Privacy policy

GDPR · LOPDGDD · Política de Privacidad · Updated: April 2026

Overview

Data controller
Principles
Access & server log files
Cookies
Contact form & email
Hosting (Netlify)
Email delivery (Resend)
Fonts & assets
Analytics
Social media links
Your rights
Changes

1. Data controller under the GDPR

Weebee Design S.L.
C/ Gremi de Fusters 33, Local 6
07009 Palma de Mallorca · Illes Balears · Spain
Sole Director: Simon Holst
Email: fabian@fullhouse-gastro.com
Phone: +34 664 134 043

2. Principles

We process personal data exclusively on the basis of applicable laws — in particular the EU General Data Protection Regulation (GDPR), the Spanish Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD), and German telemedia / digital services law. Our principle: as little as possible, as long as necessary, always transparent.

3. Access & server log files

When you visit our website, our hosting provider (Netlify, see section 6) automatically collects data in server log files that your browser transmits:

IP address (deleted or anonymised after 7 days)
Date and time of access
URL / files requested
Referrer URL
Browser type, version, language
Operating system

This data is not attributable to specific individuals by us. No merging with other data sources takes place. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure operation of the website).

4. Cookies

This website uses only technically necessary cookies — for example for form tokens or temporary security functions. We do not set analytics or marketing cookies without your explicit consent. You can disable cookies in your browser at any time — in exceptional cases this may restrict certain functions.

5. Contact form & email

If you fill in the contact form on this site or write to us directly by email, we process the following data:

Name
Restaurant name (optional)
Email address
Phone / WhatsApp number (optional)
Content of your message

Purpose: processing your enquiry. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual steps) or (f) (legitimate interest in efficient communication). We delete your enquiry data as soon as it is no longer required — at the latest after the expiry of any statutory retention periods (up to 10 years under Spanish tax law if a contract arises).

6. Hosting (Netlify)

Our website is hosted by:
Netlify, Inc., 512 2nd Street, Fl 2, San Francisco, CA 94107, USA
netlify.com/privacy

Netlify processes technical data (IP address, timestamps, user agent) to deliver the site. Data transfer to the USA is covered by Standard Contractual Clauses (Art. 46 (2) (c) GDPR) and Netlify's certification under the EU-U.S. Data Privacy Framework. Legal basis: Art. 6 (1) (f) GDPR.

7. Email delivery (Resend)

For processing contact form submissions and sending transactional emails we use:
Resend (Resend, Inc.), 2261 Market Street #5039, San Francisco, CA 94114, USA
resend.com/legal/privacy-policy

When you submit the contact form, form data (see 5.) is transmitted over an encrypted connection to Resend and delivered from there to us via email. Resend stores delivery log data and may use it for debugging and anti-abuse purposes. Transfer to the USA is based on Standard Contractual Clauses. Legal basis: Art. 6 (1) (b) / (f) GDPR.

8. Fonts & static assets

We use the following fonts, which are served locally from our servers — so no connection to third parties takes place:

Cormorant Garamond (SIL Open Font License)
DM Sans (SIL Open Font License)
JetBrains Mono (SIL Open Font License)

No third-party font services (e.g. Google Fonts) are used.

Decorative photography

Some background and article images are provided by Unsplash (Unsplash, Inc., USA) and loaded via their CDN. Unsplash may process visitors' IP addresses. Legal basis: Art. 6 (1) (f) GDPR.

9. Analytics

We currently do not use any analytics tools such as Google Analytics, Matomo, Plausible or similar. Should we use such tools in the future, we will update this policy accordingly and — if required — add a consent prompt.

Our site contains links to Instagram and Facebook. These are simple links (no social plugin). Personal data is only transmitted to Meta Platforms Ireland Limited once you actively click one of these links. Meta is solely responsible for the data processing that happens there. Details: facebook.com/privacy/policy.

11. Your rights as a data subject

Under the GDPR you have the following rights at any time:

Access (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure / "right to be forgotten" (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to certain processing (Art. 21 GDPR)
Withdrawal of any consent given (Art. 7 (3) GDPR)
Complaint to a supervisory authority (Art. 77 GDPR) — the competent authority is the Spanish Agencia Española de Protección de Datos, aepd.es

An informal email to fabian@fullhouse-gastro.com is sufficient.

12. Changes to this policy

We reserve the right to adapt this privacy policy so that it always meets the current legal requirements or to reflect changes to our services. The current version applies to your next visit.