Privacy
policy.

This translation is provided for convenience. The Spanish version is the legally binding one.

1. Data controller

The controller of your personal data is Grupo Gastrojoyas S.L. (“Reseniu”), Spanish tax ID B88487327, registered office at Calle de Huelva, 16 — LOFT 50, CP 28100, Alcobendas, Madrid. You can reach us at info@solofoodies.com.

2. Data we collect

2.1 Data from Google OAuth

Access to the Site is exclusive through Google sign-in. When you authenticate, we receive from Google: full name, email, profile picture and a unique Google ID.

2.2 Professional profile data (servers)

If you register as a hospitality professional we may also collect a professional bio, city, province and country, languages, specialties, years of experience, cover photo and social-media links.

2.3 Data generated using the service

Reviews you publish (text, ratings, visit date), responses from the server, employment links and moderation reports.

2.4 Technical data

Approximate IP address, browser and device type, access dates and times. Aggregated for statistics and security only.

3. Purposes and legal bases

• Service delivery (contract): account management, professional profile, posting reviews.
• Public processing of your name as a server (explicit consent): publishing your professional profile with your name and photo on reseniu.com, indexable by search engines.
• Legal compliance: data retention for defending claims, handling user rights, judicial requests.
• Marketing communications (opt-in consent): if you agree, product news and industry job opportunities.
• Security and fraud prevention (legitimate interest): detecting fake reviews, impersonation and abuse.

4. Retention

We keep your data while your account is active. If you request deletion, we erase your personal data within 30 days, except for data we must keep by law (accounting, defense of claims). Published reviews may be anonymised instead of deleted to preserve historical utility without making you identifiable.

5. Recipients and processors

We do not sell your data. We share information strictly with our technical providers, all bound by data-processing agreements under article 28 GDPR:

• Supabase Inc. (United States, Standard Contractual Clauses): database, authentication and storage.
• Vercel Inc. (United States, SCCs): hosting and content delivery.
• Google LLC (United States, SCCs): authentication, Google Places API, Google Maps and, where applicable, Google Business Profile API.
• Resend (United States, SCCs): transactional email when applicable.

Some of these providers may transfer data outside the EEA. In every case we require adequate safeguards (Standard Contractual Clauses approved by the European Commission).

6. Your rights

As a data subject you can:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Erase your data when it is no longer necessary or when you withdraw consent.
• Restrict processing under certain conditions.
• Object to processing based on your particular situation.
• Port your data to another controller.
• Withdraw consent at any time, without affecting the lawfulness of processing performed before withdrawal.

To exercise any of these rights, write to info@solofoodies.com attaching a copy of your ID. We will respond within one month at most.

If you believe the processing of your data does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency.

7. Minimum age

The service is intended for users aged 16 or over. We require explicit confirmation of working-age before creating a server profile. We do not knowingly process data from minors under 16; if we detect such accounts, we delete them.

8. Security

We apply appropriate technical and organisational measures to protect your data: encryption in transit (TLS), encryption at rest, role-based access control, audit logs and daily backups. We work exclusively with infrastructure providers certified to SOC 2 / ISO 27001.

9. Changes to this policy

We may update this policy to reflect legal or product changes. If changes are material, we will notify you by email or through a prominent notice on the Site before they take effect.