Privacy policy
Last updated: October 2026
1. Data controller
Owner: SG Golden Turístic, S.L.
Trade name: Sacalma Food & Drinks
Tax ID (NIF): B62856349
Registered address: C/ Garbí, 92, 2 · 08397 Pineda de Mar (Barcelona) · Spain
Venue: Av. Mar Menuda s/n · 17320 Tossa de Mar (Girona)
Phone: +34 661 569 412
Email: sacalma@goldenhotels.com
Data Protection Officer: dpd@goldenhotels.com
Company registration: Barcelona Companies Register, [Volume ____, Folio ____, Sheet B-______, Entry __]
SG Golden Turístic, S.L. is part of the Golden Hotels Group. Data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, of 5 December (LOPDGDD).
2. What data we process
This website (www.sacalma-tossa.com) has no forms or user area. The data that may be processed is:
- Browsing data: IP address, browser and device type, necessary to display the website (server logs).
- Your cookie choice: stored in your browser.
- Data you voluntarily send us by email, phone or WhatsApp.
- Third-party content: if you accept third-party cookies, YouTube and Google Maps receive your IP address and may install their own cookies.
- Analytics data: if you accept analytics, Google Analytics 4 (via Google Tag Manager) collects aggregated usage data (pages visited, device, language, approximate location). IP addresses are not stored.
Bookings are made through the external platform myrestoo.net, which operates under its own privacy policy and, where applicable, acts as data processor for the restaurant.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Displaying the website and ensuring its security | Legitimate interest (Art. 6.1.f GDPR) |
| Responding to enquiries received by email, phone or WhatsApp | Consent and pre-contractual measures (Art. 6.1.a and 6.1.b GDPR) |
| Loading the YouTube video and the Google Maps map | Consent (Art. 6.1.a GDPR and Art. 22.2 LSSI) |
| Producing website usage statistics (Google Analytics) | Consent (Art. 6.1.a GDPR and Art. 22.2 LSSI) |
No automated decisions are made and no profiling is carried out.
4. Retention
Enquiries are kept for as long as necessary to deal with them and, afterwards, for the legal limitation periods. Your cookie choice is stored for a maximum of 24 months, and analytics data for a maximum of 14 months.
5. Recipients
We do not share data with third parties except where legally required. Providers who deliver services to us (web hosting, email) may have access, under the corresponding data processing agreement.
International transfers
If you accept third-party content or analytics, Google (YouTube, Google Maps and Google Analytics) may process data outside the European Economic Area. Google adheres to the EU-U.S. Data Privacy Framework.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to dpd@goldenhotels.com or by post to C/ Garbí, 92, 2 · 08397 Pineda de Mar (Barcelona, Spain), stating the right you wish to exercise.
If you believe that the processing does not comply with the regulations, you can file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
7. Security
We apply appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of data.
8. Changes
We may update this policy to adapt it to legal or website changes. The date of the last update appears at the top.