Privacy

Data controller

• Cafe Nomad Sunshine SL, NIF B13789623
• Paseo Marítimo Rey de España 3, Local 8, 29640 Fuengirola (Málaga)
• cafenomadfuengirola@gmail.com · +34 951 53 64 11
• Data protection officer: none appointed. The processing falls under none of the cases of mandatory appointment set out in article 37 of the GDPR.

What we collect, and nothing else

This site uses no analytics tool, no advertising pixel and no tracker. Browsing the site leaves no personal data on our servers beyond the server's technical logs.

We only collect data when you fill in a form on the site.

A table request

• the date, the time and the number of guests
• your name
• your telephone number, with the country code
• your email address
• whatever you write, if you write anything, in the free-text field
• the page the request was sent from, and the date and time it was sent

The free-text field is free: please write no health data in it — allergies included — nor any other sensitive data. For an allergy, tell us when you arrive: it is safer and it works better.

Joining the Nomad Club

Your first name, your email address, your mobile number, and the day and month of your birthday — never the year.

A gift card

The first name and email address of the buyer and of the recipient, the amount and, if the buyer writes one, their message. If payment is made online, a payment reference comes back to us from Stripe — never the card number.

Offers by email

If, and only if, you tick the box provided: your email address, the date of your consent and the exact sentence you agreed to.

What they are used for

Each piece of data serves the one purpose you gave it for: handling your table request, keeping your loyalty card, issuing your gift card, or sending you the month's offers if you have expressly agreed to that.

We only send you marketing if you have ticked the box provided. We do not pass on or sell your data to anyone.

• Table request: steps taken at your request prior to entering into a contract (article 6.1.b GDPR).
• Gift card: performance of the contract (article 6.1.b GDPR).
• Nomad Club and offers by email: your consent (article 6.1.a GDPR), which you may withdraw at any time.

How long we keep them

• Table requests: twelve months, then deleted.
• Nomad Club: for as long as your card is active; deleted at your request, or after three years without a visit.
• Gift card: until the balance is used up, then six years under accounting obligations (article 30 of the Spanish Commercial Code).
• Offers by email: until you unsubscribe, which deletes your address.

Who sees them

• The Café Nomad team, through a password-protected management area.
• Projexo Soluciones, which administers the server, as a data processor.
• Contabo GmbH (Germany), the infrastructure provider.
• The email provider that delivers the booking notification.
• Stripe Payments Europe Ltd (Ireland), only for a gift card paid online.

Your data is processed within the European Union, with one exception: Stripe may transfer certain payment data outside the Union, under the European Commission's standard contractual clauses.

Your card details do not pass through this site. Payment takes place on a Stripe page; we neither see nor keep your card number. We receive only the fact that the payment took place, its amount and a reference.

Where they are kept

Requests are written to a file placed outside the public area of the server, unreachable from the internet. There is no database open to the outside.

Your IP address is not stored with the request. It is used only, as a fingerprint, to prevent repeated submissions of the form, and disappears shortly afterwards.

Your rights

You may at any time ask for access to, rectification, erasure, restriction or portability of your data, and object to its processing. Write to cafenomadfuengirola@gmail.com, or to the address above. If we have serious doubts about your identity, we may ask you for proof. We reply within one month of receiving your request.

If you believe your rights have not been respected, you may lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es).

What the site loads from outside

Nothing. Since 5 October 2026, every resource on the site — images, stylesheets, scripts and typefaces — is served by our own server. The typefaces used to come from Google Fonts, which passed your IP address to Google: that transfer no longer exists.

The links to Google Maps, Instagram, Facebook, Tripadvisor and Restaurant Guru load nothing until you click them.

Language

This English version is provided for convenience. In the event of any discrepancy, the Spanish version prevails.

Last updated

28 October 2026