1. OWNERSHIP
This website (the “Website”), accessible at the domain flaxandkale.com, is owned by FLAX & KALE, S.L.U. (hereinafter, “Flax & Kale, S.L.U.”), with registered office at C/ Tallers, nº 77, 4º H, 08001 Barcelona (Spain), duly registered with the Barcelona Companies Register, in Volume 45189, Folio 117, Sheet B-479729, Entry 1, and with Tax ID No. (NIF) B25767781.
Flax & Kale, S.L.U. operates under the trade name “Flax & Kale”, which is owned by TERESA CARLES HOLDING, S.L., with Tax ID No. (NIF) B25683103 and registered office at C/ Tallers, nº 77 (Luminor Building), Dept. 4-46.H-D, 08001 Barcelona, the parent company of the group of companies to which Flax & Kale, S.L.U. belongs.
For any queries related to the Website, the User may contact the email address hola@flaxandkale.com.
2. TERMS OF USE
Access to and use of the Website by users (the “User(s)”) implies acceptance, without reservation, of this legal notice and terms of use (the “Terms of Use”). We ask Users to read them carefully. If you do not agree with all or part of these Terms of Use, please do not use the Website.
3. USER COMMITMENT
In general, Users must comply with these Terms of Use and act in accordance with applicable law, morality, good customs, and the requirements of good faith and public order, exercising due diligence and refraining from using the Website in any way that may prevent, damage, or impair its normal operation, or the assets or rights of Flax & Kale, S.L.U., its suppliers, other Users, or, in general, any third party.
Specifically, and without limiting the previous section, when using the Website, the User undertakes to:
- Not introduce, store, or disseminate through the Website any program, data, virus, code, or any other electronic or physical device that may cause damage to it or to any equipment, systems, or networks of Flax & Kale, S.L.U., other Users, or any third party.
- Not destroy, alter, use for their own purposes, disable, or damage the data, information, programs, or electronic documents of Flax & Kale, S.L.U.
- Not introduce, store, or disseminate through the Website any content that infringes third-party industrial and intellectual property rights or trade secrets.
- Not use false identities or impersonate third parties when using the Website.
- Not alter, copy, download, modify, decompile, disassemble, reverse engineer, license, lease, sell, or imitate the Website, its content, or its underlying software.
4. INTELLECTUAL AND INDUSTRIAL PROPERTY
All Intellectual and Industrial Property rights to the “Flax & Kale” trademark are owned by TERESA CARLES HOLDING, S.L. Likewise, all information contained on the Website (including texts, data, images, graphics, designs, source code, software, navigation structures, databases, etc.) is the exclusive property of Flax & Kale, S.L.U. and/or TERESA CARLES HOLDING, S.L., as applicable.
In no case shall it be understood that a licence is granted or that there is any waiver, transfer, or assignment, in whole or in part, of such Intellectual and Industrial Property rights, nor that any right or expectation of right is conferred over them.
Consequently, the User is expressly prohibited from reproducing, transmitting, transforming, distributing, publicly communicating, making available, extracting, reusing, or exploiting any of them, by any means or procedure, except in legally permitted cases or where expressly authorised in writing. In particular, it is prohibited to use framing techniques, meta tags, or any hidden text that uses the names or trademarks of Flax & Kale, S.L.U. or “Flax & Kale”.
5. ACCESS TO THE WEBSITE
Access to the Website is free of charge for Users. The Website does not allow contracting or purchasing products or services directly through it. Table reservation services and the purchase of gift cards are provided through third-party platforms, as detailed in the following section.
6. THIRD-PARTY SERVICES ACCESSIBLE FROM THE WEBSITE
The Website includes links that direct the User to platforms operated by third parties unrelated to Flax & Kale, S.L.U., specifically:
- Table reservations, through TheFork and Revolut platforms.
- Gift card purchases, through the Mybeezebox platform.
- Delivery orders, through Uber Eats and Glovo platforms.
- Restaurant location, through Google Maps.
- Social media, via links to Instagram, TikTok, and LinkedIn profiles.
Accessing these platforms means the User leaves the Website and becomes subject to each platform’s own terms of use and privacy policy, for which Flax & Kale, S.L.U. is not responsible. Users are advised to review those terms before providing any personal data or carrying out any transaction through these platforms.
