The controller responsible for the personal data collected through this website is Mannà Restaurant, tax ID [TAX ID], registered address at Carrer de Llull 74, 08005 Barcelona, and contact email mannarestaurantebcn@gmail.com.

Through the reservation form: name, email address, phone number, requested date and time, number of guests, and any special requests.

Through the contact form: name, email address, and the content of the message.

Data is used exclusively to manage table reservation requests, respond to enquiries sent through the contact form, and send the corresponding confirmation by email. Data is not used for marketing purposes and is not shared with third parties for commercial purposes.

The legal basis for processing is the performance of pre-contractual measures requested by the data subject (managing the reservation) and the user's consent, given by voluntarily submitting the relevant form.

The following providers, acting as data processors, are used to operate the website: Google LLC / Google Ireland Limited (Google Calendar, for internal reservation management, and Gmail, for sending confirmation emails), and Vercel Inc. (website hosting). These providers may store data on servers outside the European Economic Area, under appropriate safeguards (standard contractual clauses or another valid international transfer mechanism).

Data is not shared with third parties for purposes other than those described, except where legally required.

Data is retained for as long as necessary to manage the reservation or enquiry, and afterwards for the periods legally required to address potential liabilities.

Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability by emailing mannarestaurantebcn@gmail.com, attaching a copy of an identifying document.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they believe their data has not been processed in accordance with applicable law.

Appropriate technical and organisational measures have been implemented to ensure the security of personal data and to prevent unauthorised alteration, loss, processing, or access.