on this website are served locally from our own server. No connection to Google Fonts or other external font services is made, so no data is transmitted to third parties for this purpose.
Cookies
This website does not automatically set cookies when you visit it. Only if you actively click "Load interactive map" on our contact page may Google set its own cookies when the map loads (see the "Google Maps" section above).
Your rights
Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). You may withdraw any consent given at any time, with future effect. To exercise these rights, an informal message to the contact details above is sufficient.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular the Spanish Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es.
Security measures
We use technical and organizational measures to protect your data against loss, misuse, and unauthorized access, including SSL/TLS encryption of data transmission and regular updates to our systems (Art. 32 GDPR).
This privacy policy may be updated from time to time. We recommend reviewing it periodically. Draft based on the GDPR and Spanish LOPDGDD 3/2018 – not a substitute for legal advice. Please have it reviewed by a gestor/lawyer before going live.