Data protection
Privacy policy
This website does not collect personal data. It has no forms, no analytics tools and no cookies, and it sends no information to third parties. This policy explains the scope of that statement and the rights granted by data protection law.
In short
No personal data is collected
The menu, the opening hours and the location can all be consulted without leaving any trace. This is a static site: pages written in advance that the server delivers as they are. There is no database, no user accounts, no session and no field to fill in.
- There is no contact or booking form on any page of the site.
- No audience measurement tools are used, whether first or third party. Visits and pages viewed are not recorded.
- No cookies are used, which is why no consent notice is shown.
- There is no profiling, advertising or automated decision-making, and no data is disclosed to third parties, since none is collected.
Consulting this website therefore involves no processing of personal data by the owner.
Technical logs
Hosting provider logs
As on any website, the server that delivers these pages may record in its technical logs the IP address each page was requested from, the time of the request and the browser used.
Those logs are generated and kept by the hosting provider for security and service operation purposes. The owner does not consult them, does not combine them with any other information and does not use them to identify anyone.
Linked services
Booking, WhatsApp and map
The booking, WhatsApp and map buttons lead to services provided by other companies. From that point on, any processing of data is carried out by those services and not by this website.
The booking system is provided by BeeDigital, the map by Google Maps and WhatsApp by Meta. Each has its own privacy policy, which is the one that applies once the service is accessed. None of the three is embedded in these pages, precisely so that their processing does not reach anyone who has not chosen to use them.
Bookings and enquiries made by telephone are handled by the restaurant, which will process the details provided for that purpose. That processing takes place outside this website and is not governed by this policy.
Legal bases
Restaurant processing outside this website
This website processes no personal data, but the restaurant may process data through other channels. The Regulation requires the legal basis for each processing operation to be stated; there are three, and none of them is blanket consent:
- Bookings and orders: performance of the agreement. The data processed is only what is needed to manage them, normally a name and a contact telephone number.
- Invoicing: compliance with a legal obligation. Tax and accounting rules determine which data must be kept and for how long.
- Suppliers: the existing commercial relationship, for as long as it is in force and for the periods subsequently imposed by tax obligations.
Outside those cases no information is kept: a call to ask about the opening hours generates no record, and there is no mailing list and no marketing messaging.
Rights
Rights of data subjects
Regulation (EU) 2016/679 grants a set of rights over personal data. This website processes none, but the restaurant may hold data on people who have booked a table, contacted it or have a commercial relationship with it. The following rights may be exercised over that data:
- Access: to find out what data is kept and for what purpose it is processed.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request its deletion once there is no longer any need to keep it.
- Objection and restriction: to request that processing stop, or be suspended while a complaint is resolved.
- Portability: to receive the data in a structured, commonly used format.
Any of these rights may be exercised by telephone, on WhatsApp or at the premises. Only the information needed to verify the identity of the person making the request will be asked for. Requests are answered within one month at the latest.
Anyone who considers that their rights have not been properly handled may lodge a complaint with the Spanish Data Protection Agency, the supervisory authority in Spain.
Controller
Data controller
The owner of the restaurant is the controller for this website and for the processing the restaurant carries out outside it.
- Registered name
- CYA MI RINCON SL
- Tax number (CIF)
- B10951457
- Registered office
- Calle Dolores, 20, 12001 Castellón de la Plana
- Phone
- 622 296 252
Legal information
This policy was published on and describes the website as at that date. Should any data processing ever be introduced, it would be updated beforehand.