Cookie policy

1. Controller and scope

The controller of this website is SALOMON 1965 HOSPITALITY HOLDING, S.L., with NIF B-72979404 and registered address at Paseo de Gracia, 98, 3.º 1.ª, 08008 Barcelona. This policy applies to browsing on arravalrestaurantbarcelona.com and www.arravalrestaurantbarcelona.com.

This information is supplemented by the Privacy Policy, which explains the processing of personal data and the exercise of rights, and by the Legal Notice.

2. What cookies and similar technologies are

Cookies are small files that a website or a third party may store in your browser. Similar technologies, such as browser local storage, may also be used. They are used, for example, to maintain a session, remember a choice or measure use of the website in aggregate form.

This website distinguishes between technologies necessary to provide or protect the service and optional purposes for statistics and external reservations. A general acceptance is not used to authorise purposes other than those selected.

3. Your choice and how it is stored

When you first enter, optional purposes remain disabled. The notice offers acceptance and rejection with equal visibility, as well as allowing separate selection of statistics and external reservations. Rejecting does not prevent you from viewing the website's public content.

The choice is stored locally in your browser under the key arraval.consent.v2, which is local storage and not a cookie. It includes the choice version, permitted categories and their dates; it expires after 180 days. When it expires, you are asked to make a choice again. If the browser does not allow that storage, the preference cannot be remembered outside the current page.

You can reopen the panel using the “Privacy” button and change or withdraw consent at any time. Withdrawal blocks new loads and measurements in disabled categories, without affecting the lawfulness of prior processing.

4. Necessary technologies and infrastructure elements

The management session cookie arraval_gestion_session is used only after accessing the administration area. Its purpose is to authenticate and protect that session; it lasts for a maximum of 8 hours and is configured with the HttpOnly and Secure attributes. It is not used for advertising or visitor analytics.

Public access to PDF menus does not in itself involve a new tracking technology. The website may also rely on managed hosting, database and storage services to handle requests and serve files. This policy does not state an absolute absence of infrastructure cookies: if a technical layer outside the website's configuration were to incorporate them, it must be identified and assessed in the production environment before being attributed to this controller.

5. Statistics: Google Analytics 4

Google Analytics 4, with measurement identifier G-CPL2XGW83F, is loaded only when you authorise the statistics category and browse on one of the indicated production domains. Before that authorisation, Google's remote tag is not loaded and no measurement requests are sent, including cookie-free modes.

When you authorise it, the configuration records a page view with the address made up of the origin and path, without query parameters or fragments, and without referrer. The configuration disables Google signals, advertising personalisation and advertising storage; this integration is not used for advertising, remarketing or ad personalisation.

In this configuration, Google Analytics may use the _ga cookie and those beginning with _ga_. They are configured with a maximum duration of 180 days and with cookie_update disabled, so subsequent browsing does not renew that duration from this configuration. You may consult Google's Privacy Policy and its explanation of how it uses cookies.

6. External reservations: TheFork

Reservations are offered through an external TheFork service. TheFork content is not loaded when opening a public page: it connects only when opening the reservation dialog and when there is current or remembered permission for the external reservations category, or when you choose to allow loading for that specific opening. When the dialog is closed, the reservation frame is unloaded.

Once the service has loaded, TheFork may process information and use its own cookies or similar technologies in accordance with its documentation. This website cannot reliably list those third-party technologies without up-to-date confirmation from the provider. You may consult TheFork's privacy and cookie statement and its own configuration tools. The choice on this website is limited to allowing connection to the reservation service and does not constitute a global authorisation for other third-party purposes.

7. Withdrawal, deletion and browser controls

You can reject from the initial notice as easily as you can accept. You can also reopen the preferences from the “Privacy” button and withdraw consent. When you withdraw analytics, the website attempts to delete Analytics cookies accessible from this origin. It cannot guarantee deletion of cookies that may have been created by a third party, such as TheFork; for those, also use the provider's tools or your browser settings.

You can delete or block cookies and website data from your browser. See the official instructions for Chrome, Firefox and Safari. Blocking or deleting necessary technologies may affect access to the administration area or the website's ability to remember your choice.

8. Providers and international transfers

Google and TheFork are external providers with their own policies. Information on the processing they carry out when using their services, including possible international access or transfers, must be consulted through each provider's links. This policy does not state the existence of a specific data-processing agreement, Data Privacy Framework certification, adequacy decision or other specific safeguard of those providers without applicable documentary verification.

If the use of cookies or similar technologies involves the processing of personal data, complete information about the rights of access, rectification, erasure, objection, restriction and portability is set out in the Privacy Policy.

9. Policy update

This policy will be reviewed before incorporating new purposes, providers or technologies that require additional information or consent. The published version will apply unless a later update date is indicated.