Privacy Policy

At CACHANA Y CHINELA S.L. (Bar&Kitchen) we process the information provided by data subjects in order to deliver and manage our services, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

 

1. Data controller

  • Controller: CACHANA Y CHINELA S.L.
  • Trade name: Bar&Kitchen.
  • Tax ID (CIF): B96781273.
  • Address: C/ Quart, 2 – Bajo, 46001 Valencia, Spain.
  • Phone: 626 16 26 22.
  • Email: hola@barandkitchen.es.

2. Purposes, legal basis, and retention periods

We process your personal data for the following purposes, each with its corresponding legal basis:

2.1. Handling enquiries and communications (contact form, email, or phone)

  • Purpose: to respond to enquiries, requests for information, or communications you send us.
  • Legal basis: the data subject’s consent when contacting us (Art. 6.1.a GDPR) and/or the application of pre-contractual measures at the data subject’s request (Art. 6.1.b GDPR).
  • Data processed: name, contact details (email, phone), and the content of the communication.
  • Retention: for the time necessary to handle your request and, thereafter, for the legally required periods to address any potential liabilities.

2.2. Online reservation management

  • Purpose: to manage and confirm table reservations made through the Website, as well as related communications.
  • Legal basis: performance of a contract or pre-contractual measures at the data subject’s request (Art. 6.1.b GDPR).
  • Data processed: name, number of guests, date and time, phone, email, and, where applicable, remarks (allergies, preferences).
  • Retention: for the time necessary to manage the reservation and the service, and thereafter for applicable legal periods.

2.3. Sending commercial communications / newsletter (if applicable)

  • Purpose: to send you information about news, promotions, or events at Bar&Kitchen.
  • Legal basis: your express consent (Art. 6.1.a GDPR), which you may withdraw at any time.
  • Data processed: name and email.
  • Retention: until you withdraw your consent or request to unsubscribe.

(Remove this section 2.3 if you do not have a newsletter or send commercial communications.)

2.4. Browsing and cookies

When you browse the Website, we may process data relating to your navigation through cookies. For more information, please see our Cookies Policy. The legal basis is the user’s consent (Art. 6.1.a GDPR), except for strictly necessary technical cookies.

3. Data disclosure and recipients (data processors)

As a general rule, data will not be shared with third parties except where required by law. However, in order to provide our services, we may rely on providers who access personal data as data processors, with whom the corresponding agreements have been signed pursuant to Art. 28 GDPR. These providers may include:

  • Web hosting and Website maintenance provider. Arsys
  • The online reservation platform or system provider. CoverManager

Some of these providers may carry out international data transfers outside the European Economic Area. In such cases, these transfers will be made with the appropriate safeguards provided for in the GDPR (for example, adequacy decisions or standard contractual clauses).

4. Minors’ data

The Website is not directed at children under 14. By making a reservation or providing data, the user declares to be over that age.

5. Rights of data subjects

Any person has the right to obtain confirmation as to whether we are processing personal data concerning them. Specifically, you may exercise the following rights:

  • Access: to know what data of yours we are processing.
  • Rectification: to request correction of inaccurate or incomplete data.
  • Erasure: to request deletion of your data (“right to be forgotten”).
  • Objection: to object to the processing of your data.
  • Restriction of processing: to request that processing be restricted in certain cases.
  • Portability: to receive your data in a structured, commonly used, and machine-readable format, or to request its transmission to another controller.
  • To withdraw consent given, at any time, without this affecting the lawfulness of processing prior to its withdrawal.

6. How to exercise your rights

You may exercise your rights in writing to:

  • Postal address: CACHANA Y CHINELA S.L., C/ Quart, 2 – Bajo, 46001 Valencia, Spain.
  • Email: hola@barandkitchen.es.

You must state the right you wish to exercise and attach a copy of a document proving your identity. A response will be provided within the periods set out in the applicable regulations.

7. Complaint to the supervisory authority

If you believe that the processing of your data does not comply with the regulations, or that you have not been adequately assisted in exercising your rights, you may file a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, or through its electronic office: https://www.aepd.es.

8. Data security and accuracy

The Controller adopts the technical and organizational measures necessary to guarantee the security and confidentiality of the data. The user warrants that the data provided is truthful, accurate, and up to date, and undertakes to notify any changes.

Last updated: 15 june 2026.