Toranj
Toranj

Privacy Policy

Effective date: October 2026 | Toranj Persian Restaurant Marbella

1. Who We Are

This Privacy Policy explains how Toranj Persian Restaurant (“Toranj”, “we”, “us” or “our”) collects, uses and protects your personal information when you visit our website at toranjpersian.com, make a reservation, place an order or contact us directly.

Our details:

We handle personal data in accordance with the EU General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, and Spain’s Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

2. What Information We Collect

We collect only the information we need to manage reservations, process orders and respond to customer enquiries.

Depending on how you interact with us, this may include:

  • Table reservations: Your name, telephone number, email address, reservation date and time, number of guests, and any dietary or seating preferences you choose to share.
  • Online orders and delivery: Your name, delivery address, telephone number and order details. Our stated delivery areas include Marbella, Puerto Banús, Nueva Andalucía, San Pedro de Alcántara and Benahavís.
  • Enquiries and communications: Your contact details and the contents of messages you send through WhatsApp, by telephone or email, or via our website contact form.
  • Technical information: Basic website and server logs, IP address, device and browser information, and your cookie preferences.

We do not ask for sensitive personal information as part of our standard services. However, if you choose to tell us about a food allergy or dietary requirement, we may process that information to help accommodate your needs when preparing or serving your meal.

3. How and Why We Use Your Information

We use your personal information only where we have a valid legal basis under Article 6 of the GDPR:

To provide our services

We use your details to manage table reservations, process food orders, arrange deliveries, confirm bookings and respond to service-related requests. This processing is necessary to take steps at your request or fulfil our agreement with you (Article 6(1)(b) GDPR).

To meet our legal obligations

We retain and process relevant invoices, accounting records and transaction information where required by Spanish tax and commercial law (Article 6(1)(c) GDPR).

To keep our website secure

We may use technical information to maintain website security, prevent spam and handle general operational enquiries. Where applicable, this processing is based on our legitimate interests, provided those interests do not override your rights and freedoms (Article 6(1)(f) GDPR).

To use non-essential cookies and analytics

We use non-essential cookies or analytics technologies only where you have given your consent, when required by applicable law (Article 6(1)(a) GDPR).

4. Who We Share Your Information With

We do not sell, rent or trade your personal information.

We may share relevant information with trusted service providers when necessary to operate our website and restaurant services. These may include:

  • Website hosting and infrastructure providers: To host our website, store its database and maintain system backups.
  • Communication providers: Services such as WhatsApp Business and telecommunications providers, where needed to communicate with you about reservations, orders or deliveries.
  • Public authorities and legal bodies: Spanish tax authorities, courts or other competent authorities when disclosure is required by law.

Where a service provider processes personal data on our behalf, we require appropriate contractual and security safeguards. We take reasonable steps to ensure that personal information is handled securely and only for the relevant purposes.

5. How Long We Keep Your Information

We keep personal information only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required by law.

  • Reservation details: Kept for the time needed to manage your booking and any related follow-up. Records may be retained for a limited period afterwards where necessary for customer service or legitimate business purposes.
  • Invoices and transaction records: Retained for the periods required under applicable Spanish commercial and tax legislation. The exact period depends on the type of record and the legal obligation that applies.
  • Enquiries and correspondence: Kept until your request has been resolved and, where necessary, for a limited period afterwards. We aim to delete these records within 12 months unless there is a valid reason to retain them longer.

When information is no longer needed and no legal obligation requires us to keep it, we will delete it or otherwise dispose of it securely.

6. Your Data Protection Rights

Under the GDPR, you have several rights regarding your personal information. Depending on the circumstances, you may:

  • Access your data: Ask whether we process your personal information and request a copy.
  • Correct your data: Ask us to correct information that is inaccurate or incomplete.
  • Request deletion: Ask us to delete your personal information when the legal conditions for erasure are met. We may need to retain certain records to comply with our legal obligations.
  • Restrict processing: Ask us to limit how we use your information in circumstances provided for by law.
  • Transfer your data: Request a copy of eligible information in a structured, commonly used, machine-readable format.
  • Object to processing: Object to processing based on our legitimate interests where the law gives you that right.

To exercise your rights, email us at info@toranjpersian.com with the subject line “Data Subject Request”. Please describe your request clearly so we can respond appropriately.

You also have the right to lodge a complaint with Spain’s data protection authority, the Agencia Española de Protección de Datos (AEPD), through its official website: www.aepd.es.

7. Cookies and Browser Storage

Our website may use essential cookies and local browser storage to support basic website functions, maintain user sessions and remember your cookie preferences.

Where we use analytics or other non-essential cookies, we will request your consent before activating them when required by law.

You can manage your preferences through the cookie settings interface available on our website. You can also clear cookies and local storage through your browser settings, although doing so may affect certain website functions.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, the way we handle personal information or applicable legal requirements.

Any changes will be published on this page. Please check this page occasionally to stay informed about how we protect your information.

9. