Privacy Policy

Data Controller: Enigma Cocina Con Alma\n\nAddress: Carrer Justicia 6A, 03710 Calpe, Alicante, Spain\nPhone: +34 672 79 60 06\nEmail: reservas@enigmaconalma.com\nActivity: Restaurant and gastronomic services

We process your personal data for the following purposes:\n\n• Reservation management: Process and confirm your table bookings\n• Customer service: Handle inquiries and provide information about our services\n• Commercial communications: Send information about special events, menus and promotions (only with your consent)\n• Legal compliance: Billing, accounting and tax obligations\n• Food safety: Management of allergies and intolerances to ensure your safety\n• Service improvement: Analysis of preferences to personalize your gastronomic experience

The processing of your data is based on:\n\n• Contract performance: To manage your reservations and provide our gastronomic services\n• Legitimate interest: To improve our services and manage the commercial relationship\n• Consent: For commercial communications and direct marketing\n• Legal obligation: To comply with tax, accounting and food safety obligations

We collect the following categories of data:\n\n• Identification data: Name, surname, phone, email\n• Reservation data: Date, time, number of diners, special preferences\n• Specific medical data: Food allergies and intolerances (only for your safety)\n• Payment data: Information necessary to process payments and issue invoices\n• Preference data: Favorite dishes, special occasions, visit history\n• Technical data: IP address, cookies, browsing data on our website

We retain your data for the following periods:\n\n• Active reservation data: During the validity of the commercial relationship\n• Billing data: 6 years (according to Spanish tax obligations)\n• Marketing data: Until you withdraw your consent\n• Allergy data: While you maintain a relationship with our restaurant\n• Technical cookies: As indicated in our Cookie Policy\n\nAfter these periods, we will proceed to the secure deletion of your data.

Your data may be shared with:\n\n• Technology service providers: Reservation systems, payment processing, web hosting\n• Delivery services: When you use home delivery services\n• Competent authorities: When required by law (health inspections, court orders)\n• Marketing services: Only with your explicit consent for commercial communications\n\nWE DO NOT SELL OR TRANSFER your data to third parties for commercial purposes without your consent.

As data subject, you have the right to:\n\n• Access: Obtain information about what data we have and how we use it\n• Rectification: Correct inaccurate or incomplete data\n• Erasure: Request deletion of your data when not necessary\n• Restriction: Restrict processing in certain circumstances\n• Portability: Receive your data in structured format\n• Object: Object to the processing of your data\n• Withdraw consent: Withdraw your consent at any time\n\nTo exercise these rights, contact us at: reservas@enigmaconalma.com

We implement appropriate technical and organizational measures to protect your data:\n\n• Encryption: HTTPS communications and sensitive data encryption\n• Access control: Only authorized personnel can access your data\n• Backups: Regular encrypted backups\n• Staff training: Regular data protection training\n• Regular audits: Periodic security system reviews\n• Password policy: Strong passwords and regular changes

If you consider that we have violated your data protection rights, you can:\n\n1. Contact us directly: reservas@enigmaconalma.com to resolve the incident\n2. File a complaint with the AEPD:\n\nSpanish Data Protection Agency (AEPD)\n• Address: C/ Jorge Juan, 6, 28001 Madrid\n• Phone: 901 100 099 / 912 663 517\n• Website: www.aepd.es\n• Electronic office: sedeagpd.gob.es

This Privacy Policy may be updated to reflect changes in our practices or applicable legislation.\n\nWe will notify you of significant changes through:\n• Notice on our website\n• Email to registered customers\n• Notification on your next restaurant visit\n\nLast update: September 17, 2025\n\nWe recommend periodically reviewing this policy to stay informed about how we protect your data.