Privacy Notice

Who is responsible for your data?

SUNSET BEACH VIEW, S.L., NIF/CIF B93704591, Avenida Ricardo Soriano 72, Planta 2, Puerta H, 29601 Marbella, Málaga, Spain. Contact: [email protected]. ZIRA is the restaurant brand used on this website.

What we collect and why

Advance table requests: name, email address, telephone number, requested date and preferred time, party size and chosen language, to respond to your enquiry and arrange a potential booking.
Invitation list: email address, optional name, selected language and your consent record, to send ZIRA invitations and updates if you choose to subscribe.
Security: technical information needed for fraud and abuse prevention when Cloudflare Turnstile is enabled.

Legal basis

We process the details required to respond to your own booking request as steps requested before entering into a reservation arrangement (GDPR Article 6(1)(b)). We process invitation-list contact details on the basis of your freely given consent (Article 6(1)(a)); that consent is separate from a booking request and can be withdrawn at any time. Necessary security processing may rely on our legitimate interests in protecting the service (Article 6(1)(f)), subject to applicable safeguards.

How long is the information kept?

Advance table enquiries will be reviewed until the request is resolved. For table enquiries formally closed without becoming a confirmed reservation, we apply a 90-day retention criterion measured from the latest of the requested visit, last recorded response from the restaurant and closure date, except where there is a lawful reason to retain the record for longer. Open enquiries are kept while they are being handled and periodically reviewed by our team; they are not automatically removed based on their age alone. Pending invitation sign-ups and failed confirmation deliveries: 7 days after expiration of the 48-hour confirmation link. Active invitation subscribers: while the subscription and consent remain valid. After an unsubscribe: a minimal record of consent and withdrawal may be kept for up to 365 days to document your preference and prevent unwanted mail, unless legal obligations require a different period. Technical rate-limit counters: 2 days. Copies of messages retained in Fastmail and Resend are managed separately from the website database. You may contact us to exercise your rights regarding those records, where applicable.

Who receives the information?

Only authorised ZIRA personnel and service providers working under applicable agreements may access data needed to process a request. Our current technology providers include Cloudflare (hosting, bot protection and database), Fastmail (business email) and Resend / Plus Five Five, Inc. (transactional emails, subscription confirmation and associated message metadata and content). We do not sell guest details. Booking enquiries are not added to marketing lists without separate consent.

International data processing

Resend states that message and related data are stored in the United States, even when the Ireland sending region is selected. The email sending region is not an EU-only storage arrangement. The relevant contractual safeguards are described in the provider’s Data Processing Addendum, including the EU Standard Contractual Clauses. Other providers may also involve international data access, subject to applicable safeguards and their contractual documentation.

Your rights

You can request access, rectification, erasure, restriction, objection or portability where applicable, and withdraw marketing consent without affecting previous lawful processing. Write to [email protected]. You may also complain to the Spanish Data Protection Agency (AEPD).

Marketing preferences

Invitations and marketing emails are optional. Booking a table does not automatically subscribe you. Marketing emails will include an unsubscribe mechanism once the service is activated.

Cookies and security tools

The opening-soon site is designed not to use non-essential advertising or analytics cookies before appropriate choices are provided. When forms are activated, Cloudflare Turnstile may process technical signals for bot prevention; details of these services will be kept under review.

Last updated: 31 October 2026