7. LIABILITY AND WARRANTIES
Flax & Kale, S.L.U. cannot guarantee the reliability, usefulness, or accuracy of all information contained on the Website. Flax & Kale, S.L.U. shall not be liable for any damages that may arise from interference, omissions, interruptions, computer viruses, breakdowns and/or disconnections in the operational functioning of the electronic system or Users’ computer equipment, due to causes beyond the control of Flax & Kale, S.L.U., that prevent or delay browsing the Website.
However, the Website has adopted and will adopt, where appropriate, the necessary measures within its capabilities and the state of the art to ensure proper operation and minimise system errors.
Flax & Kale, S.L.U. reserves the right to suspend, modify, restrict, or interrupt access to the Website at any time and without prior notice, whether for technical, security, control, maintenance reasons, or for any other reason.
8. LINKS TO THIRD-PARTY WEBSITES
These Terms of Use refer only to the Website and do not apply to any links or third-party websites accessible through it (including, among others, TheFork, Revolut, Mybeezebox, Uber Eats, Glovo, Google Maps, and profiles on Instagram, TikTok, and LinkedIn). The destinations of such links are not under the control of Flax & Kale, S.L.U. and, consequently, Flax & Kale, S.L.U. cannot be responsible for the content of those pages, or for any changes or updates to them.
If the User accesses other networks or IT resources, the User agrees to be bound by the relevant third parties’ usage and privacy policies.
9. DATA PROTECTION
Flax & Kale, S.L.U. will process Users’ personal data in strict compliance with Regulation (EU) 2016/679 (GDPR) and other applicable data protection regulations, using it only to the extent permitted by law or where Users have given their consent.
The User may exercise, under the terms established in applicable regulations, the following rights in relation to their personal data:
- Access: to know which of their personal data is being processed.
- Rectification: to request correction of inaccurate data.
- Erasure: to request deletion of their data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
- Restriction of processing: to request restriction of the processing of their data in certain circumstances.
- Portability: to receive their personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller.
- Objection: to object to the processing of their personal data in certain circumstances and for reasons related to their particular situation.
These rights may be exercised free of charge by writing to hola@flaxandkale.com, within a maximum period of one month from receipt of the request (extendable by a further two months depending on the complexity and number of requests). The User also has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their personal data does not comply with applicable regulations.
For more information about the processing of your personal data, please see our Privacy Policy.
10. AMENDMENT OF THE TERMS OF USE
Flax & Kale, S.L.U. reserves the right to amend or update these Terms of Use at any time. Users are therefore advised to review these Terms of Use periodically.
11. APPLICABLE LAW AND COMPETENT JURISDICTION
Access to the Website implies the User’s acceptance of these Terms of Use. The Website’s Terms of Use are governed by Spanish law, and any dispute that arises will be resolved before the Courts and Tribunals of the city of Barcelona, which shall have exclusive jurisdiction to the exclusion of any other forum. This is without prejudice to the jurisdiction of the Courts and Tribunals of the User’s place of residence where the User has the status of a consumer.
1. INTRODUCTION
At Flax & Kale, S.L.U., part of the group of companies headed by Teresa Carles Holding, S.L. (the “Group”), protecting your personal data is a priority. This Privacy Policy (the “Policy”) aims to inform you, clearly, concisely, and transparently, about how we process your personal data when you visit and interact with the Website, as well as the rights you have in relation to such processing, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
2. IDENTIFICATION OF THE WEBSITE CONTROLLER
This website, accessible at flaxandkale.com (the “Website”), is operated by FLAX & KALE, S.L.U. (hereinafter, “Flax & Kale, S.L.U.”), with Tax ID No. (NIF) B25767781 and registered office at C/ Tallers, nº 77, 4º H, 08001 Barcelona (Spain).
Depending on the specific purpose of the processing, the controller may be different from Flax & Kale, S.L.U., as detailed in section 5. For any queries related to the processing of your personal data, you can contact:
- General enquiries: hola@flaxandkale.com
- Specific privacy enquiries / exercise of rights: dpo@flaxandkale.com
3. DEFINITIONS
- Personal data: any information relating to an identified or identifiable natural person.
- Processing: any operation performed on personal data, such as collection, recording, storage, use, disclosure, or erasure.
- Data controller: the natural or legal person who determines the purposes and means of processing personal data.
- Data processor: the natural or legal person who processes personal data on behalf of the data controller.
- Data subject: the natural person whose personal data is processed (in this Policy, the “User”).
4. SOURCE AND CATEGORIES OF DATA PROCESSED
The personal data we process comes from the following sources:
- Data that the User provides to us directly, for example, by completing the “Work with us” form or the “Whistleblowing Channel”.
