Catwalk Cafe
Privacy policy
Last updated 29 September 2026
Who we are
This website is run by Miamar Productions S.L.U., Ibiza, Spain. We are the "data controller": we decide how the personal data collected through this site is used, and we are responsible for it under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).
For anything to do with your data, contact us through our contact page. Our full company details (registered address, tax number and registry entry) are in our legal notice.
What we collect and why
Visiting the site. Like every website, ours receives your IP address and basic browser details (browser type, the page you asked for, the time) when you visit, because your device must send them to load the page. Our hosting provider uses them to deliver the site and protect it from attacks and abuse. We have a legitimate interest in keeping the site running and secure (GDPR Art. 6(1)(f)). We don't use this to identify you, and we don't run analytics or advertising trackers.
Contacting us. If you email us or use the contact form, we receive your name, email address and whatever you write, and use them only to reply and to follow up on your enquiry (GDPR Art. 6(1)(b), steps before a contract, and Art. 6(1)(f), answering you). We keep them for as long as the conversation needs, then delete them within 12 months unless the law requires us to keep them longer.
Videos. Some of our videos are hosted by YouTube and Vimeo. Those players only load if you accept cookies in our cookie banner or press play on a video (GDPR Art. 6(1)(a), consent). When they load, the provider receives your IP address and may set cookies or similar storage on your device, under their own privacy policy. Until then you'll see a placeholder, and nothing is sent to them.
Fonts, images and our own videos. Our fonts, images and the video at the top of the home page are served from our own site, so loading them doesn't contact any other company.
Who else sees your data
We share data only with the providers below, who help us run the site. We don't sell your data or share it for advertising. Some of them are based in the United States; transfers there are covered by the EU-US Data Privacy Framework, under which each of them is certified, and by the European Commission's Standard Contractual Clauses (SCCs).
| Provider | Purpose | Data | Legal basis | Location and safeguards |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosts the site and protects it from attacks | IP address, browser details, pages requested | Legitimate interest (Art. 6(1)(f)) | Served from the data centre nearest you (in Spain for Spanish visitors); may reach the US under the Data Privacy Framework and SCCs |
| Google Ireland Ltd. / Google LLC (YouTube) | Plays our videos | IP address, browser details, how you use the player | Consent (Art. 6(1)(a)) | EU and US, under the Data Privacy Framework and SCCs |
| Vimeo.com, Inc. | Plays some model videos | IP address, browser details, how you use the player | Consent (Art. 6(1)(a)) | US, under the Data Privacy Framework and SCCs |
Cookies and browser storage
We don't set tracking or advertising cookies. The site stores only what it needs to work, and the video providers store what they need once you allow their players. You can also block or delete cookies in your browser settings; blocking the strictly necessary ones may stop parts of the site from working.
| Name | Set by | Type | Purpose | Kept for | Category |
|---|---|---|---|---|---|
cc-consent | Catwalk Cafe | localStorage | Remembers your cookie choice | Until you change it or clear your browser data | Strictly necessary |
cc-splash-nav, cc-splash-force | Catwalk Cafe | sessionStorage | Plays the opening animation only when you first arrive | Until you close the tab | Strictly necessary |
__cf_bm, cf_clearance | Cloudflare | Cookie | Tells people from bots, when Cloudflare's protection is active | 30 minutes to 1 year | Strictly necessary |
CF_Authorization | Cloudflare | Cookie | Keeps you signed in while a preview of the site is behind a login | Up to 24 hours | Strictly necessary |
e.g. VISITOR_INFO1_LIVE, YSC, yt-remote-* | YouTube | Cookie and localStorage | Runs the video player and remembers player settings | Session to 6 months | External media - only with consent |
e.g. vuid, player | Vimeo | Cookie | Runs the video player and remembers player settings | Session to 2 years | External media - only with consent |
Change your choice at any time:
Your rights
You have the right to:
- ask for a copy of the personal data we hold about you (access);
- have it corrected if it's wrong (rectification);
- have it deleted (erasure);
- have us limit how we use it (restriction);
- receive it in a portable format (portability);
- object to our using it on the basis of legitimate interest (objection);
- withdraw your consent at any time, without affecting what was done before.
To use any of these rights, contact us as shown under "Who we are". We will answer within one month. If you think we have handled your data unlawfully, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or the data protection authority where you live.
Changes to this policy
If what we collect or who we share it with changes, we'll update this page and the date at the top, and ask for your cookie choice again where needed.