Privacy Policy

1. Data controller

The controller of the personal data collected through this website is KRAM (Av. Meritxell 90, AD500 Andorra la Vella (Principality of Andorra)), contact email kram@kramandorra.com.

Processing is carried out in accordance with Law 29/2021, of 28 October, qualified law on the protection of personal data (Andorran data protection law) and other applicable legislation of the Principality of Andorra.

2. Data we process

We process the data you provide directly to us:

• Bookings: name, phone, email, number of guests, date, time and booking comments.
• Contact form: name, email, phone and the content of your message.
• WhatsApp: if you write to us on WhatsApp, we process your number and the content of the conversation.
• Browsing: technical usage data of the site (see the Cookie Policy).

3. Purposes and legal basis

We do not use your data to make automated decisions or to build profiles.

• To manage and confirm your bookings — basis: the performance of your request and pre-contractual measures.
• To handle your enquiries and communications — basis: your consent when contacting us.
• To comply with applicable legal obligations — basis: compliance with a legal obligation.

4. Retention

We keep data for as long as necessary for the purpose for which it was collected and, thereafter, for the periods legally required. Booking data is kept while necessary to manage the relationship and is then deleted or anonymised.

5. Recipients and providers

We do not share your data with third parties except where legally required. To provide the service we rely on providers acting as processors:

• Google — Google Calendar for booking management and Google Maps for location.
• The hosting provider of the website.
• Meta — WhatsApp, if you choose to communicate through that channel.

6. International transfers

Some of these providers may process data outside the Principality of Andorra. In that case, the safeguards set out by Andorran data protection law apply to ensure an adequate level of protection.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time.

• Write to us at kram@kramandorra.com stating the right you wish to exercise.
• If you believe we have not handled your request correctly, you may lodge a complaint with the Andorran Data Protection Agency (APDA) — www.apda.ad.

8. Security

We apply reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access.

9. Minors

The site is not aimed at minors. Bookings must be made by persons of legal age.

10. Changes to this policy

We may update this policy to adapt it to regulatory or operational changes. The version in force will always be the one published on this page.