- Data generated by the User’s browsing of the Website, collected through our own and third-party cookies, in accordance with our Cookie Policy.
- Data we receive from third parties the User interacts with (TheFork, Revolut, Mybeezebox), strictly to the extent necessary to provide the service requested by the User (for example, when redeeming a loyalty discount at the restaurant).
Depending on the purpose, the categories of data processed may include: identification data (first name, last name), contact data (email, phone), browsing data, and, in the case of recruitment processes, CV and professional data.
No special categories of personal data (ethnic origin, ideology, health, sexual orientation, etc.) are processed for the purposes described in this Policy.
5. PURPOSES OF PROCESSING, CONTROLLER, AND LEGAL BASIS
5.1 Browsing the Website (cookies and analytics)
Controller: Flax & Kale, S.L.U.
Purpose: measuring traffic and use of the Website via Google Analytics 4, and displaying the restaurant location map via embedded Google Maps.
Legal basis: User consent (Art. 6(1)(a) GDPR), provided through the cookie settings panel.
More information: see our Cookie Policy.
5.2 Table reservations (TheFork and Revolut)
The Website allows the User to reserve a table through TheFork and Revolut reservation modules, integrated into the Website but operated directly by those platforms.
Controller: TheFork and/or Revolut, respectively, as independent controllers of the data the User provides when booking (Art. 6(1)(b) GDPR, performance of the booking contract with the third party). Flax & Kale, S.L.U. does not receive or store the personal data entered in these modules, except for the minimum operational booking information (name and number of diners) needed to organise service at the restaurant.
We recommend reviewing TheFork’s privacy policy (thefork.es/legal) before providing your data through that platform. In the case of Revolut, we recommend reviewing the information and terms provided by the platform at the time of booking.
If, when booking through TheFork, the User ticks the box to receive offers and marketing communications, that marketing processing is managed directly by TheFork in accordance with its own privacy policy; Flax & Kale, S.L.U. does not take part in sending those communications nor receive the resulting contact list.
5.3 Loyalty programme and gift cards (Mybeezebox)
Controller: Flax & Kale, S.L.U., with regard to the data it receives when the User redeems a Mybeezebox discount or gift card at the restaurant.
Purpose: managing the booking associated with the redemption, applying the corresponding discount, and operational management of service at the restaurant.
Legal basis: performance of the contractual relationship arising from the redemption of the discount/gift card (Art. 6(1)(b) GDPR).
The purchase of the gift card or joining the loyalty programme itself is carried out directly on the Mybeezebox platform, which acts as an independent controller for that data. Flax & Kale, S.L.U. only receives the data strictly necessary to manage the redemption when the User visits the restaurant.
5.4 Recruitment processes (“Work with us”)
Controller: TERESA CARLES HOLDING, S.L. (Tax ID No. (NIF) B25683103), which centrally manages recruitment processes for all companies in the Group, regardless of the website where the application was submitted.
Purpose: managing the recruitment process the candidate has applied for, including the location/office indicated by the candidate.
Legal basis: implementation of pre-contractual measures at the data subject’s request (Art. 6(1)(b) GDPR) and, where applicable, the data subject’s consent for the talent pool (Art. 6(1)(a) GDPR).
Retention period: the data and CV will be kept only for the specific recruitment process, unless the candidate has given express consent to be included in the Group’s talent pool, in which case they will be kept for an additional period of 24 months, after which consent will be requested again or the data will be deleted.
Recipients: the Human Resources team of TERESA CARLES HOLDING, S.L., the applicant management tool (Factorial), acting as data processor, and, if selected, the Group company that ultimately formalises the employment contract.
5.5 Whistleblowing channel (Internal Information System)
In addition, the Group has a Whistleblowing Channel (Internal Information System) managed centrally by Teresa Carles Holding, S.L. through Factorial’s technology platform, which acts as data processor. Data processing within this channel is governed by its own specific information, available within the channel itself.
6. SUMMARY TABLE OF PROCESSING ACTIVITIES
Purpose | Controller | Legal basis | Retention period |
Browsing the Website (cookies) | Flax & Kale, S.L.U. | Consent | As per the Cookie Policy |
Table reservations (TheFork / Revolut) | TheFork / Revolut (independent controllers) | Performance of the booking contract (by the third party) | As per the third party’s policy |
Loyalty and redemptions (Mybeezebox) | Flax & Kale, S.L.U. | Performance of the contractual relationship arising from the redemption | Duration of the relationship + statutory limitation periods |
Recruitment (“Work with us”) | Teresa Carles Holding, S.L. | Pre-contractual measures / consent (talent pool) | Duration of the specific process / additional 24 months with consent |
7. DATA RECIPIENTS AND DATA PROCESSORS
In addition to the third parties identified in section 5 (TheFork, Revolut, Mybeezebox, and Teresa Carles Holding, S.L.), we may disclose your data to service providers acting as data processors on our behalf, such as web hosting providers, IT maintenance providers, and web analytics tools, all subject to a data processing agreement that ensures the confidentiality and security of your data.
