1. Who We Are
CK Events Management and Hospitality Group LLC is a limited liability company incorporated in the State of Wyoming, United States of America (EIN: [XX-XXXXXXX]), with its registered address at 30 N. Gould Street, Ste N, Sheridan, WY 82801, USA. The company operates three brands: JoEs TaBLe, a corporate culinary event concept brand; Clandestino Kitchen, a B2B hospitality consultancy identity; and Pipeline, a proprietary operational technology platform. All personal data collected through any of these brands, their websites, or their associated booking and enquiry systems is processed by CK Events Management and Hospitality Group LLC as the sole data controller.
The websites operated by CK LLC include joestable.clandestino.kitchen and clandestino.kitchen. This Privacy Policy applies to all personal data collected through both websites and through any booking, enquiry, or event attendance associated with any CK LLC brand.
As the data controller, CK LLC is responsible for deciding how and why your personal data is processed. You can contact us about any data protection matter at: compliance@clandestino.kitchen.
2. Our EU and UK Representatives
CK Events Management and Hospitality Group LLC is not established in the European Union or the United Kingdom. We are in the process of formally appointing designated Representatives in both jurisdictions in accordance with Article 27 of the GDPR and Article 27 of the UK GDPR. The interim arrangements during the appointment process are set out below.
CK Events Management and Hospitality Group LLC is in the process of formally appointing a designated EU Representative in accordance with Article 27 of the General Data Protection Regulation (EU) 2016/679. Until that appointment is completed and confirmed, EU residents who wish to exercise their data protection rights or raise any matter relating to the processing of their personal data by CK LLC may contact us directly at compliance@clandestino.kitchen. We will respond to all requests within 30 days in accordance with our obligations under the GDPR. The name and contact details of our appointed EU Representative will be published in this section as soon as the appointment is confirmed.
CK Events Management and Hospitality Group LLC is in the process of formally appointing a designated UK Representative in accordance with Article 27 of the UK General Data Protection Regulation. Until that appointment is completed and confirmed, UK residents who wish to exercise their data protection rights or raise any matter relating to the processing of their personal data by CK LLC may contact us directly at compliance@clandestino.kitchen. We will respond to all requests within 30 days in accordance with our obligations under the UK GDPR. The name and contact details of our appointed UK Representative will be published in this section as soon as the appointment is confirmed.
3. What Personal Data We Collect
We collect only the personal data that is necessary for the purposes described in this Privacy Policy. We collect your first name, last name, and email address. For corporate bookings and business enquiries we also collect your company name. Where you provide it in connection with an event, we collect dietary requirements and allergen information solely to ensure appropriate arrangements are made. Payment is processed by Stripe, Inc. We do not store card numbers, bank details, or full payment credentials. We receive confirmation of payment status only. We also collect technical data including IP address, browser type, and device information when you visit our websites.
We do not collect special categories of personal data as defined under Article 9 GDPR beyond dietary and allergen information. We do not use that information for any purpose other than event delivery.
4. How We Collect Your Data
We collect personal data directly from you when you submit an enquiry through any CK LLC website, complete a booking or event registration, correspond with us by email, or attend a JoEs TaBLe event. We also collect technical data automatically through cookies and similar tracking technologies when you visit our websites. See Section 12 for further information on cookies.
5. Why We Process Your Data and Our Legal Basis
We process your personal data for the following purposes, each with its own legal basis. We process your booking and deliver the event on the legal basis of performance of a contract under Article 6(1)(b) GDPR. We respond to your enquiries on the basis of legitimate interests under Article 6(1)(f) GDPR, our legitimate interest being the ability to respond to potential clients. We send marketing communications to existing clients on the basis of legitimate interests under Article 6(1)(f) GDPR; you may opt out at any time as described in Section 10. We operate and improve our websites on the basis of consent under Article 6(1)(a) GDPR where cookies are used. We comply with legal and accounting obligations on the basis of legal obligation under Article 6(1)(c) GDPR.
6. Who We Share Your Data With
We share personal data only where necessary for the purposes described in this Privacy Policy. We do not sell personal data.
