Privacy policy

Last revised: 2026-09-22

Data controller

• Controller: Restegui Rebolledo S.L
• Tax ID (NIF): B39329966
• Address: Avda. Ricardo Soriano nº 19, 7ª plta, 39010 Santander, Cantabria
• Contact: carlos.restegui@gmail.com

What data we process and why

We only process the data needed for what you ask us to do:

• Buying tickets. Your email address and the purchase details, so that we can issue your ticket and receipt and let you know if the screening changes or is cancelled. Legal basis: performance of the purchase contract.
• Payment. Your card details are processed directly by the payment provider; we do not receive or store them. We only keep the result of the transaction.
• Invoicing and tax obligations. The sale details, because tax legislation requires us to keep them. Legal basis: legal obligation.
• Loyalty club. If you become a member, your account details and your purchases, so that you can earn and redeem your benefits. Legal basis: the consent you give when you sign up, which you can withdraw at any time.
• Your opinion of the film. If you rate it from your tickets (the link in the email or your tickets page), we store the rating, from one to five stars, linked to that purchase, so that we know which films people like. It is optional. If the cinema has it switched on, you can then add, if you wish, a rating for the bar and for your visit and a written comment: it is read only by the cinema team, is never published, and we ask you not to include other people's details. Legal basis: our legitimate interest in knowing the opinion of those who have used our service. It is deleted if you delete your club account, or if you ask us to.
• Marketing communications (newsletter). If you give us your consent, we email you the cinema's listings, new releases and promotions. Legal basis: your consent, which you can withdraw at any time using the «Unsubscribe» link in every email or by writing to us. To find out which content is of interest, we count in aggregate form how many times each mailing is opened and how many times each link is clicked: to do so the email includes a small image and its links pass through our server before taking you to their destination, but those figures are not linked to your name or your email address. In addition, if an email cannot be delivered because the address does not exist, or if you mark it as spam, we record your address so that we do not send you marketing communications again. Legal basis for the latter: our legitimate interest in not writing to people who cannot or do not want to receive them.
• Audience measurement. How many people visit the website, which pages they view, what type of device they use and which country they come from. The tool we use does not set cookies and does not store anything that could identify you: it only produces aggregate statistics and does not track you from one website to another. Legal basis: our legitimate interest in knowing whether the website works and what should be improved, which does not affect your rights because you are not identified.

We do not carry out profiling or automated decision-making with your data, and we do not use it for personalised advertising.

How long we keep it

Purchase data is kept for the periods required by tax and commercial legislation. Club data is kept for as long as you are a member and, afterwards, blocked for the statutory limitation periods. Once those periods have passed, it is deleted.

The aggregate measurements of our marketing mailings (opens, link clicks, deliveries and bounces) are kept for 12 months and then deleted. The list of addresses that have unsubscribed, bounced or marked us as spam is kept for as long as we keep sending marketing communications, because it is what allows us not to write to them again.

Who we share it with

We do not sell or transfer your data. It is accessed only by the providers we need in order to provide the service —the payment provider, the email providers we use to send you your ticket and, if you have asked for them, our marketing emails, and the hosting provider—, each acting as a data processor under a contract that obliges them to use it for that purpose only.

In addition, where required by law, we report box office statistics to the public authority responsible for cinema. This data relates to screenings and tickets sold, not to identified individuals.

Your rights

You can request access to your data, its rectification or erasure, restriction of or objection to processing, and portability, by writing to carlos.restegui@gmail.com and stating which right you are exercising. We will reply within the statutory period.

If you consider that we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (aepd.es).

Minors

Children under 14 may not join the club or subscribe to our communications without the consent of their parents or guardians, as required by Article 7 of Spanish Organic Law 3/2018. From the age of 14 they can do so themselves. If we learn that we have collected data from a child under 14 without that consent, we will delete it.

Cookies

This website uses a minimal number of cookies, all of them necessary for it to work. Full details are in the cookie policy.