LEGAL PAGES AND COOKIES
LEGAL PAGES AND COOKIES
Legal Notice · Privacy Policy · Cookie Policy
Owner: GRAN BUFFET LIBRE, S.L.
Website: www.granbuffetlibre.com
Last updated: August 27, 2026
1. LEGAL NOTICE
1.1. Owner identification details
In compliance with Spanish Law 34/2002 of July 11 on Information Society Services and Electronic Commerce, users are informed that the owner of this website is:
Owner: GRAN BUFFET LIBRE, S.L.
Tax ID (CIF): B17818311
Registered office: Avenida de Galicia, 2-4, Polígono Industrial Mas Morató, 17700 La Jonquera (Girona), Spain.
Commercial Registry: Commercial Registry of Girona, volume 2184, folio 158, section 8, sheet GI-36567.
Website: https://www.granbuffetlibre.com
Email: reservas@granbuffetlibre.com
Telephone: +34 972 555 878
1.2. Purpose and scope
This Legal Notice governs access to, browsing and use of the website www.granbuffetlibre.com, as well as the responsibilities arising from the use of its content, including texts, images, photographs, videos, designs, logos, code and any other protected creation.
Access to the website grants the status of user and implies acceptance of this Legal Notice. If the user does not agree with its content, they must refrain from using the website.
1.3. Conditions of access and use
The user agrees to use the website diligently, lawfully and respectfully. In particular, it is prohibited to:
• Use the website for unlawful or fraudulent purposes or in any way contrary to good faith and public order.
• Introduce or distribute viruses, malicious software or any element that may damage, alter or prevent the normal operation of the website or third-party systems.
• Attempt to gain unauthorised access to restricted areas, accounts, systems or databases.
• Reproduce, copy, distribute, transform or exploit the website's content without authorisation where such authorisation is required.
• Impersonate other persons or provide false or inaccurate information in communications addressed to the owner.
The owner may restrict or suspend access to the website if it detects use contrary to these conditions, applicable legislation or the rights of third parties.
1.4. Intellectual and industrial property
The content of the website and the elements that comprise it are owned by GRAN BUFFET LIBRE, S.L. or are used with the corresponding authorisation or licence. They are protected by Spanish, European and international intellectual and industrial property regulations.
Access to the website does not grant the user any ownership rights over its content or authorise its commercial exploitation. Viewing and, where applicable, downloading or printing for exclusively personal and non-commercial use is permitted, provided that notices of authorship or ownership are not removed or altered.
The trademarks, trade names, signs, logos and other distinctive signs appearing on the website belong to their respective owners. Their use without prior authorisation is prohibited.
1.5. Accuracy of information and availability
The owner endeavours to ensure that the information published is clear, accurate and up to date. However, the content is provided for informational purposes and may be modified. Prices, promotions, opening hours, availability, products and services should, where necessary, be confirmed through the official contact channels.
The owner does not guarantee uninterrupted availability of the website and shall not be liable for interruptions, technical errors, incompatibilities, network failures, acts of third parties or force majeure, without prejudice to any liability that cannot legally be excluded.
1.6. Third-party links and services
The website may contain links to third-party websites or services, such as Google, Instagram or Facebook. These links are provided to offer additional information or facilitate contact and do not imply that the owner controls or endorses their content, policies or practices.
When users access an external website, they become subject to that third party's terms and policies. GRAN BUFFET LIBRE, S.L. shall not be liable for damages arising from the use of external websites, unless otherwise provided by law.
1.7. Security
Reasonable measures are implemented to protect the website and reduce the risks of unauthorised access, loss, alteration or disclosure. However, no system connected to the Internet can guarantee absolute security. Users should take appropriate measures to protect their devices and communications.
1.8. Modifications
The owner may modify the design, content, services and legal terms of the website to adapt them to technical, operational or regulatory changes. The version in force will be the one published on this page together with its last updated date.
1.9. Governing law and jurisdiction
This Legal Notice is governed by Spanish law. Any dispute shall be submitted to the competent courts and tribunals in accordance with the applicable procedural and consumer protection regulations.
