Privacy policy

Last updated: 2026-11-01

This is a translation for convenience. In case of discrepancy, the Spanish version prevails.

1. Data controller

• Controller: BENAMARJIT SL (Indian Restaurant Chilli)
• Tax ID (NIF/CIF): B93596880
• Address: Calle Isla Verde, 2, 29688 Estepona (Málaga), España
• Email: chilli.estepona@gmail.com
• Phone: +34 602 83 71 04

2. What data we process and why

WhatsApp bookings. The booking form on this website does not store or send data to our servers: it prepares a message that opens in WhatsApp. If you send it, we receive your name, date, time, number of guests, preferred area and your WhatsApp phone number. We use them only to manage your booking and contact you about it.

Calls and emails. If you call or write to us, we process the data you provide to answer your enquiry.

Browsing. Our hosting provider temporarily logs technical data (IP address, browser, pages requested) to serve the website and protect it against abuse. Only if you accept it in the cookie notice, we measure visits in aggregate with Google Analytics 4 (Google Ireland Ltd.), with IP anonymisation. We do not use advertising tools.

3. Legal basis

• Bookings: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Enquiries: your consent when contacting us and our legitimate interest in replying (Art. 6(1)(a) and (f) GDPR).
• Technical browsing data: legitimate interest in running the website securely (Art. 6(1)(f) GDPR).
• Google Maps: your consent, which you can withdraw at any time via “Cookie settings” (Art. 6(1)(a) GDPR).

4. Retention

Booking data is kept for as long as needed to manage the booking and then deleted, unless it must be kept to meet legal obligations or handle possible claims during the applicable limitation periods.

5. Recipients and international transfers

We do not share your data with third parties unless required by law. The following service providers are involved:

• WhatsApp (WhatsApp Ireland Ltd., Meta group), the messaging service you choose to use for booking.
• Vercel Inc., website hosting.
• Google Ireland Ltd., only if you choose to load the map.
• Google Ireland Ltd. (Google Analytics), only if you accept analytics.
• Unsplash Inc., which serves two illustrative dish photos (it receives your browser’s IP address).

Some of these providers may process data in the United States under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to chilli.estepona@gmail.com, stating which right you are exercising. If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the authority in your country.

7. Children

Bookings must be made by people aged 14 or over.

8. Changes

We may update this policy to reflect legal or service changes. The date of the latest update is shown at the top.