Cookie Policy

Cookies are small text files that are downloaded to your device when you visit our website. They allow us to recognize your device and store information about your preferences or previous actions.\n\nThis Cookie Policy explains how Enigma Cocina Con Alma uses cookies and similar technologies on our website enigmaconalma.com. We explain what these technologies are, why we use them, and your rights to control our use of them.\n\nIn compliance with AEPD 2025 guidelines, we guarantee complete transparency about our use of cookies.

We use cookies for several important reasons:\n\n• Essential cookies: Necessary for the technical functioning of the website\n• Functionality cookies: Remember your language, theme and settings preferences\n• Analytics cookies: Understand how visitors use our site to improve it\n• Reservation cookies: Maintain your reservation information during the process\n• Security cookies: Protect against fraud and ensure security\n\nIn compliance with AEPD 2025, we ensure that:\n• Essential cookies are used without requiring consent\n• Non-essential cookies require explicit consent\n• Consent buttons have equal prominence\n• Consent is recorded with timestamp and method\n• Consent duration does not exceed 24 months

ESSENTIAL COOKIES (Always active)\nThese cookies are strictly necessary to provide our services:\n• Session management: Authentication and user session\n• Security: CSRF protection and fraud prevention\n• Basic functionality: Language, reservation cart, navigation\n\nFUNCTIONALITY COOKIES (Require consent)\n• enigma-lang: Language preference (1 year)\n• enigma-theme: Dark/light mode (1 year)\n• enigma-reservas: Temporary reservation data (session)\n• enigma-preferencias: Custom settings (6 months)\n\nANALYTICS COOKIES (Require consent)\n• Google Analytics: Website usage statistics (anonymous)\n• _ga: Unique user identifier (24 months)\n• _gid: Session identifier (24 hours)\n• Performance monitoring: Load times and errors\n\nMARKETING COOKIES (Require consent)\n• Social media: Integration and content sharing\n• Remarketing: Personalized ads (when enabled)\n• Newsletter: Email campaign tracking\n\nSECURITY COOKIES (Require consent)\n• DDoS protection: Suspicious traffic analysis\n• Fraud detection: Anomalous behavior patterns\n• Security audit: Access logs and security events

TECHNICAL COOKIES\n• enigma-session: User session token\n• sb-access-token: Database authentication\n• sb-refresh-token: Automatic session renewal\n• csrf-token: CSRF attack protection\n\nRESERVATION COOKIES\n• enigma-reservation-data: Temporary reservation information\n• enigma-customer-prefs: Saved gastronomic preferences\n• enigma-allergens: Allergy and intolerance information\n\nEXPERIENCE COOKIES\n• enigma-visit-count: Number of site visits\n• enigma-last-visit: Last visit date\n• enigma-favorite-dishes: Dishes marked as favorites\n\nLEGAL COMPLIANCE COOKIES\n• enigma-consent: Cookie consent record (24 months)\n• enigma-consent-id: Unique consent identifier\n• enigma-gdpr-status: GDPR rights status exercised

CONSENT REQUIREMENTS\nAccording to AEPD 2025 guidelines, we implement:\n\n• Explicit consent: Required for non-essential cookies\n• Equal prominence: Accept and Reject buttons have the same visual weight\n• Granular control: Consent options by specific category\n• Easy withdrawal: Consent can be withdrawn at any time\n\nCONSENT RECORD\nWe maintain records of your consent including:\n• Consent timestamp\n• Consent method (banner, preferences panel)\n• Categories you consented to\n• IP address (for security purposes)\n• Browser and device information\n• Cookie policy version\n\nCONSENT DURATION\n• Maximum duration: 24 months according to AEPD 2025\n• Automatic renewal: Re-consent request after expiration\n• Voluntary review: Option to review consent at any time\n\nCONSENT METHODS\n• Initial banner: First website visit\n• Preferences panel: Detailed configuration by category\n• Account settings: Management from user area\n• Renewal email: Notification before expiration