2. PRIVACY POLICY
2.1. Data controller
The controller responsible for processing personal data collected through this website and its associated contact channels is GRAN BUFFET LIBRE, S.L., with Tax ID (CIF) B17818311 and registered office at Avenida de Galicia, 2-4, Polígono Industrial Mas Morató, 17700 La Jonquera (Girona), Spain.
For any privacy-related enquiries or to exercise your rights, you may write to reservas@granbuffetlibre.com, stating “Data Protection” in the subject line, or send a written request to the registered office indicated above.
2.2. Data that may be processed
Depending on the channel used and the request made, the following categories of data may be processed:
• Identification and contact details, such as first name, surname, telephone number and email address.
• Data related to enquiries, reservations, groups and celebrations, such as the planned date, approximate number of people, type of celebration, preferences and message content.
• Professional and academic information contained in a CV when the “Join Our Team” channel is used or an application is submitted.
• Technical and browsing data, such as IP address, online identifiers, device or browser type, security logs and usage data obtained through cookies or similar technologies.
• Any other information voluntarily provided by the user in their communication that is relevant to handling their request.
Users are requested not to provide specially protected data or unnecessary information. If a communication contains third-party data, the person submitting it declares that they have sufficient authorisation to provide such data.
2.3. Purposes, legal bases and retention
Enquiries, requests for information, reservations, groups and celebrations
The data is used to respond to enquiries, manage availability requests, prepare quotations or proposals, process reservations and provide customer service.
The legal basis is the implementation of pre-contractual measures requested by the data subject, the performance of the contractual relationship where applicable and, where appropriate, the controller's legitimate interest in properly handling and managing communications received.
Data will be retained for as long as necessary to deal with the request. If a reservation or contractual relationship is formalised, the data will be retained for the duration of that relationship and subsequently blocked for the applicable statutory limitation periods and compliance with legal obligations.
Enquiries that do not result in a relationship will be deleted or anonymised when they are no longer necessary, unless there is a legal obligation to retain them or a potential claim.
Recruitment processes and CVs
When a CV or job application is submitted, the data will be processed to assess the applicant's profile, contact the applicant and manage recruitment processes.
The legal basis is the implementation of pre-contractual measures at the applicant's request. Where consent is requested to retain a CV for future vacancies, such retention will be based on consent, which may be withdrawn at any time.
CVs will be retained for the duration of the recruitment process and for a maximum of twelve months from receipt or the most recent update, unless the applicant withdraws their application earlier or it is necessary to retain blocked data in order to address legal liabilities. After this period, the data will be securely deleted.
Website operation, security and statistics
Necessary technical data is processed to enable browsing, maintain security, prevent abuse, diagnose errors and ensure the website operates correctly.
The legal basis is the owner's legitimate interest in maintaining a secure and operational website and, where applicable, compliance with legal obligations.
Analytics or measurement data that is not strictly necessary will only be processed when the user has given consent through the cookie management tool. Retention periods are indicated in the Cookie Policy and in the settings panel.
Exercise of rights and legal obligations
Data provided for the purpose of exercising rights or submitting a complaint will be used to verify the request, respond to it and demonstrate compliance with the controller's legal obligations.
The data will remain blocked for the periods during which liabilities may arise.
2.4. Required data
Fields marked as mandatory are necessary to process the corresponding request. If they are not provided, it may not be possible to respond, manage a reservation, prepare information for groups or assess an application.
The user guarantees that the data provided is truthful, accurate and up to date.
2.5. Recipients and data processors
Personal data is not sold. It may only be disclosed or made available to:
• Technology providers that supply services necessary to host, maintain and operate the website, manage forms or contacts, email, security, backups and technical support.
• Wix and its associated providers, as the website hosting and publishing platform and, where applicable, for forms, CRM, analytics and consent management, acting in accordance with their terms and data processing agreements.
• Professional advisers, auditors or administrative service providers where necessary to manage the relationship or comply with legal obligations.
• Public administrations, authorities, courts and tribunals where required by law or pursuant to a valid request.
