Privacy

The controller responsible for the processing of your personal data under the General Data Protection Regulation (GDPR, Regulation EU 2016/679) and the Spanish Data Protection Act (LOPDGDD, Ley Orgánica 3/2018) is:

• Pinky Blue Gastro SL
• Tax ID (CIF): B22943617
• Registered office: Paseo Colón 19, 07580 Capdepera, Illes Balears, Spain
• Represented by: Corinna Gantenberg
• Premises: BALUS Bar | Lounge | Grill, Hafenpromenade (harbour promenade), 07590 Cala Ratjada, Mallorca
• E-mail: info@balus-mallorca.com
• Website: balus-mallorca.com

For any data protection matters and to exercise your rights, please contact us at info@balus-mallorca.com.

We process only the personal data you provide to us, together with technically necessary data generated when the website is operated. Depending on the activity, these are:

Table reservations:

• Name, e-mail address, telephone number, preferred date and time, number of guests and any comments.
• Purpose: to manage, process and confirm your table reservation and to communicate with you in connection with it.

Newsletter:

• E-mail address and preferred language.
• Purpose: sending information about events, specials and a birthday voucher.

Voucher requests:

• Name, e-mail address and, where applicable, the details of the gift recipient.
• Purpose: to issue and send the requested voucher.

Technically necessary data / server logs:

• IP address, date and time of access, content accessed, browser type and similar technical information processed by our hosting provider.
• Purpose: provision, stability and security of the website.

Your data is processed on the following legal bases pursuant to Article 6 GDPR:

• Reservations: performance of a contract or pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• Newsletter: your explicit consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future.
• Voucher requests: pre-contractual measures and performance of a contract (Art. 6(1)(b) GDPR).
• Operation and security of the website: our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR).

We store your personal data only for as long as is necessary for the respective purposes:

• Reservation data for as long as necessary to handle the reservation and to comply with statutory retention obligations; thereafter it is deleted or anonymised.
• Newsletter data until you withdraw your consent; after withdrawal it is deleted without undue delay.
• Voucher data for as long as necessary for issuing and redeeming the voucher and to comply with statutory retention obligations.

Once the relevant periods have expired, the data is deleted or irreversibly anonymised.

Your data is treated confidentially and is not disclosed to third parties for advertising purposes. No data is sold. Only service providers acting as processors under a data processing agreement (Art. 28 GDPR) have access to the data:

• Hosting: Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers are located in the European Union (Germany).
• E-mail delivery: if an e-mail or SMTP provider is used to send confirmations or the newsletter, this is always done on the basis of a data processing agreement.

Data is disclosed to public authorities only where we are legally obliged to do so.

As a rule, your data is processed within the European Union or the European Economic Area (EU/EEA). If, exceptionally, a service provider used by us is based outside the EU/EEA, any transfer will take place only with appropriate safeguards under Articles 44 et seq. GDPR, in particular on the basis of the Standard Contractual Clauses adopted by the European Commission.

This website uses only technically necessary cookies that are required for the proper operation of the site. No tracking, no profiling and no advertising or analytics cookies are used. No personal data is processed for advertising purposes or to create user profiles. Should a cookie consent banner be introduced in the future, non-essential cookies will only be set after your explicit consent.

In relation to your personal data, you have the following rights:

• Right of access to the data processed about you,
• Right to rectification of inaccurate data,
• Right to erasure (the “right to be forgotten”),
• Right to restriction of processing,
• Right to object to the processing,
• Right to data portability,
• Right to withdraw consent given, with effect for the future.

To exercise these rights, simply send an e-mail to info@balus-mallorca.com. We may request additional information to verify your identity.

If you believe that the processing of your data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Spain this is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse or alteration. We reserve the right to amend this privacy policy in order to adapt it to changes in legal requirements or to changes in our services. The version published on the website at the time of your visit shall apply.

Last updated: June 2026.