We do not transfer or sell your personal data to third parties for commercial purposes unrelated to the purposes described in this Policy.
8. INTERNATIONAL DATA TRANSFERS
- Google (Google Analytics 4 and Google Maps) may involve a transfer of data to the United States. This transfer is carried out under the safeguards adopted by Google (adherence to the EU-U.S. Data Privacy Framework and/or standard contractual clauses approved by the European Commission).
- TheFork and Revolut process booking data as independent controllers, in accordance with their own privacy policies and the safeguards each has implemented for any international transfers.
No other international transfers of personal data are carried out beyond those indicated. If new providers are added that involve additional transfers, this Policy will be updated.
9. RETENTION PERIODS
As a general rule, we keep your personal data for a maximum period of 24 months from the User’s last interaction with us, unless a different specific retention period applies (indicated in section 5 and in the summary table in section 6). After that period, and unless there is a legal obligation to retain it for longer, the data will be duly blocked for the period during which legal liabilities may arise from its processing, and will be permanently deleted once that latter period has elapsed.
10. AUTOMATED DECISION-MAKING AND PROFILING
Flax & Kale, S.L.U. does not carry out, within the scope of the processing described in this Policy, automated decision-making, including profiling, that produces legal effects on the User or similarly significantly affects them.
11. MINORS
The Website is not intended for minors under 14 years of age. Flax & Kale, S.L.U. does not knowingly collect personal data from minors of that age without the consent of their parents or legal guardians. If you become aware that a minor has provided us with personal data without such consent, please contact us at dpo@flaxandkale.com so we can delete it.
12. DATA SUBJECT RIGHTS
The User has the right to access their personal data, as well as to request rectification of inaccurate data or, where applicable, request erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, the User may request restriction of processing, data portability, or object to the processing of their data.
These rights may be exercised free of charge by writing to dpo@flaxandkale.com, indicating the right you wish to exercise and providing a copy of an identification document. You will receive a response within a maximum period of one month from receipt of the request, extendable by a further two months depending on the complexity and number of requests.
The User also has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their personal data does not comply with applicable regulations.
13. SECURITY MEASURES
Flax & Kale, S.L.U. has adopted the technical and organisational measures necessary to ensure a level of security appropriate to the risk, including, among others, access control to data, the confidentiality required of staff with access to it, and periodic review of those measures, with the aim of preventing alteration, loss, processing, or unauthorised access, taking into account the state of the art, the nature of the stored data, and the risks to which it is exposed.
14. APPLICABLE REGULATIONS
This Privacy Policy is governed by Regulation (EU) 2016/679 of 27 April 2016 (GDPR); Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD); and, with regard to the use of cookies, Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI).
15. UPDATES TO THE PRIVACY POLICY
Flax & Kale, S.L.U. reserves the right to amend this Privacy Policy to adapt it to legislative or case-law developments, as well as to changes in the data processing carried out. Users are advised to review this page periodically.
Last updated: 2026-07-07
1. INTRODUCTION
At Flax & Kale, S.L.U., part of the group of companies headed by Teresa Carles Holding, S.L., we use cookies and similar technologies on the flaxandkale.com Website to ensure it works properly, analyse its use, and improve the User experience. This Cookie Policy provides clear, detailed information about what cookies are, which types we use, for what purpose, and how you can manage them.
2. WHAT ARE COOKIES?
Cookies are small text files that websites place in the User’s browser or device when browsing, which allow, among other things, storing and retrieving information about the User’s browsing habits or their device, recognising them on subsequent visits, and personalising their experience.
3. OWNER AND CONTROLLER OF COOKIES ON THIS WEBSITE
The owner of the flaxandkale.com Website and controller of the first-party and analytics cookies described in this policy is FLAX & KALE, S.L.U., with Tax ID No. (NIF) B25767781. Cookies installed by the embedded third-party services identified in section 7 are the responsibility of their respective providers, who act as independent controllers for that processing.
4. CLASSIFICATION OF COOKIES BY PURPOSE
- Technical or necessary cookies: essential for the proper functioning of the Website and cannot be disabled (for example, to remember your choice in the consent panel).
