Privacy policy

The controller is CAMPISIS SL (Tax ID B75490094), with its registered office at Puerto Deportivo de Marbella 3 – 2º, Edificio Club Marítimo, 29603 Marbella (Málaga), Spain. CAMPISIS SL runs Campisi's Pizzeria, located at Av. las Palmeras, 76, Bloque 12, Local 6, 29631 Benalmádena (Málaga).

For any question about your data, you can write to info@campisismarbella.es or call +34 951 33 74 58.

Below you will find what we process in each case. We never use your data to send you advertising or to build profiles.

Bookings through the website

When the booking form is available, we process your name, telephone number and email address, the date, time and number of diners, and any comments you add. We use them to handle your request, confirm your table and look after you at the restaurant. If you include your email address, we will send a summary of your request to it.

Bookings and orders by phone

If you call the restaurant to book a table or to place a takeaway order, we note your name, your telephone number and the details of the booking or order, solely in order to handle them.

Email enquiries

We use the information included in your message to reply to you.

Security and abuse prevention

With each request sent from the website we store the date and time it was sent, your browser details (user agent) and a pseudonymised (hashed) value of the IP address — never the full address — in order to detect automated or abusive submissions. Our providers also process technical connection data so that the website works securely.

Where requests come from

We record the language and the page from which each request is sent and, where applicable, the website or campaign link through which you arrived, to see, in aggregate, which channels our requests come through.

Statistics (with your consent)

If you accept analytics cookies, Google Analytics 4 helps us understand how the website is used. We do not send Google Analytics any data that directly identifies you, such as your name, telephone number, email address or form content. You will find the details in our cookie policy.

Allergies and dietary preferences

Telling us about an allergy, an intolerance or a dietary preference (for example, the halal option) is always up to you: you can mention it in the booking comments or when you place your order. If you do, we will only use that information to handle your booking or order safely.

• Bookings and orders: taking steps at your request prior to entering into a contract and providing the service you request (Article 6(1)(b) GDPR).
• Invoices and accounting, where issued: the legal obligations that apply to us (Article 6(1)(c) GDPR).
• Questions unrelated to a booking or order: our legitimate interest in answering you (Article 6(1)(f) GDPR).
• Website security and aggregate channel analysis: our legitimate interest in protecting the service and in understanding how effective our communication is (Article 6(1)(f) GDPR). You can object at any time.
• Google Analytics: used only with your consent (Article 6(1)(a) GDPR and Article 22(2) LSSI-CE); you can withdraw it via Cookie settings.
• Information on allergies or dietary preferences: you give it to us with your explicit consent (Article 9(2)(a) GDPR), which you can withdraw whenever you wish.

The mandatory fields of the form are needed to process the booking; without them we cannot handle it. Confirming that you have read this policy is not consent to any other use.

We only share data with public authorities, courts and tribunals when the law requires us to. In addition, the following providers process data on behalf of CAMPISIS SL, with the safeguards of Article 28 GDPR:

• Amazon Web Services EMEA SARL (Luxembourg): website servers, database and sending of emails, in the European Union.
• Cloudflare, Inc. (United States): DNS service for the domain.
• Google Ireland Limited (Ireland): Google Analytics 4, used only with your consent.

If you order or book through a third-party platform, that platform handles your data under its own privacy policy, and we receive only what is needed to prepare your order or look after your booking.

We host the website and the database in the European Union. As Amazon Web Services, Cloudflare and Google belong to US groups with global networks, some technical or statistical data may be processed outside the European Economic Area. These transfers rely on the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795), for participating companies, and on the European Commission's standard contractual clauses. The list of participating companies is available at dataprivacyframework.gov (opens in a new tab).

• Bookings (web or phone): until the booked date and, afterwards, only for as long as needed to resolve any questions or claims about your visit.
• Takeaway orders by phone: for as long as needed to prepare and hand over the order; if we issue an invoice in your name, it is kept for six years as required by law (Article 30 of the Spanish Commercial Code).
• Emails: for the duration of the conversation and as long as needed to deal with your request.
• Technical security data: only for as long as strictly needed to detect abusive submissions or resolve incidents (the pseudonymised IP value attached to a request is kept with it).
• Google Analytics: data linked to your browser is kept for 14 months at most.

After that, the data is deleted or, where the law requires it, blocked for the applicable limitation periods (Article 32 LOPDGDD).

You have the right to access your data, rectify it, request its erasure, object to its processing, and request restriction of processing and portability of the data you have provided to us. You can also withdraw any consent you have given whenever you like; doing so does not affect processing carried out before you withdrew it.

Send your request to info@campisismarbella.es or by post to our registered office, stating which right you wish to exercise. It is free of charge and we will reply within one month at the latest (extendable by two further months if the request is complex). Only if there are reasonable doubts about your identity will we ask for the additional information needed to confirm it.

We take no decisions about you based solely on automated processing that would produce legal effects for you or affect you in a similarly significant way.

If you disagree with our reply, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es (opens in a new tab).

Bookings must be made by adults. We do not knowingly process data from children under 14 and, if we detect that we have, we delete it.

We protect your data with appropriate technical and organisational measures: an encrypted connection (HTTPS) across the whole website, access to bookings limited to authorised staff with individual credentials, and, for requests sent through the website, storage of IP addresses only in pseudonymised form.

We will review this policy when the law or the way we work changes, for example if the restaurant starts using a third-party booking or delivery system. You will always find the version in force, and the date of its last update, on this page.