top of page

PRIVACY POLICY

Last updated: September 2026

​

At The Dutchess, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains what personal data we may collect through this website, why we use it, how we protect it, how long we keep it and what rights you have regarding your personal data.

1. Who is responsible for your data?

The data controller responsible for the processing of your personal data is:

Legal Entity:The Dutchess SL
Trading Name: The Dutchess Cocktail & Wine Bar
Address: Calle la Creueta 31, 08870 Sitges, Spain
Email: info@thedutchesssitges.com
Telephone: +34 690 87 29 46

The exact legal information of the data controller is also provided in our Legal Notice.

2. What personal data do we collect?

Depending on how you interact with our website, we may collect information such as:

  • name and surname;

  • email address;

  • telephone number;

  • information about an event or reservation request;

  • preferred date and other information you voluntarily provide through our forms;

  • information you provide when contacting us;

  • technical information relating to your use of the website, where applicable.

We only request information that is reasonably necessary for the relevant purpose.

3. How do we use your personal data?

We may use your personal data to:

  • respond to enquiries and messages;

  • respond to private event and party requests;

  • communicate with you regarding a reservation or event;

  • provide information or services you have requested;

  • manage and organise requested services;

  • send communications where you have specifically requested or consented to receive them;

  • maintain the security and functionality of our website;

  • understand how our website is used and improve its content and functionality, where permitted;

  • comply with legal and regulatory obligations.

We do not use your personal data for purposes incompatible with the purpose for which it was collected.

4. Legal basis for processing

Depending on the circumstances, we process personal data on one or more of the following legal bases:

  • Consent, where you have given us your consent for a specific purpose;

  • Pre-contractual measures or performance of a contract, where processing is necessary to respond to a request or provide a requested service;

  • Legal obligations, where processing is required by law;

  • Legitimate interests, where applicable and where our interests do not override your rights and freedoms.

The applicable legal basis depends on the specific processing activity. The AEPD requires the legal basis for processing to be identified and documented.

5. Who may receive your data?

We do not sell your personal data.

Where necessary, personal data may be processed by service providers who support the operation of our website and business, such as website hosting, website functionality, communication, booking or other technical service providers.

Such providers may only process personal data as necessary to provide their services and subject to applicable data protection requirements.

Where legally required, personal data may also be disclosed to competent public authorities or other recipients in accordance with applicable law.

6. International transfers

Some service providers used to operate websites or online services may process data outside the European Economic Area.

Where personal data is transferred to a third country, we will ensure that the transfer is carried out in accordance with applicable data protection law and that an appropriate legal mechanism or safeguard is in place where required.

The GDPR provides several mechanisms for lawful international transfers, including adequacy decisions and appropriate safeguards such as approved contractual clauses.

7. How long do we keep your data?

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected and, where applicable, for as long as necessary to comply with legal obligations or establish, exercise or defend legal claims.

The specific retention period may therefore depend on the type of information and the reason for which it was collected.

When personal data is no longer required, it will be deleted or otherwise securely disposed of in accordance with applicable requirements.

This follows the GDPR principle that personal data should not be retained for longer than necessary for the relevant purpose.

8. Your rights

Subject to the conditions established by applicable law, you have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain processing;

  • request portability of your data where applicable;

  • withdraw consent where processing is based on consent.

To exercise your rights, please contact us using the contact details provided above.

The AEPD confirms these rights and also recognises the right to lodge a complaint with a supervisory authority.

You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) if you believe that your personal data has been processed unlawfully.

9. Security

We take reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

10. Cookies

Our website uses cookies and similar technologies.

For information about the cookies used on the website, their purposes and how you can manage your preferences, please see our Cookie Policy.

11. Third-Party Services and Links

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices or content of third-party websites. We recommend reviewing their respective privacy policies before providing personal information.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, data processing activities or applicable legal requirements.

The latest version will always be published on this page.

Last updated: September 2026

bottom of page