Privacy policy

1. Controller

The controller is XIANG Amsterdam (Golden Chopsticks Amsterdam B.V.), Oude Doelenstraat 1, 1012 ED Amsterdam. Privacy questions can be sent to info@xiangamsterdam.com.

2. Data we may process

When you call, email or contact us through an external reservation service, we may process your name, contact details, reservation details, message and other information necessary to handle your request. Our hosting infrastructure may also log limited technical data, such as an IP address, browser type and access time, for security and reliable operation.

3. Purposes and legal bases

We process data only to answer enquiries, manage reservations, provide restaurant services, keep the website secure and meet legal obligations. The relevant legal bases may be performance of a contract or pre-contractual steps, our legitimate business interests, legal obligations and, where applicable, consent.

4. External services and sharing

This website may link to Google Maps or a reservation service. Once you open an external service, that provider processes data under its own privacy policy. We share data with contracted service providers or competent authorities only where necessary to provide a service, comply with law or protect legitimate rights.

5. Cookies

The website may use cookies necessary for core functionality. We do not intentionally place advertising or behavioural tracking cookies unless we separately ask for and receive your consent.

6. Retention and security

We keep personal data only for as long as needed for the purpose for which it was collected or as required by law. We use technical and organisational safeguards appropriate to the nature and risk of the data.

7. Your rights

Under the GDPR, you may request access, correction, deletion, restriction or portability of your personal data, object to processing, or withdraw consent. Email info@xiangamsterdam.com. We may need to verify your identity and normally respond within one month.

8. Complaints, governing law and updates

You may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Dutch law applies. We may update this policy when our website or services change; the version shown here is the current version.