Privacy policy

Who is responsible

Fragments de Patrimoni, S.L., tax ID B56922297, Camí Vell de la Mola, 6270, km 2.3, Venda des Pi des Català, porta nord, 07860 Sant Francesc Xavier (Formentera), Balearic Islands, Spain. Email: info@m-ar.net.

What data we process through the website

The website has no forms, user accounts, shop or newsletter. We only process the following data:

  • Technical browsing data: your IP address, browser, the page you visit and the date and time. These are kept in the logs of the server and of the website’s security system.
  • Visit statistics: we count how many times each page is visited using Koko Analytics, a tool installed on our own server that uses no cookies and does not identify visitors.
  • Emails you send to info@m-ar.net: your name, your address and whatever you tell us.

Why we use it and on what legal basis

  • Technical data: to keep the website secure and working. Legal basis: our legitimate interest in protecting it (article 6(1)(f) of the General Data Protection Regulation, GDPR).
  • Statistics: to know which pages are read most. These are aggregated figures that cannot identify anyone.
  • Emails: to reply to you. Legal basis: your consent, which you give when you write to us (article 6(1)(a) GDPR).

Bookings

Bookings are made by phone only and are handled by Es Caló de s’Oli, S.L., which operates the restaurant and is responsible for the data you give when booking. Fragments de Patrimoni, S.L. does not receive that data.

How long we keep it

  • Server logs: 7 days.
  • Security system logs: only as long as needed to detect and stop attacks; they are then deleted automatically.
  • Emails: as long as needed to reply to you and, after that, as long as the law requires.

Who we share it with

We do not pass data on to anyone unless required by law. The following providers have access to it or receive it:

  • Nominalia, which hosts the website in Spain, as data processor.
  • Trustindex Ltd, a company based in Hungary (European Union), which provides the widget that shows Google reviews on the website. When you load the home page or the reviews page, your browser connects to it and it receives your IP address. It sets no cookies.

In addition, on some pages your browser connects to these two external servers, neither of which sets cookies:

  • Reviewers’ profile pictures are loaded from Google’s servers (lh3.googleusercontent.com), which receive your IP address. Google LLC is based in the United States and participates in the EU-US Data Privacy Framework.
  • If your browser cannot display an emoji in the texts, the website loads its image from s.w.org, the WordPress.org server, which also receives your IP address.

Links to Google Maps and social networks

The location plan on the home page and the contact page is our own drawing. If you click on it, or on the links to Instagram, Facebook or TripAdvisor, those services’ websites open, and they process data under their own privacy policies.

Your rights

You can ask for access to your data, and have it corrected or erased; you can object to or restrict its processing, and ask for data portability. Write to info@m-ar.net or by post to the controller’s address. We will only ask for proof of identity if we have reasonable doubts about who you are.

If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Changes to this policy

If we change the way we process data, we will update this page.

Last updated: 10 October 2026.