Last updated: 15 October 2026
This English version is provided for convenience only. In the event of any discrepancy, the Spanish version shall prevail.
Data controller
- Owner: CAÑITAS GASTRO, S.L.
- NIF: B24760928
- Registered office: Travesía Molino, nº 2, 02200 Casas-Ibáñez (Albacete)
- Venue: Cañitas Málaga · Hotel ME Málaga by Meliá, Calle Victoria, 6, 29012 Málaga
- Email: canitasmalaga@melia.com
What data we process
We process the data you give us when booking, contacting us or making a purchase: name, phone number, email, number of guests, date and time, any preferences or allergies you tell us about and, where applicable, billing details. Allergy and intolerance information is used only to serve you safely.
Purposes, legal basis and retention
| Purpose | What for | Legal basis | Retention |
|---|---|---|---|
| Table bookings | To manage and confirm your booking and inform you of changes. | Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR). | Until the booking takes place and then for the legal limitation periods. |
| Enquiries by email or phone | To answer your questions. | Consent and legitimate interest in answering your request (Art. 6(1)(a) and (f) GDPR). | As long as needed to resolve the enquiry. |
| Groups and events | To prepare menu proposals and organise your event. | Pre-contractual steps and performance of the contract (Art. 6(1)(b) GDPR). | For the duration of the relationship and legal retention periods. |
| Gift voucher purchases (when available) | To process the purchase, payment, delivery and redemption of the voucher. | Performance of the contract and compliance with legal, tax and accounting obligations (Art. 6(1)(b) and (c) GDPR). | Six years under commercial and tax law. |
| Marketing communications | To send you news and offers, only if you expressly agree. | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. | Until you withdraw your consent. |
| Web analytics | To measure website usage in aggregate in order to improve it. | Consent through the cookie banner (Art. 6(1)(a) GDPR). | As set out in the cookie policy. |
Recipients and processors
We do not share your data with third parties unless required by law. To provide our service we rely on providers acting as data processors under GDPR-compliant agreements:
- CoverManager: online booking system.
- Web hosting and email providers.
- Adobe Fonts (Adobe Inc.): web font service.
- Payment platform (once the gift voucher shop goes live).
We do not share your data with ME Málaga by Meliá or any other company.
International transfers
If any provider processes data outside the European Economic Area, it will do so with the safeguards required by the GDPR, such as adequacy decisions or the European Commission’s standard contractual clauses.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to canitasmalaga@melia.com stating which right you wish to exercise.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Minors
The services on this website are not aimed at children under 14. If you are under 14, please do not give us any data without your parents’ or guardians’ consent.
Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.