- Analytics cookies: allow us to quantify the number of users and statistically analyse their browsing in order to improve the Website (in our case, Google Analytics 4).
- Personalisation cookies: allow us to remember User preferences (language, region, etc.). We currently do not use cookies in this category on the Website.
- Advertising cookies and embedded third-party cookies: allow management of third-party spaces and modules integrated into the Website, such as table reservation widgets or the location map.
5. CLASSIFICATION OF COOKIES BY OWNERSHIP
First-party cookies, managed directly by Flax & Kale, S.L.U. from the Website’s own domain; and third-party cookies, managed and sent from a different domain managed by another entity (for example, Google, TheFork, or Revolut), which processes the information obtained in accordance with its own privacy policies.
6. CLASSIFICATION OF COOKIES BY DURATION
Session cookies, designed to collect and store data while the User accesses the Website and deleted when the session ends; and persistent cookies, where data remains stored on the device for a period defined by the controller of each cookie, which can range from a few minutes to several years.
7. COOKIES USED ON THIS WEBSITE
Cookie / Service | Owner | Type | Purpose | Duration |
First-party technical cookies | Flax & Kale, S.L.U. | Technical / necessary | Necessary for the operation and security of the Website (e.g., consent panel) | Session / up to 12 months |
Google Analytics 4 | Google LLC | Analytics | Measuring traffic and use of the Website in aggregated form | Up to 24 months (_ga cookie) |
Google Maps | Google LLC | Third party (embedded) | Displaying the restaurant location map embedded on the page | As per Google’s policy |
TheFork (reservation widget) | The Fork (TripAdvisor) | Third party (embedded) | Managing the table reservation module integrated into the Website | As per TheFork’s policy |
Revolut (reservation module) | Revolut Ltd. | Third party (embedded) | Managing the table reservation module integrated into the Website | As per Revolut’s policy |
Note: access to Mybeezebox, Uber Eats, Glovo, Instagram, Linkedin, and TikTok is provided via links that open those platforms in a separate tab or window, so they do not install cookies on the Flax & Kale, S.L.U. domain while the User remains on our Website. We recommend reviewing each platform’s own cookie policies when you access them.
In addition, regardless of the `_ga` cookie duration indicated in the table above, Google Analytics 4 has a retention period for the associated data on its servers, configurable between 2 and 14 months, which determines how long Google keeps granular user- and event-level information.
8. LEGAL BASIS AND CONSENT
In accordance with Article 22.2 of Law 34/2002 on Information Society Services and Electronic Commerce (LSSI), and Regulation (EU) 2016/679 (GDPR), installing cookies that are not necessary to provide the service expressly requested by the User requires prior consent that is free, specific, informed, and unambiguous. Technical or necessary cookies do not require consent, as they are essential for browsing.
9. COOKIE MANAGEMENT
On your first visit to the Website, you will be shown a cookie settings panel managed through CookieYes, where you can accept all cookies, reject non-essential cookies, or configure your preferences granularly by category. You can change your choice at any time by accessing the cookie settings panel available in the Website footer.
In addition, the User can allow, block, or delete cookies installed on their device through the settings options of the browser they use:
- Chrome: support.google.com/chrome/answer/95647
- Firefox: support.mozilla.org/es/kb/habilitar-y-deshabilitar-cookies
- Safari: support.apple.com/es-es/guide/safari/sfri11471/mac
- Edge: support.microsoft.com/es-es/microsoft-edge
10. CONSEQUENCES OF REJECTING OR DISABLING COOKIES
Rejecting or disabling technical cookies may affect the proper functioning of certain sections of the Website. Rejecting analytics or third-party cookies does not affect basic browsing of the Website, but it may limit features such as viewing the embedded map or the table reservation module; in that case, the User can access those services via the direct link to the relevant platform.
11. INTERNATIONAL TRANSFERS ARISING FROM COOKIES
The use of Google cookies (Analytics and Maps) may involve a transfer of data to the United States, carried out under the safeguards adopted by Google (adherence to the EU-U.S. Data Privacy Framework and/or standard contractual clauses approved by the European Commission). For more information about other personal data processing on the Website, please see our Privacy Policy.
12. UPDATES TO THE COOKIE POLICY
We may update the Website’s Cookie Policy, for example, due to regulatory changes or the addition of new services. We recommend reviewing this policy periodically so you are properly informed about how and why we use cookies.
Last updated: 2026-07-07
