Privacy Policy

1. Identity, Contact Details & DPO

Operator / Service Provider:
Pizza Arena
Address: Laguna Beach, Local 20, Av. Esperanto, 29793 Torrox, Málaga, Spain
Phone: +34 635 81 20 88
Company Registration Number: N/A
Tax Identification Number: N/A
Data Protection Officer (DPO): N/A

If a DPO is later appointed, their contact details will be published on pizzaarena.es.

2. Purposes & Legal Bases for Processing

2.1. We process the personal data you provide (e.g. first name, surname, delivery address, telephone number, email) when placing an order so that we may conclude and perform contracts with you.
2.2. With your consent, your email address may be used for direct marketing (i.e. promotional offers). You can revoke this consent at any time using the unsubscribe link in every marketing email.
2.3. Your contact data may also be used to send you marketing for non-related products, only if you consented to it.
2.4. We retain personal data for as long as legally required or as long as necessary for the purposes for which they were collected.
2.5. We may process your data for additional purposes, if you provide explicit consent.

3. Legal Basis

We rely primarily on:

Art. 6(1)(b) GDPR (processing necessary for contract performance)
Art. 6(1)(c) GDPR (for compliance with legal obligations)
Art. 6(1)(f) GDPR (legitimate interests), particularly for marketing communications, when appropriate safeguards and balance are respected

4. Recipients of Personal Data

4.1. Your data may be shared with third parties (e.g. delivery services, billing providers, loyalty services) to fulfill contracts.
4.2. Specifically, personal data may be transmitted to email providers, SMS gateways, and storage service providers to send order confirmations, status updates, or delivery information.
4.3. We do not transmit payment card information through this system; that is handled securely by payment processors.

5. International Data Transfers

5.1. Transfers to third countries (outside the EU) will only occur under adequate safeguards (e.g. Standard Contractual Clauses) or explicit consent.
5.2. We may transmit limited personal data (name, address, email, phone) to international partners such as SendGrid, Twilio, Amazon, etc., for order processing, marketing, or notifications—always under contract and security guarantees.

6. Data Retention

Personal data will typically be held for 1 year unless legal requirements prescribe a longer retention period. Marketing contact details (email, telephone) may be retained for longer to allow lawful direct marketing.

7. Mandatory Data & Consequences of Non‑Provision

7.1. Provision of certain personal data is required to fulfill a contract.
7.2. If you refuse to provide mandatory data, we cannot process your order (e.g. no delivery address means no delivery).
7.3. Failure to provide email or phone means we cannot communicate order status, confirmations, or clarifications.

8. Your Rights (Access, Rectification, Erasure, etc.)

You have the rights under the GDPR: access, correction, deletion (right to be forgotten), restriction, portability, objection, and complaint to the supervisory authority. Requests can be made via contact email or postal address.
We will provide the required information free of charge in a commonly used format when requested.

9. Cookies & Tracking

Our site may use cookies for essential functions, performance, preferences, and analytics (e.g. Google Analytics).
You may disable cookies, but some site features may not work properly.
For details, please see our Cookie Policy on the website.

10. Policy Updates

We reserve the right to update this policy. Changes will be published on pizzaarena.es, and the effective date will be indicated.