Privacy Policy

In accordance with the legislation in force, La Sucursal (hereinafter, also the Website) undertakes to adopt the technical and organisational measures required, in line with the level of security appropriate to the risk of the data collected, pursuant to Regulation (EU) 2016/679 (GDPR) and to Ley Orgánica 3/2018 (LOPDGDD), the Spanish data protection act.

1. Laws incorporated into this privacy policy

This privacy policy is adapted to the Spanish and European legislation in force on the protection of personal data on the internet. Specifically, it complies with the following rules:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (LOPD-GDD), the Spanish act on the protection of personal data and the guarantee of digital rights.
• Real Decreto 1720/2007, de 21 de diciembre, the Spanish royal decree approving the regulation implementing the Ley Orgánica de Protección de Datos de Carácter Personal (RDLOPD).
• Ley 34/2002, de 11 de julio, de Servicios de la Sociedad de la Información y de Comercio Electrónico (LSSI-CE), the Spanish act on information society services and electronic commerce.

2. Data controller

• Owner: NATIPUPI SL (La Sucursal)
• NIF (Spanish tax ID): B75322354
• Address: Calle Búfalo, 34, 2º 75, 04740 Roquetas de Mar, Almería
• Telephone: (pending)
• Email: barmicuba@gmail.com

3. Data we process through this website

This website is informational and has no forms that collect personal data. If you contact us by telephone or email, we will process only the data you give us in order to deal with your enquiry.

4. Loyalty Club

Registration with our Loyalty Club takes place through WhatsApp by means of the FidelizaCard service (cartadigitalfacil.es), which acts as data processor. When you join, you provide your telephone number and associated data for the purpose of managing the points and rewards programme. At that point, the service informs you of the terms of the processing and obtains your consent. The legal basis is your consent, which you may withdraw at any time by leaving the club.

5. Purpose and retention

Your data is used solely to manage the loyalty programme (accrual of points, benefits, club communications) and to deal with your enquiries. It will be kept for as long as you remain a club member or until you request its deletion, and for any legally required periods.

6. Recipients

We do not disclose your data to third parties, except where legally required. The loyalty programme is operated by means of the technology provider FidelizaCard / cartadigitalfacil.es, which processes the data on behalf of the controller.

7. Principles applicable to the processing

The processing of the User's personal data shall be governed by the principles set out in article 5 of the GDPR: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; and integrity and confidentiality.

8. Your rights

As the data subject, you have the right to:

• Access: confirm whether we process your data and find out about the processing, its origin and its recipients.
• Rectification: request the correction of inaccurate or incomplete data.
• Erasure (the ‘right to be forgotten’): request the deletion of the data when it is no longer necessary or you withdraw your consent.
• Restriction of processing: restrict the processing in certain circumstances.
• Portability: receive your data in a structured format and transfer it to another controller.
• Objection: object to the processing of your data.
• Not to be subject to automated decisions based solely on automated processing.

You may exercise these rights by writing to the controller (quoting «RGPD-https://www.lasucursalrestaurante.com/») at the postal address Calle Búfalo, 34, 2º 75, 04740 Roquetas de Mar, Almería, or by email to barmicuba@gmail.com, stating:

• Your name, surname(s) and a copy of your DNI (Spanish national ID card) or other identity document. Where acting through a representative, the representative's identification as well.
• The specific reasons for the request or the information required.
• An address for notifications, together with the date and the applicant's signature.
• Any document proving the applicant's identity.

You are likewise entitled to lodge a complaint with the Agencia Española de Protección de Datos, the Spanish data protection authority (www.aepd.es).

9. Acceptance of and changes to this Privacy Policy

Use of the Website means that you have read and accept the data protection terms contained in this Privacy Policy. The controller reserves the right to amend this policy in order to adapt it to legislative or case-law developments; changes will not be notified explicitly, so we recommend that you review this page periodically.

10. Cookies

For information on the use of cookies, please see our Cookie Policy.

For more information, please see our Legal Notice as well.

Last updated: June 2026.