Legal information
In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), we explain how we process your personal data on www.ikiborn.com and at the IKIBORN restaurant.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing your table booking (confirmation, reminders, changes and cancellations) | Name, phone, email, date, time, number of guests and any notes you give us | Performance of a contract or pre-contractual steps at your request (Art. 6.1.b GDPR) | Until the booking date and then for the limitation period of any claims |
| Handling requests for groups, celebrations and private events | Name, phone, email, company (if applicable), date, number of guests and event details | Pre-contractual steps at your request and, if booked, performance of the contract (Art. 6.1.b GDPR) | Until the event takes place and for the legal periods thereafter |
| Selling and managing gift cards and issuing the corresponding invoices | Name, email, phone, recipient details (if provided) and purchase details | Performance of the contract (Art. 6.1.b) and compliance with tax and accounting obligations (Art. 6.1.c GDPR) | For the card’s validity period and then 6 years for commercial and tax purposes |
| Answering enquiries sent by email or form | Name, email, phone and message content | Pre-contractual steps at your request (Art. 6.1.b) or legitimate interest in answering your enquiry (Art. 6.1.f GDPR) | Until the enquiry is resolved and for a maximum of 1 year |
| Placing non-essential cookies on your browser | See Cookie Policy | Your consent (Art. 6.1.a GDPR) | See Cookie Policy |
Fields marked as mandatory in each form are needed to provide the requested service. If you do not provide them, we cannot handle your booking, request or purchase.
Payments for gift cards, booking deposits or guarantees are processed through the payment gateway integrated into CoverManager. RICH PAUSE SL has no access to your full card details.
We do not share your data with third parties except where required by law (for example, the Spanish Tax Agency or the courts). To provide our services, some providers access your data as data processors, under a contract that complies with Article 28 GDPR:
No transfers of data outside the European Economic Area are planned. Should any provider make such transfers, they will be carried out with GDPR safeguards: a European Commission adequacy decision (such as the EU-US Data Privacy Framework) or standard contractual clauses.
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, without affecting the lawfulness of prior processing.
To do so, write to info@ikiborn.com or by post to Passeig de Picasso, 32, 08003 Barcelona, stating the right you wish to exercise. We may ask you to verify your identity.
If you believe we have not handled your rights properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Children under 14 may not provide us with personal data without the consent of their parents or guardians (Art. 7 LOPDGDD).
We do not make automated decisions or carry out profiling that produces legal effects on you.
You agree to provide accurate, up-to-date data. We apply technical and organisational measures to protect your data against loss, misuse, alteration or unauthorised access.
We may update this policy to reflect legal or service changes. The current version, with its update date, will always be published on the Website.
Last updated: 20/10/2026
