Who owns this website
This site belongs to Gelato Fest BCN, a gelato shop open to the public at Carrer de Lepant, 298, 08025 Barcelona. Contact phone: +34 675 66 40 38.
Data controller
For the purposes of Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the data controller is the owner named above. You can reach us through any of the contact routes on this page.
What data we handle
This website has no forms, no user accounts, no cart, no analytics and no advertising. We ask you for no personal data, and there is no way for you to leave any here.
Only two things are involved:
- Technical connection data. Each time a page is served, the hosting provider automatically logs the IP address, browser type, date and time, and the page requested.
- The phrase of the day. It is kept in your browser’s local storage, together with the time it was picked, so that it does not change for 12 hours. It never leaves your device, it is never sent to a server, and it cannot identify you.
Purpose and legal basis
- Serving the site and keeping it secure. Connection logs make it possible to detect faults and attacks. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR) in the site working and not being attacked.
- Keeping your phrase of the day. It is part of the very service you request by opening the page, and it happens entirely on your device.
No profiling is carried out and no automated decisions with legal effects are taken.
Storage on your device
This site sets no cookies: none of its own and none from third parties, whether technical, analytics or advertising.
It does use your browser’s local storage, with a single key holding the phrase of the day. Article 22.2 of Spanish Law 34/2002 (LSSICE) governs the use of storage and retrieval devices on users’ equipment; here it is used solely to provide the service you requested by opening the page. You can delete it at any time by clearing the site’s data in your browser — the site will keep working just the same.
Who else has access
We do not share or sell data to third parties. The site is hosted on Vercel, which acts as data processor and is what logs the technical connection data described above.
Vercel is a company based in the United States, so that technical data may be processed outside the European Economic Area. The transfer relies on the mechanisms set out in Chapter V of the GDPR.
How long it is kept
Connection logs are kept by the hosting provider for the period set by its own policy, and are used only for technical and security purposes. The phrase of the day expires on its own after 12 hours and is replaced by another.
Your rights
You may access your personal data, rectify it, erase it, object to processing, request its restriction and ask for portability.
To exercise these rights, write to us or drop by the shop: Carrer de Lepant, 298, 08025 Barcelona. We may ask you to prove your identity, so that nobody receives data that is not theirs.
If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.
Changes to this policy
If anything changes — for example, if analytics or a contact form are added in the future — we will update this document and the date shown above before the change goes live.