These third parties will process the data solely to provide the relevant service or comply with their legal obligations, subject to the applicable contractual and security safeguards.
2.6. International transfers
The Wix platform may process or host information in the European Union, Israel, the United States or other jurisdictions.
Where international transfers take place, mechanisms recognised by applicable regulations will be used, such as adequacy decisions, Standard Contractual Clauses or other appropriate safeguards.
Up-to-date information can be found in Wix's Privacy Policy:
https://es.wix.com/about/privacy
2.7. Rights of data subjects
Any person may request from the controller, where applicable:
• Access to their personal data and information regarding its processing.
• Rectification of inaccurate or incomplete data.
• Erasure of their data when it is no longer necessary or another legal ground applies.
• Objection to processing based on legitimate interests for reasons relating to their particular situation.
• Restriction of processing in the circumstances provided for by applicable regulations.
• Data portability where processing is based on consent or a contract and is carried out by automated means.
• Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
Requests may be sent to reservas@granbuffetlibre.com with the subject “Data Protection” or to the registered office.
The request must indicate the right the person wishes to exercise and provide the minimum information necessary to identify the request. Additional documentation will only be requested where there are reasonable doubts regarding identity.
If you believe that your rights have not been properly respected, you may lodge a complaint with the Spanish Data Protection Agency:
2.8. Minors
The website is not specifically intended for children under fourteen years of age. Children under this age must not provide personal data without the authorisation of their parent or legal guardian.
If the controller becomes aware of data submitted without the necessary authorisation, reasonable measures will be taken to delete it.
2.9. Security and confidentiality
The controller applies technical and organisational measures appropriate to the level of risk in order to preserve the confidentiality, integrity and availability of personal data. Access is restricted to persons and providers who need to process the information for the purposes described.
However, the Internet is not a completely secure environment. Users should avoid sending particularly sensitive or unnecessary information by email or through general-purpose forms.
2.10. Social networks and external links
The website contains links to Gran Buffet Libre profiles on social networks and to third-party services.
When users click on these links, they leave this website and the third party may process data in accordance with its own policy. The presence of a link does not mean that GRAN BUFFET LIBRE, S.L. controls the processing carried out by the external platform.
2.11. Automated decision-making
GRAN BUFFET LIBRE, S.L. does not make decisions through this website based solely on automated processing that produces legal effects or similarly significantly affects the user.
2.12. Policy updates
This Privacy Policy may be updated when the processing activities, website services or applicable regulations change.
The applicable version will be the one published on this page. Where a change requires renewed consent, such consent will be requested before the relevant processing is carried out.
3. COOKIE POLICY
3.1. What are cookies?
Cookies are small files or identifiers that are stored on or accessed from the user's device when they visit a website.
They make it possible to remember certain preferences, maintain security, provide technical functions and, where consent is required, measure website usage or fulfil other purposes.
Similar technologies may also be used, such as local storage, pixels, tags or online identifiers. In this policy, the term “cookies” includes these technologies where they perform an equivalent function.
3.2. Controller
The controller responsible for the use of cookies on www.granbuffetlibre.com is GRAN BUFFET LIBRE, S.L., with Tax ID (CIF) B17818311.
For enquiries related to this policy, please contact reservas@granbuffetlibre.com.
3.3. Types of cookies used by the website
Technical or essential cookies
These are necessary for the website to function, load correctly, maintain security, manage sessions, prevent attacks and remember privacy choices.
They are not used for advertising purposes and may be installed without consent when strictly necessary.
Functional or preference cookies
These make it possible to remember options selected by the user, such as language or certain preferences.
Where they are not strictly necessary to provide a requested function, they will only be activated with the user's consent.
Analytics cookies
These provide aggregated information about how the website is used, allowing visits and performance to be measured and potential improvements to be identified.
Non-essential analytics cookies, including those associated with Wix Analytics if enabled, will only be activated after the user has accepted them.
Marketing cookies
These may be used to measure campaigns or display advertising related to the user's interests.
They will not be activated without consent. If an advertising integration such as Meta Pixel or Google Ads is added in the future, the settings panel and this policy will be updated beforehand.
