Cookie statement
Last updated:
This statement explains which cookies and similar technologies kokukitchen.com (the "Site") uses, what they do, who sets them, how long they last, and how you can accept, refuse or withdraw your consent. It complements our Privacy policy and follows article 22.2 of Spain's Law 34/2002 on information society services (LSSI-CE), the GDPR, and the Spanish Data Protection Agency's (AEPD) guide on the use of cookies.
Who is responsible
- For the Site and the cookies described here: BEAUT1FUL NET S.R.L., Strada Ștefan Cicio-Pop 8, Dej, Cluj, Romania (the "Website Operator"), which builds and runs the Site for the Restaurant.
- For the restaurants, bookings and orders: DE LISTUIN AND SANS SL, with tax ID (NIF) B66245432, Carrer del Comerç 29, 08003 Barcelona, España (the "Restaurant").
You can contact either at info@kokukitchen.com.
What cookies and similar technologies are
Cookies are small text files that a website stores in your browser. Websites can also store information in your browser in other ways, such as local storage (kept until deleted) and session storage (deleted when you close the tab). This statement calls all of these "cookies" and treats them the same way.
Cookies can be:
- First-party, set by the Site itself, or third-party, set by another company's service.
- Session cookies, deleted when you close your browser, or persistent cookies, kept until they expire or you delete them.
How we ask for your consent
When you first visit, a banner (run by Axeptio) lets you accept all, refuse all (the "No, thanks" button) or choose which tools to allow. Refusing is as easy as accepting, and the Site works either way.
- Only necessary cookies are used without your consent.
- Analytics and advertising cookies are used only if you accept them.
- Your choice is kept for 6 months, after which we ask again. We also ask again if we add a new tool.
You can change or withdraw your consent at any time with the "Cookie settings" button at the foot of every page. Withdrawing consent stops the tools it covered and deletes the cookies they left in your browser. It does not affect what was done before you withdrew it.
1. Necessary cookies (no consent needed)
These are needed for the Site to work or to remember your cookie choices.
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
axeptio_cookies | Axeptio (first-party) | Cookie | Stores your consent choices for each tool | 6 months |
axeptio_authorized_vendors | Axeptio (first-party) | Cookie | Stores the list of tools you accepted | 6 months |
axeptio_all_vendors | Axeptio (first-party) | Cookie | Stores the list of tools the banner offered you | 6 months |
__ph_opt_in_out_phc_* | PostHog (first-party) | Local storage | Stores only your analytics choice, so PostHog knows whether it may use cookies | Until deleted |
koku_lang | Koku Kitchen (first-party) | Cookie | Remembers the Site's language: the one your browser asks for on your first visit, or the one you pick in the language menu, which always wins | 1 year |
koku:gracia-welcome | Koku Kitchen (first-party) | Local storage | Remembers that you have already seen the popup announcing the Gràcia restaurant, so it isn't shown again | Until deleted |
Google Tag Manager (Google Ireland Ltd) loads the other tools according to your choices. It sets no cookies of its own. Cloudflare hosts the Site and protects it from attacks; it may set short-lived security cookies (such as __cf_bm, 30 minutes) when needed.
2. Analytics cookies (only with your consent)
These help us understand how the Site is used, so we can improve it.
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
_ga | Google Analytics 4 (first-party) | Cookie | Distinguishes visitors, to count visits and see which pages are read | 2 years* |
_ga_9TVXNWHQLH | Google Analytics 4 (first-party) | Cookie | Keeps the state of your visit (session number, engagement) | 2 years* |
ph_phc_*_posthog | PostHog (first-party) | Cookie | Random identifier that tells visits apart, used for usage analytics, heatmaps and session recordings | 1 year |
ph_phc_*_posthog | PostHog (first-party) | Local storage | Copy of the identifier and visit data above | Until deleted |
ph_phc_*_posthog__flags | PostHog (first-party) | Local storage | Stores which Site features are switched on for you | Until deleted |
ph_phc_*_posthog, ph_phc_*_window_id, ph_phc_*_primary_window_exists, ph_phc_*_session_registered_properties | PostHog (first-party) | Session storage | Keeps track of the current visit and tab (referrer, tab identifier) | Until the tab is closed |
* Some browsers shorten this to about 13 months.
