Last updated: October 2026
This English version is provided for convenience. If there is any discrepancy, the Spanish version prevails.
This policy explains what personal data we process on elpase.pro, why, and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| You use the diagnosis or the menu analysis | Your restaurant's figures | To calculate your result. They are processed and stored only in your browser: they do not reach us. | No processing on our side |
| You ask to receive your analysis by email | Email and a summary of your result | To send you the analysis | Your consent (art. 6.1.a GDPR) |
| You buy an analysis, document or session | Name, email, amount and payment data | To manage the purchase, deliver it and issue the receipt or invoice | Performance of the contract and legal obligation (art. 6.1.b and c GDPR) |
| You request your adviser roadmap | Name, email, restaurant, city and the figures you enter | To prepare and send you the roadmap | Performance of the contract (art. 6.1.b GDPR) |
| You book a session | Name, email and chosen time | To organise the video call | Performance of the contract (art. 6.1.b GDPR) |
| You write to us | The data you send us | To reply to you | Your consent and our legitimate interest in responding |
We will only send you marketing communications if you expressly agree; you can unsubscribe at any time with the link in each email or by writing to us.
Purchase and billing data, for the periods required by tax and commercial law (generally six years). The email used to send the analysis, until you unsubscribe. Everything else, for as long as needed to provide the service and deal with any liabilities.
We do not sell or share your data. Only the providers we need to deliver the service access it, as data processors under a GDPR-compliant contract:
Some of these providers may process data outside the European Economic Area. In that case they do so with the safeguards provided for in the GDPR: an adequacy decision (EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.
This site does not use its own or third-party cookies for analytics or advertising, and fonts are served from our own server. It only stores in your browser (local storage) the figures you enter, your progress and your chosen language, so you don't lose them when you come back from the payment gateway. This is technical storage, necessary for the service you request, and therefore does not require consent (art. 22.2 LSSI-CE). You can delete it in your browser settings. Stripe's payment gateway, which opens on its own domain, may use its own technical and fraud-prevention cookies.
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to hola@elpase.pro with the subject "Data protection". If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).
We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), certified providers and access limited to those who need it.
We may update this policy to reflect legal or service changes. The version in force is always the one published on this page.