Data protection
Exercise your rights
Your data is yours. From here you can request a copy, correct it, delete it, take it with you, or object to its use. You don't have to explain why.
How it works
Three steps, no paperwork and no ID copies.
Choose the right you want to exercise and enter your email address: the one you used to buy or receive a gift card.
We email you a link to confirm that the address is yours. Until you click it, nothing is looked up, exported or deleted.
From the moment you confirm, we have a maximum of one month to reply (GDPR art. 12.3). The answer goes to the same email address.
Your rights
The General Data Protection Regulation (GDPR) grants you these rights, and exercising them is free.
- Access
- Ask for a copy of the personal data we hold about you and what it is used for. We send it as a readable file attached to our reply.
- Rectification
- Correct data that is wrong or incomplete: a misspelt name, a wrong email address. Tell us which detail is wrong and what it should say.
- Erasure ('right to be forgotten')
- Delete your data. Whatever we have no duty to keep is deleted; whatever tax and accounting law requires us to keep is retained without your name, your email or your browsing data.
- Portability
- Receive your data in a structured, commonly used format so you can take it to another service.
- Objection
- Object to a specific use of your data, such as marketing emails. You can also unsubscribe from marketing emails in one click from any of them.
- Restriction of processing
- Ask us to keep your data but stop using it while a disagreement is resolved. Request it with the 'Objection' option and explain it in the details.
Your request
All we need is the right you want to exercise and your email address.
This request is addressed to Txiptxip and covers every restaurant on the platform where your email appears.
Payment data: payments are processed entirely by Stripe, on Stripe's own payment form. Neither the platform nor the restaurant ever stores your card number or security code, so there is no card data for us to hand over or delete. If you need the data of a payment, it is held by Stripe Payments Europe, Ltd. as a processor.
What is always kept: a gift card with a balance is a debt to whoever holds it and stays redeemable even if you erase your data; the transaction history is kept for as many years as tax and accounting law requires. Your name, email and browsing data are removed from those records.
Identity verification: confirming by email is enough. We will never ask you for a copy of your ID or for a password by email.
Privacy Policy · If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).