PÁGINAS LEGALES Y COOKIES
LEGAL PAGES AND COOKIES
Legal Notice · Privacy Policy · Cookie Policy
Owner: GRAN SOL BUFET GIRONA SOCIEDAD LIMITADA
Website: www.gransolbuffet.com
Last updated: 28 August 2026
1. LEGAL NOTICE
1.1. Identification details of the owner
In compliance with Spanish Law 34/2002 of 11 July on information society services and electronic commerce, users are informed that the owner of this website is:
Owner: GRAN SOL BUFET GIRONA SOCIEDAD LIMITADA
Tax ID (CIF): B55143218
Registered office: Carrer de Miquel Martí i Pol, s/n, unit 5, premises 2.2, 17190 Salt (Girona), Spain.
Commercial Registry: Commercial Registry of Girona, volume 2882, folio 35, section 8, page GI-52966.
Website: https://www.gransolbuffet.com
Email: bufetlibresolgirona@hotmail.com
Telephone: +34 972 439 095
1.2. Purpose and scope
This Legal Notice governs access to, browsing and use of the website www.gransolbuffet.com, as well as the liabilities arising from the use of its content, including text, images, photographs, videos, designs, logos, code and any other protected work.
Accessing the website confers the status of user and implies acceptance of this Legal Notice. If the user does not agree with its content, they must refrain from using the website.
1.3. Conditions of access and use
The user agrees to use the website diligently, lawfully and respectfully. In particular, it is prohibited to:
• Use the website for unlawful or fraudulent purposes or for purposes contrary to good faith and public order.
• Introduce or disseminate viruses, malicious software or any element that may damage, alter or prevent the normal operation of the website or third-party systems.
• Attempt to gain unauthorised access to restricted areas, accounts, systems or databases.
• Reproduce, copy, distribute, transform or exploit the website content without authorisation where such authorisation is required.
• Impersonate other persons or provide false or inaccurate information in communications addressed to the owner.
The owner may restrict or suspend access to the website if it detects use that breaches these conditions, applicable legislation or third-party rights.
1.4. Intellectual and industrial property
The website content and its constituent elements are owned by GRAN SOL BUFET GIRONA SOCIEDAD LIMITADA or are used under the corresponding authorisation or licence. They are protected by Spanish, European and international intellectual and industrial property legislation.
Access to the website does not grant the user ownership rights over the content or authorise its commercial exploitation. Viewing and, where appropriate, downloading or printing for strictly personal and non-commercial use are permitted, provided that notices of authorship or ownership are not removed or altered.
The trademarks, trade names, signs, logos and other distinctive marks displayed on the website belong to their respective owners. Their use without prior authorisation is prohibited.
1.5. Accuracy of information and availability
The owner endeavours to ensure that the published information is clear, accurate and up to date. Nevertheless, the content is provided for information purposes and may be modified. Prices, promotions, opening hours, availability, products and services should be confirmed, where necessary, through the official contact channels.
The owner does not guarantee uninterrupted availability of the website and shall not be liable for interruptions, technical errors, incompatibilities, network failures, acts of third parties or force majeure, without prejudice to any liability that cannot legally be excluded.
1.6. Third-party links and services
The website may include links to third-party pages or services, such as Google, Instagram or Facebook. These links are provided to offer further information or facilitate contact and do not imply that the owner controls or endorses their content, policies or practices.
When users access an external site, they become subject to that third party’s terms and policies. GRAN SOL BUFET GIRONA SOCIEDAD LIMITADA shall not be liable for damages arising from the use of external sites unless otherwise provided by law.
1.7. Security
Reasonable measures are applied to protect the website and reduce the risks of unauthorised access, loss, alteration or disclosure. However, no system connected to the internet can guarantee absolute security. Users must take appropriate measures to protect their devices and communications.
1.8. Amendments
The owner may modify the website’s design, content, services and legal terms to adapt them to technical, operational or regulatory changes. The version in force will be the one published on this page together with its last-updated date.
1.9. Governing law and jurisdiction
This Legal Notice is governed by Spanish law. Any dispute shall be submitted to the competent courts and tribunals in accordance with the applicable procedural and consumer-protection legislation.
