Privacy policy
How we handle your personal data
Last updated: 24 August 2026
1. Data controller
The controller of the personal data collected through this website is:
- Company name: Piazza Marbella, S.L. ("Poke Mar")
- Tax ID (CIF): B22892228
- Registered office: Plaza General Chinchilla, Local 3, 29601 Marbella (Málaga), Spain
- Premises: Av. Hermanos Álvarez Quintero, 4, Local 4A, 29670 San Pedro Alcántara, Málaga
- Email: info@pokemar.es
- Phone: +34 604 43 37 82
2. Data we process
This website is primarily informational. We process personal data only in the following cases:
- Contact: when you email or call us, we process the identifying and contact details you provide and the content of your message.
- Reservations: bookings are handled through TheFork (LaFourchette SAS). The data you enter in their form is processed by that company under its own privacy policy and shared with us so that we can honour your booking.
- Online orders: delivery orders are placed on the Uber Eats and Glovo platforms, which act as independent controllers of the data they collect.
- Technical data: when you visit the site, our hosting provider logs technical data such as IP address, browser type and pages visited, in order to guarantee the security and operation of the service.
We do not collect special categories of data and we do not carry out profiling with legal effects.
3. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Answering enquiries and information requests | Consent and pre-contractual measures |
| Managing table reservations | Performance of a contract or pre-contractual measures |
| Managing food orders | Performance of a contract |
| Keeping the website secure | Legitimate interest of the controller |
| Meeting legal, tax and accounting obligations | Compliance with a legal obligation |
4. Retention periods
We keep data for as long as necessary to deal with your request and thereafter for the applicable statutory limitation periods (generally six years for commercial documentation under the Spanish Commercial Code and four years for tax obligations).
5. Recipients
We may share data with the following categories of recipients, always with the safeguards required by law:
- Reservation service providers (TheFork).
- Food delivery platforms (Uber Eats, Glovo).
- Cloud hosting and infrastructure providers (Amazon Web Services EMEA SARL), with servers located in the European Union.
- Public authorities and official bodies where there is a legal obligation.
6. International transfers
Our infrastructure is hosted in European Union data centres. Should any provider process data outside the European Economic Area, the standard contractual clauses approved by the European Commission or another valid transfer mechanism will apply.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, restriction of processing, portability and objection, and withdraw any consent given, by writing to info@pokemar.es stating the right you wish to exercise.
If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Cookies
This website does not use advertising cookies or third-party analytics. Only technical cookies strictly necessary for the operation of the site and for remembering your chosen language may be set; these are exempt from the consent requirement under Article 22.2 of the Spanish LSSI-CE.
Some embedded third-party content — the Google Maps map and TheFork booking module — may set its own cookies when loaded. You can consult their respective policies on their websites.
9. Security
We apply appropriate technical and organisational measures to protect personal data against destruction, loss, alteration or unauthorised access, including encryption in transit (HTTPS), access control and backups.
10. Changes to this policy
We may update this policy to reflect legal changes or new services. The date of the last update appears at the top of this page.