PREFERENCE MANAGEMENT\nYou can manage your cookie preferences in several ways:\n\n• Preference Center: Accessible from the footer\n• Browser Settings: Native browser controls\n• Direct contact: reservas@enigmaconalma.com\n• User panel: If you have a registered account\n\nBROWSER CONFIGURATION\nInstructions for main browsers:\n\n• Chrome: Settings → Privacy and security → Cookies\n• Firefox: Preferences → Privacy & Security → Cookies\n• Safari: Preferences → Privacy → Cookies\n• Edge: Settings → Site permissions → Cookies\n\nTHIRD-PARTY OPTIONS\nFor third-party cookies, you can opt out directly:\n\n• Google Analytics: https://tools.google.com/dlpage/gaoptout\n• Digital Advertising: http://optout.aboutads.info/\n• Social Networks: Privacy settings on each platform\n\nCONSEQUENCES OF DISABLING COOKIES\nIf you disable certain cookies:\n• Reduced functionality: Some features may not work\n• Loss of preferences: You will have to reconfigure options on each visit\n• Less personalized experience: We will not remember your gastronomic preferences\n• Reservation issues: The reservation system may be affected

SERVICE PROVIDERS\nSome of our service providers may set cookies:\n\n• Google Analytics: Website usage analysis (anonymous)\n• Payment Systems: Secure transaction processing\n• Maps and Location: Geolocation services\n• Social Networks: Share buttons and integration\n• CDN and Hosting: Performance optimization\n\nTHIRD-PARTY COOKIE CONTROL\nThese cookies are subject to third-party privacy policies:\n• We do not sell or share data with third parties for marketing\n• We only work with providers that comply with GDPR\n• You can opt out directly with each provider\n• We regularly verify our provider compliance\n\nPROVIDER MANAGEMENT\n• Regular auditing of all service providers\n• Data processing agreements with GDPR guarantees\n• Privacy impact assessment for new services\n• Complete transparency about what data is shared and why

DATA LOCATION\n• Main servers: European Union (GDPR compliance)\n• Backups: Certified data centers in the EU\n• International transfers: Only to countries with adequacy decision\n• Service providers: Location verification and adequate protections\n\nSECURITY MEASURES\nWe implement technical and organizational protections:\n• Encryption in transit: HTTPS for all communications\n• Encryption at rest: Data stored with AES-256 encryption\n• Access control: Only authorized personnel can access data\n• Regular audits: Quarterly security reviews\n• Staff training: Regular data protection training\n\nDATA RETENTION\nRetention periods by cookie type:\n• Session cookies: Deleted when closing browser\n• Functional cookies: Maximum 1 year\n• Analytics cookies: Maximum 24 months\n• Consent records: 3 years (legal requirement)\n• Security logs: 1 year\n\nSECURE DELETION\n• Automatic deletion after expiration\n• Verifiable deletion processes\n• Destruction certificates for sensitive data\n• Audit of deletion processes

MINOR PROTECTION\nEnigma Cocina Con Alma takes minor protection very seriously:\n\n• We do not knowingly collect data from minors under 16\n• We require parental consent for minors between 13-16\n• We do not set marketing cookies for identified minors\n• We provide parental control tools\n\nMINOR IDENTIFICATION\n• We do not routinely request date of birth\n• We use technical indicators to identify possible minors\n• In case of doubt, we request age verification\n• We immediately delete data from unauthorized minors\n\nPARENTAL CONSENT\nWhen parental consent is required:\n• Identity verification of parent/guardian\n• Clear explanation of what data is collected\n• Parents right to review and delete data\n• Direct contact to exercise parental rights\n\nCONTACT FOR MINOR MATTERS\nFor any inquiries about minors and cookies:\n• Email: reservas@enigmaconalma.com (Subject: Minor Protection)\n• Guaranteed response within 24 hours\n• Immediate deletion if unauthorized minor is confirmed

POLICY CHANGES\nWe may update this Cookie Policy to reflect:\n\n• Changes in applicable legislation\n• New technologies or services\n• Improvements in our privacy practices\n• Feedback from users and control authorities\n\nCHANGE NOTIFICATION\nWe will notify you of significant changes through:\n• Prominent notice on our website\n• Email to registered users\n• Cookie banner update\n• Notification on your next restaurant visit\n\nNEW CONSENT REQUIREMENT\nWe will request new consent when:\n• New cookie categories are added\n• Processing purposes change\n• Retention periods are modified\n• Required by applicable legislation\n\nVERSION RECORD\n• Current version: 1.0.0\n• Effective date: September 17, 2025\n• Next scheduled review: March 17, 2026\n• Change history available upon request\n\nCONTACT FOR INQUIRIES\nFor any questions about this policy:\n• Email: reservas@enigmaconalma.com\n• Phone: +34 672 79 60 06\n• Address: Carrer Justicia 6A, 03710 Calpe, Alicante\n• Preference Center: Available in the footer\n\nWe recommend periodically reviewing this policy to stay informed about how we use cookies.