2. PRIVACY POLICY
2.1. Data controller
The controller of the personal data collected through this website and the associated contact channels is GRAN SOL BUFET GIRONA SOCIEDAD LIMITADA, with Tax ID (CIF) B55143218 and registered office at Carrer de Miquel Martí i Pol, s/n, unit 5, premises 2.2, 17190 Salt (Girona), Spain.
For any privacy-related enquiry or to exercise your rights, you may write to bufetlibresolgirona@hotmail.com, stating “Data protection” in the subject line, or write to the address indicated above.
2.2. Data that may be processed
Depending on the channel used and the request submitted, the following categories of data may be processed:
• Identification and contact details, such as first name, surname, telephone number and email address.
• Data relating to enquiries, requests for information, group bookings and celebrations, such as the intended date, approximate number of people, type of celebration, preferences and message content.
• Professional and academic information included in a CV when the “Work with us” channel is used or an application is submitted.
• Technical and browsing data, such as IP address, online identifiers, device or browser type, security logs and usage data obtained through cookies or similar technologies.
• Any other information voluntarily provided by the user in their communication that is relevant to handling it.
Please do not provide specially protected data or unnecessary information. If a communication includes third-party data, the sender declares that they have sufficient authorisation to provide it.
2.3. Purposes, legal bases and retention periods
Enquiries, requests for information, group bookings and celebrations
The data is used to respond to enquiries, manage availability requests, prepare quotations or proposals, process group bookings and provide customer service.
The legal basis is the implementation of pre-contractual measures requested by the data subject, performance of the contractual relationship where one exists and, where applicable, the controller’s legitimate interest in properly handling and managing communications received.
The data will be retained for as long as necessary to handle the request. If a booking or contractual relationship is formalised, the data will be retained for as long as that relationship remains in force and subsequently blocked for the applicable statutory limitation periods and compliance with legal obligations.
Enquiries that do not result in a relationship will be deleted or anonymised when they are no longer necessary, unless there is a legal retention obligation or a potential claim.
Recruitment processes and CVs
When a CV or job application is submitted, the data will be processed to assess the applicant’s profile, contact them and manage recruitment processes.
The legal basis is the implementation of pre-contractual measures at the applicant’s request. Where the applicant asks for their CV to be retained for future vacancies, such retention will be based on consent, which may be withdrawn at any time.
CVs will be retained for the duration of the recruitment process and for no more than twelve months from their receipt or latest update, unless the applicant withdraws their application earlier or blocked data must be retained to address legal liabilities. Once this period has elapsed, the data will be securely deleted.
Website operation, security and statistics
Necessary technical data is processed to enable browsing, maintain security, prevent misuse, diagnose errors and ensure the website operates properly.
The legal basis is the owner’s legitimate interest in maintaining a secure and operational website and, where applicable, compliance with legal obligations.
Analytics or measurement data that is not strictly necessary will only be processed when the user has given consent through the cookie management tool. Retention periods are stated in the Cookie Policy and the settings panel.
Handling rights requests and legal obligations
Data provided to exercise rights or submit a complaint will be used to verify and respond to the request and to demonstrate the controller’s compliance with its legal obligations.
It will remain blocked for the periods during which liability may arise.
2.4. Mandatory nature of the data
Fields marked as mandatory are necessary to process the relevant request. If the information is not provided, it may not be possible to respond, manage a request or group booking, prepare information for celebrations or assess an application.
The user guarantees that the data provided is truthful, accurate and up to date.
2.5. Recipients and data processors
The data is not sold. It may only be disclosed or made available to:
• Technology providers that supply services necessary to host, maintain and operate the website; manage forms or contacts, email and security; create backups; and provide technical support.
• Wix and its associated providers, as the hosting and website publishing platform and, where applicable, the provider of forms, CRM, analytics and consent management, acting in accordance with their terms and data-processing agreements.
• Professional advisers, auditors or administrative service providers where necessary to manage the relationship or comply with legal obligations.
