Privacy Policy

Date of last update: November 19, 2025

1. Data Controller

Responsible: JACHAPURI SL (Trade name: Samaia)
VAT NUMBER: B13981923
Registered Office: Uribarri Kalea, 33, 48007 Bilbao
Address of the restaurant: Rodríguez Arias K., 58, 48013 Bilbao
E-mail: [email protected]
Activity: Hospitality

2. Principles applicable to treatment

We treat your data with the principles of lawfulness, loyalty and transparency; data minimization; limitation of the retention period; integrity and confidentiality.

3. Purposes of processing and legal basis

  • Management of inquiries and reservations: answering requests made by forms or mail.
    Legal basis: execution of pre-contractual measures / execution of contract (art. 6.1.b RGPD) or consent where appropriate.
  • Sending of commercial communications and newsletter: sending of newsletters, promotions and offers (only if you have given your consent).
    Legal basis: consent of the data subject (art. 6.1.a RGPD).
  • Purchasing and invoicing management (if applicable): processing orders, issuing invoices and fulfilling tax and accounting obligations.
    Legal basis: execution of contract and fulfillment of legal obligations (art. 6.1.b and 6.1.c RGPD).
  • Web analytics and improvement: analysis of the use of the site to optimize services.
    Legal basis: consent for analytical cookies and/or legitimate interest of the Responsible (art. 6.1.f RGPD) when appropriate and always informing the user.
  • Advertising and remarketing (if used): audience segmentation for advertising campaigns.
    Legal basis: prior consent of the user or, where appropriate, legitimate interest, always in accordance with the regulations and cookie settings.

4. Data we process

Depending on the purpose, we may process data such as: first name, last name, postal address, telephone number, email address, billing information (including ID number), order/booking history, IP address and other navigational data when you accept cookies.

5. Conservation periods

  • Contact data received by form: 3 years from the last interaction, unless the interested party requests deletion.
  • Subscription/newsletter lists: As long as you maintain the subscription and a periodic cleaning of inactives (inactive registration for more than 1 year) will be performed.
  • Data related to purchases, invoicing and tax obligations: 6 years (legal accounting and tax retention period applicable in Spain).
  • Aggregate analytics data: Variable periods depending on the tool and purpose; in any case, personal identifiers will not be kept indefinitely.

6. Recipients and data processors

The data may be communicated to service providers acting as processors to provide technical, hosting, marketing, analytics or communications services, subject to the necessary safeguards (contracts, standard clauses or equivalent measures):

  • Hosting: Webempresa (hosting services) – servers located in the EU.
  • Web platform / CMS: Automattic Inc. (WordPress/related services).
  • Email marketing: third-party providers such as Mailchimp (The Rocket Science Group). Where suppliers outside the EU are used, we adopt appropriate safeguards (standard contractual clauses or other recognized mechanisms).
  • Analytics and advertising tools: Google Analytics, Meta (Facebook/Instagram Ads), or others according to actual use on the site.

If you would like a complete and updated list of the managers, you can request it by sending an e-mail to [email protected].

7. International Transfers

When it is necessary to transfer data outside the European Economic Area, JACHAPURI SL will take the appropriate measures required by the regulations (e.g. standard contractual clauses approved by the European Commission or adequacy decisions where appropriate). You can request information on the specific safeguards applied in each case.

8. Rights of interested persons

You have the right to:

  • Access your data.
  • Request the rectification of inaccurate data.
  • Request deletion (right to be forgotten) when appropriate.
  • Request the limitation of the treatment.
  • Object to the processing for legitimate reasons.
  • Request the portability of your data when the processing is based on consent or a contract and is carried out by electronic means.

To exercise your rights you may contact:

JACHAPURI SL (Samaia)
Uribarri Kalea, 33, 48007 Bilbao
E-mail: [email protected]

If you consider that your rights have not been properly addressed, you can file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

9. Security

We implement appropriate technical and organizational measures to protect personal data against loss, unauthorized access, disclosure, alteration or destruction. Among other measures, we implement access control, encryption in transit (SSL) and confidentiality agreements with data processors. However, there is no such thing as zero risk on the Internet; in the event of a relevant security incident, those affected and the competent authority will be informed in accordance with the regulations.

10. Cookies and other similar technologies

This site uses own and third party cookies to facilitate navigation, functionality and analysis. For more information about cookies, their purpose, and how to reject or configure them, see our Cookies Policy.

11. Data Retention and Accuracy

The user is responsible for the accuracy of the data provided. If you detect any incorrect information, please let us know so that we can correct it.

12. Commercial communication and revocability of consent

The sending of commercial communications requires your prior consent. You may revoke your consent at any time without affecting the lawfulness of the processing prior to revocation. The revocation can be requested by sending an email to [email protected] or using the unsubscribe link included in the electronic communications.

13. Changes in the privacy policy

We reserve the right to modify this Privacy Policy to adapt it to new legislation or changes in our services. We will publish the updated version on this page indicating the date of the last update.

If you have any questions or would like us to provide you with additional information about the processing of your data, please write to us at [email protected].

Accessibility Toolbar