Last updated: July 2026
At Gaby’s values and respects your privacy. This Privacy Policy describes how we collect, use and protect your personal information when you visit our website (hereinafter, the “Site”) and use our services, both at our Sitges (Spain) and Budapest (Hungary) branches, in compliance with Regulation (EU) 2016/679 (GDPR).
1. Data Controller
Company name: Gaby’s
Registered address: Passeig De La Ribera, 19, 08870 Sitges, Spain
Contact email: contacto@gabys.com
2. Information we collect
We may collect and process the following personal data:
Contact details: First name, last name, email address and phone number when you contact us through our forms or direct call links.
Booking data (Sitges branch): When you use our booking system, we collect the information needed to secure your table (date, time, number of guests, name, phone and email).
Browsing data: IP address, browser type, pages visited and browsing time, collected through essential and analytics cookies to improve the user experience.
3. Purpose of Processing
We use your personal information for the following purposes:
To manage and confirm your bookings at our premises.
To answer your questions, information requests or messages sent through the website.
To improve how our Site works and our customer service.
To comply with our legal and tax obligations.
4. Third Parties and Service Providers
To offer you all the features of the Site, we share certain data with external service providers that comply with privacy regulations:
Booking management (Dish.co): Bookings for our Sitges branch are processed through the booking widget from Dish. When you make a booking, your data is processed directly by this platform under its own security standards and privacy policies.
Google Places API reviews: Our Site shows public reviews obtained directly from Google. When loading the avatars (profile pictures) of users who have left reviews, your browser may make direct requests to Google servers, which could record your IP address under their own privacy policy.
5. Data Retention
We will keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting or reporting obligations.
6. Your Rights (ARCO and GDPR rights)
At any time, you have the right to:
Access your personal data.
Rectify inaccurate or incomplete data.
Erase your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
Object to or Restrict the processing of your data in certain circumstances.
Request the portability of your data.
To exercise any of these rights, you can send an email to contacto@gabys.com attaching a copy of your ID document to verify your request. If you believe your rights have not been properly addressed, you have the right to lodge a complaint with the competent supervisory authority (for example, the Spanish Data Protection Agency, AEPD).
7. Data Security
We have implemented the technical and organisational security measures necessary to protect your personal data against accidental loss, unauthorised use or access, alteration or disclosure. All information entered on our Site is transmitted encrypted (HTTPS protocol).
8. Links to Other Websites
Our Site may contain links to third-party websites. We are not responsible for the privacy practices or the content of those external pages. We recommend that you read the privacy policy of any site you visit.