• Public authorities, regulatory bodies, courts and tribunals where there is a legal obligation or valid request.
These third parties will process the data solely to provide the corresponding service or comply with their legal obligations, subject to the applicable contractual and security safeguards.
2.6. International transfers
The Wix platform may process or host information in the European Union, Israel, the United States or other jurisdictions.
Where international transfers take place, mechanisms recognised by applicable legislation will be used, such as adequacy decisions, standard contractual clauses or other appropriate safeguards.
Up-to-date information is available in the Wix Privacy Policy:
https://es.wix.com/about/privacy
2.7. Rights of data subjects
Where applicable, any person may ask the controller to provide:
• Access to their personal data and information about its processing.
• Rectification of inaccurate or incomplete data.
• Erasure of their data when it is no longer necessary or another legal ground applies.
• Objection to processing based on legitimate interest on grounds relating to their particular situation.
• Restriction of processing in the cases provided for by law.
• Data portability where processing is based on consent or a contract and is carried out by automated means.
• Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
The request may be sent to bufetlibresolgirona@hotmail.com with “Data protection” in the subject line or to the registered office.
It must state the right the person wishes to exercise and include the minimum information required to identify the request. Additional documentation will only be requested where there are reasonable doubts concerning the person’s identity.
If you believe that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency:
2.8. Minors
The website is not specifically directed at children under fourteen years of age. Children under that age must not provide personal data without the authorisation of their father, mother or legal guardian.
If the controller detects data sent without the necessary authorisation, it will take reasonable measures to delete it.
2.9. Security and confidentiality
The controller implements technical and organisational measures appropriate to the risk in order to preserve the confidentiality, integrity and availability of the data. Access is limited to persons and providers that need to process the information for the purposes described.
Nevertheless, the internet is not a completely secure environment. Users should avoid sending particularly sensitive or unnecessary information by email or through general forms.
2.10. Social networks and external links
The website contains links to Gran Buffet Sol Girona profiles on social networks and to third-party services.
When users click these links, they leave this site and the third party may process data in accordance with its own policy. The presence of a link does not mean that GRAN SOL BUFET GIRONA SOCIEDAD LIMITADA controls the processing carried out by the external platform.
2.11. Automated decision-making
GRAN SOL BUFET GIRONA SOCIEDAD LIMITADA does not make decisions through this website that are based solely on automated processing and produce legal effects or similarly significantly affect the user.
2.12. Policy updates
This Privacy Policy may be updated when processing activities, website services or legislation change.
The applicable version will be the one published on this page. Where a change requires renewed consent, this will be requested before the corresponding processing begins.
3. COOKIE POLICY
3.1. What cookies are
Cookies are small files or identifiers stored on or accessed from a user’s device when they visit a website.
They make it possible to remember certain preferences, maintain security, provide technical functions and, with consent where required, measure use of the website or fulfil other purposes.
Similar technologies may also be used, such as local storage, pixels, tags or online identifiers. In this policy, the term “cookies” includes these technologies when they perform an equivalent function.
3.2. Controller
The controller responsible for the use of cookies on www.gransolbuffet.com is GRAN SOL BUFET GIRONA SOCIEDAD LIMITADA, with Tax ID (CIF) B55143218.
For enquiries relating to this policy, please contact bufetlibresolgirona@hotmail.com.
3.3. Types of cookies used by the website
Technical or essential cookies
These are necessary for the website to function and load correctly, maintain security, manage sessions, prevent attacks and remember privacy choices.
They are not used for advertising purposes and may be installed without consent where they are strictly necessary.
Functional or preference cookies
These remember options selected by the user, such as language or certain preferences.
Where they are not strictly necessary to provide a requested function, they will only be activated with consent.
Analytics cookies
These provide aggregated information on how the website is used, measure visits and performance, and identify improvements.
Non-essential analytics cookies, including those associated with Wix Analytics if enabled, will only be activated after the user has accepted them.
Marketing cookies
These may be used to measure campaigns or display advertising related to the user’s interests.
They will not be activated without consent. If an advertising integration such as Meta Pixel or Google Ads is added in the future, the settings panel and this policy will be updated beforehand.