3.4. Essential cookies associated with Wix
The website is developed and hosted on Wix. Depending on the configuration and features used, Wix may use the following essential cookies. Not all of them will necessarily be installed during every visit.
XSRF-TOKEN
Purpose: fraud detection and request protection.
Duration: session.
Type: essential.
hs
Purpose: security of legacy platform components.
Duration: session.
Type: essential.
svSession
Purpose: security, stability and core website functionality.
Duration: 12 months.
Type: essential.
SSR-caching
Purpose: page performance and rendering.
Duration: 24 hours.
Type: essential.
TS*
Purpose: detection and prevention of attacks.
Duration: session.
Type: essential.
bSession
Purpose: measurement of system effectiveness and stability.
Duration: 24 hours.
Type: essential.
fedops.logger.sessionId
Purpose: tracking session errors and issues to ensure resilience.
Duration: 12 months.
Type: essential.
_wixAB3|*
Purpose: conducting tests and experiments relating to website functionality.
Duration: 6 months.
Type: essential.
server-session-bind
Purpose: protection of the platform's programming interfaces.
Duration: session.
Type: essential.
client-session-bind
Purpose: protection of the platform's programming interfaces.
Duration: session.
Type: essential.
oAuthState
Purpose: identification and security during a session.
Duration: session.
Type: essential.
wixSession
Purpose: security, stability and core website functionality.
Duration: 12 months.
Type: essential.
sec-fetch-unsupported
Purpose: indicates browser limitations affecting security features.
Duration: session.
Type: essential.
Technical source: Wix cookie documentation.
https://support.wix.com/es/article/cookies-y-tu-sitio-wix
3.5. Consent manager and updated list
The website uses Wix's integrated consent manager, provided through Usercentrics, to display the available categories and record the user's preferences.
The panel includes the list generated by the website scan, including the detected providers and retention periods, and forms part of this Cookie Policy.
When first accessing the website, users may accept all non-essential cookies, reject them or configure them by category.
The option to reject cookies must be as readily available as the option to accept them. Non-essential cookies remain blocked until the user makes an affirmative choice.
3.6. Legal basis and withdrawal of consent
Strictly necessary cookies are used to provide the requested service, maintain security and ensure the technical operation of the website.
Non-essential functional, analytics and marketing cookies are based on the user's consent.
Consent may be withdrawn or modified at any time using the privacy control or icon available on the website.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal, but it will prevent rejected cookies from continuing to be used.
3.7. Third-party cookies and international transfers
When users accept third-party services, those third parties may process technical identifiers or browsing data in accordance with their own policies.
Some companies may be located outside the European Economic Area. In such cases, the provider must apply the safeguards required by applicable regulations, such as adequacy decisions or Standard Contractual Clauses.
External links to Google, Instagram or Facebook do not, by themselves, install cookies from those platforms on this website when they are simple links.
Once the user clicks on the link and accesses the external platform, the third party's policies will apply.
3.8. Browser settings
In addition to the consent panel, users may allow, block or delete cookies through their browser settings.
Blocking essential cookies may prevent certain parts of the website from functioning correctly.
Google Chrome:
https://support.google.com/chrome/answer/95647?hl=es
Mozilla Firefox:
https://support.mozilla.org/es/kb/Borrar%20cookies
Microsoft Edge:
https://support.microsoft.com/es-es/microsoft-edge/eliminar-las-cookies-en-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Safari:
https://support.apple.com/es-es/guide/safari/sfri11471/mac
3.9. Cookie Policy updates
This policy may be updated when cookies, providers, purposes or applicable regulations change.
Users are advised to review it periodically and to run a new scan using the consent manager after adding new applications, code or integrations.
4. CONTACT
For enquiries relating to this Legal Notice, Privacy Policy or Cookie Policy, you may contact GRAN BUFFET LIBRE, S.L. by email at reservas@granbuffetlibre.com, by telephone at +34 972 555 878 or in writing at Avenida de Galicia, 2-4, Polígono Industrial Mas Morató, 17700 La Jonquera (Girona), Spain.
Last updated: August 27, 2026.