Session recordings. With your consent, PostHog can record a replay of your visit: how the page looked and how you moved through it. What you type into form fields is masked before it is recorded. PostHog stores this data in the European Union (Frankfurt), through a relay on our own domain (po.kokukitchen.com).
Cookieless measurement. If you refuse analytics, or before you choose, PostHog runs in a cookieless mode and visitors.now counts visits. Neither stores anything on your device (except your choice, listed above), so neither is a cookie. See the Privacy policy for details.
3. Advertising cookies (only with your consent)
These measure whether our Google ads lead to visits and bookings, and let us show you our ads again on Google and other sites (remarketing).
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
_gcl_au | Google Ads (first-party) | Cookie | Links ad clicks to conversions (such as a booking) | 3 months |
_gcl_aw | Google Ads (first-party) | Cookie | Stores the ad click you arrived from (set only when you arrive from a Google ad) | 3 months |
_gcl_gb | Google Ads (first-party) | Cookie | Same, for clicks from Google apps and iOS (set only when you arrive from a Google ad) | 3 months |
_gcl_dc | Google Ads (first-party) | Cookie | Same, for display ads (set only when you arrive from one) | 3 months |
_gcl_ls | Google Ads (first-party) | Local storage | Copy of the ad-measurement data above, and the status of Google's tag | Until deleted |
IDE and similar | Google (third-party, on doubleclick.net / google.com) | Cookie | Shows you our ads on other sites and measures them (remarketing) | Up to 13 months |
Google's third-party cookies are set on Google's own domains and managed by Google. See how Google uses cookies.
4. Booking widget: TheFork (third-party)
Our booking pages embed the booking widget of TheFork (La Fourchette SAS, France) in a frame. Inside it, TheFork and its providers set their own cookies, as an independent controller, under TheFork's own cookie and privacy policies (on thefork.com). We saw:
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
datadome | TheFork / DataDome | Cookie (thefork.com) | Protects the booking form from bots and fraud | 1 year |
__stripe_mid | TheFork / Stripe | Cookie (widget.thefork.com) | Prevents fraud when a card guarantee or deposit is needed | 1 year |
__stripe_sid | TheFork / Stripe | Cookie (widget.thefork.com) | Same, for the current visit | 30 minutes |
amp-exp-* | TheFork / Amplitude | Local storage (widget.thefork.com) | Tests different versions of TheFork's widget | Until deleted |
EXP_client-*_DEFAULT_USER_PROVIDER | TheFork / Amplitude | Local and session storage (widget.thefork.com) | Remembers when you first saw the widget, for those tests | Until deleted |
Data sent outside the European Union
- PostHog stores data in the EU (Frankfurt).
- Google (Analytics and Ads) may process data in the United States through Google LLC, under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
- Axeptio and TheFork are based in France. For their providers, see their own policies (Axeptio, TheFork).
Profiling
With your consent, Google Ads adds visitors to advertising audiences so we can show them our ads again (remarketing). This is a limited form of profiling for advertising. We take no automated decisions about you with legal or similarly significant effects.
How to delete or block cookies in your browser
Besides the "Cookie settings" button, you can delete cookies or block them in your browser settings. Blocking all cookies may stop some parts of the Site, such as the booking widget, from working.
You can also opt out of Google Analytics on all sites with Google's opt-out browser add-on, and manage Google's ad personalisation at My Ad Center.
Your rights
You can access, correct or delete your data, object to or restrict its use, and ask for a copy, by writing to info@kokukitchen.com. You can also complain to the Spanish Data Protection Agency (aepd.es). See our Privacy policy for details.
Changes to this statement
We update this statement when the tools on the Site change. The date at the top shows the latest version. If we add a tool that needs consent, the banner will ask you again.