3.4. Essential cookies associated with Wix
The website is built and hosted on Wix. Depending on the configuration and features used, Wix may use the following essential cookies. Not all of them will necessarily be installed during every visit.
XSRF-TOKEN
Purpose: fraud detection and call protection.
Duration: session.
Type: essential.
hs
Purpose: security for legacy platform components.
Duration: session.
Type: essential.
svSession
Purpose: security, stability and core website functionality.
Duration: 12 months.
Type: essential.
SSR-caching
Purpose: page performance and rendering.
Duration: 24 hours.
Type: essential.
TS*
Purpose: attack detection and prevention.
Duration: session.
Type: essential.
bSession
Purpose: measurement of system effectiveness and stability.
Duration: 24 hours.
Type: essential.
fedops.logger.sessionId
Purpose: tracking errors and session issues to ensure resilience.
Duration: 12 months.
Type: essential.
_wixAB3|*
Purpose: conducting website functionality tests and experiments.
Duration: 6 months.
Type: essential.
server-session-bind
Purpose: protection of the platform’s application programming interfaces.
Duration: session.
Type: essential.
client-session-bind
Purpose: protection of the platform’s application programming interfaces.
Duration: session.
Type: essential.
oAuthState
Purpose: identification and security during a session.
Duration: session.
Type: essential.
wixSession
Purpose: security, stability and core website functionality.
Duration: 12 months.
Type: essential.
sec-fetch-unsupported
Purpose: indicates browser limitations affecting security features.
Duration: session.
Type: essential.
Technical source: Wix cookie documentation.
https://support.wix.com/es/article/cookies-y-tu-sitio-wix
3.5. Consent management tool and updated list
The website uses Wix’s integrated consent management tool, provided through Usercentrics, to display the available categories and record the user’s preferences.
The panel includes the list generated by the website scan, together with the providers and durations detected, and forms part of this Cookie Policy.
On first access, the user may accept all non-essential cookies, reject them or configure them by category.
The option to reject must be as readily available as the option to accept. Non-essential cookies remain blocked until an affirmative choice is made.
3.6. Legal basis and withdrawal of consent
Strictly necessary cookies are used to provide the requested service, maintain security and ensure the website’s technical operation.
Non-essential functional, analytics and marketing cookies are based on the user’s consent.
Consent may be withdrawn or changed at any time using the privacy control or icon available on the website.
Withdrawal of consent does not affect the lawfulness of use before its withdrawal, but it will prevent continued use of the rejected cookies.
3.7. Third-party cookies and international transfers
When users accept third-party services, those third parties may process technical identifiers or browsing data in accordance with their own policies.
Some companies may be located outside the European Economic Area. In such cases, the provider must apply the safeguards required by law, such as adequacy decisions or standard contractual clauses.
External links to Google, Instagram or Facebook do not by themselves install cookies from those platforms on this website when they are simple links.
Once users click a link and access the external platform, the third party’s policies apply.
3.8. Browser settings
In addition to the consent panel, users can allow, block or delete cookies through their browser settings.
Blocking essential cookies may prevent certain parts of the website from functioning correctly.
Google Chrome:
https://support.google.com/chrome/answer/95647?hl=es
Mozilla Firefox:
https://support.mozilla.org/es/kb/Borrar%20cookies
Microsoft Edge:
Safari:
https://support.apple.com/es-es/guide/safari/sfri11471/mac
3.9. Cookie Policy updates
This policy may be updated when the cookies, providers, purposes or legislation change.
It is advisable to review it periodically and rerun the consent management scan after adding new applications, code or integrations.
4. CONTACT
For enquiries relating to this Legal Notice, Privacy Policy or Cookie Policy, please contact GRAN SOL BUFET GIRONA SOCIEDAD LIMITADA by email at bufetlibresolgirona@hotmail.com, by telephone on +34 972 439 095 or in writing at Carrer de Miquel Martí i Pol, s/n, unit 5, premises 2.2, 17190 Salt (Girona), Spain.
Last updated: 28 August 2026.