Privacy policy

Last updated: October 2026.

This is a translation. In the event of any discrepancy, the Spanish version shall prevail.

1. Data controller

• Controller: Hong-Kong Burgos, S.L. (Restaurante Hong Kong)
• Tax ID (NIF/CIF): B09302217
• Address: Calle Madrid, 4, 09002 Burgos (Spain)
• Telephone: 947 250 357
• Email: contacto@hongkongburgos.es

2. What data we process

If you order through the website, we process the details you enter in the form: your name, phone number, email address, the delivery address if you order delivery, the payment method you choose (cash or card, without any card details), any notes you add and the dishes in your order.

If you create a customer account, we also store those details so you don't have to type them again, your encrypted password and your order history.

If you request the welcome gift, we process the email address you enter to send you the coupon. The coupon stays linked to that email so it can only be used once.

If you tick the box to receive promotions and discounts (on the website, when ordering, when creating your account or in My account), we keep your email address, the website language and where you signed up, in order to send you our offers.

When you call us to place an order or make a reservation, we process the data you give us: your name, your telephone number and, if you order for delivery, the delivery address. If you tell us that you have an allergy or intolerance, we use that information only to prepare your order safely.

3. Why we use it and on what legal basis

• To manage your order, its delivery or your reservation. Legal basis: performance of the contract or of the steps you ask us to take before entering into it (art. 6.1.b GDPR).
• To take your allergies or intolerances into account. Legal basis: your explicit consent when you tell us about them (art. 9.2.a GDPR).
• Emailing you the status of your order (received, confirmed or not confirmed). Legal basis: performance of the contract (art. 6.1.b GDPR).
• Keeping your customer account, if you create one, with your saved details and order history. Legal basis: your consent when you create it (art. 6.1.a GDPR), which you can withdraw by deleting the account.
• Sending you the welcome gift coupon you request and checking, when you use it, that it matches your email. Legal basis: your consent when you request it (art. 6.1.a GDPR). Requesting it does not mean we will send you advertising.
• Sending you our promotions and discounts by email, only if you asked for them by ticking the box. Legal basis: your consent (art. 6.1.a GDPR and art. 21 of the Spanish LSSI). You can withdraw it at any time with the «Unsubscribe» link in every email, from My account or by writing to us.
• To comply with our accounting and tax obligations. Legal basis: legal obligation (art. 6.1.c GDPR).

4. How long we keep it

We keep your data for as long as necessary to manage the order or reservation. Data that must appear on invoices or accounting records is kept for the periods required by law.

Orders placed on the website without an account are deleted automatically after one year. Your account details are kept for as long as you keep the account. If you delete it, we erase your account details; your past orders are no longer linked to you and are deleted after one year, except for data we must keep by law.

The email you request the welcome gift with is kept with its coupon while the promotion is running, so that each person uses it only once. You can ask us to delete it at any time.

If you sign up for promotions, your email stays on the list until you unsubscribe; when you unsubscribe we delete it from the list. Deleting your account also unsubscribes you.

5. Who it is disclosed to

We do not share your data with third parties, except where required by law.

To show this website we use providers that receive your IP address when the page loads: the website's hosting provider, which also stores the orders and sends the order emails, and Google Fonts (Google Ireland Limited) for the typefaces. Google may process data outside the European Economic Area with the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework.

If you accept advertising cookies, Google Ireland Limited also receives data about your visit to measure our Google Ads ads. We explain this in the cookie policy.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw at any time any consent you have given us. To do so, write to us at contacto@hongkongburgos.es, call us on 947 250 357 or write to us at Calle Madrid, 4, 09002 Burgos.

If you believe we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

7. Changes to this policy

We may update this policy to reflect changes in the law or in our service. We will publish the current version here.