We share your name and dietary or allergen information with the independent venue operator and culinary team responsible for delivering your event. This sharing is necessary to fulfil your booking. Partners receive only the data needed for event delivery and are not permitted to use it for any other purpose.
Payments are processed by Stripe, Inc. as an independent data processor under its own privacy policy and data processing agreement. Transaction confirmation data flows through Mercury Bank as part of our payment reconciliation process.
We may disclose personal data to competent authorities where required by law, court order, or regulatory obligation. We do not share personal data with third parties for their own marketing purposes.
7. International Data Transfers
CK Events Management and Hospitality Group LLC is based in the United States. When you provide personal data to us, that data is transferred to and processed in the United States. The United States does not have a general adequacy decision from the European Commission for GDPR purposes. For data transferred in connection with your booking or event attendance, we rely on the derogation under Article 49(1)(b) GDPR, which permits transfers necessary for the performance of a contract between the data subject and the controller. For personal data processed by our service providers, including Stripe for payment processing, data may be transferred internationally in accordance with those providers’ own transfer mechanisms and data processing agreements. If you would like further information about the safeguards in place for international transfers of your personal data, please contact us at compliance@clandestino.kitchen.
8. How Long We Keep Your Data
We retain booking and event data for six years from the date of the event to comply with applicable tax and legal record-keeping obligations. Where you make an enquiry but no booking follows, we retain your data for twelve months from the date of the enquiry. We retain contact data for marketing communications until you opt out, after which we remove it from our marketing lists within thirty days. Website analytics data is retained for twenty-six months from collection. Dietary and allergen information is deleted within thirty days of the relevant event date.
9. Your Rights
If you are an EU or UK resident, you have the right to access the personal data we hold about you, to request correction of inaccurate or incomplete data, and to request erasure of your personal data in certain circumstances. You have the right to restrict how we use your personal data while a dispute is resolved, and the right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract. You have the right to object to processing based on legitimate interests or for direct marketing purposes; where you object to direct marketing we will stop immediately. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
These rights are not absolute and may be subject to exemptions or limitations under applicable law. We will respond to all valid requests within thirty days. Where a request is complex or numerous, we may extend this period by a further two months and will notify you accordingly.
10. How to Exercise Your Rights
To exercise any of the rights described in Section 9, please contact us at compliance@clandestino.kitchen. Please include your full name, the email address associated with your booking or enquiry, and a description of the right you wish to exercise. EU residents may also contact our EU Representative directly once appointed. UK residents may contact our UK Representative once appointed. Interim contact details are set out in Section 2.
We do not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive. If you wish to opt out of marketing communications, you may do so at any time by emailing compliance@clandestino.kitchen with the subject line “Unsubscribe” or by clicking the unsubscribe link in any marketing email we send you.
11. Right to Complain
You have the right to lodge a complaint with a data protection supervisory authority if you believe we have processed your personal data in a way that does not comply with applicable data protection law. You do not need to contact us first before lodging a complaint, though we encourage you to raise any concerns with us directly so that we can address them.
The lead supervisory authority for our operations in Spain is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid, Spain, website www.aepd.es, phone +34 901 100 099. The supervisory authority for UK residents is the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom, website www.ico.org.uk, helpline 0303 123 1113.
12. Cookies
Our websites use cookies and similar tracking technologies. Full details of the cookies used across joestable.clandestino.kitchen and clandestino.kitchen, their purposes, and their retention periods are set out in our Cookie Policy. We use strictly necessary cookies to ensure our websites function correctly; these do not require your consent. We use analytics cookies to understand how visitors use our websites; these require your consent, which we request through our cookie consent mechanism when you first visit. You can withdraw consent for non-essential cookies at any time through your browser settings or by revisiting the cookie consent mechanism.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data processing activities, legal requirements, or operational practices. The date at the top of this document shows when it was last updated. Where changes are material, we will notify you by email if you have an active booking or account with us, or by posting a notice on our websites. Continued use of any CK LLC website or services after an update to this Privacy Policy constitutes acceptance of the updated terms.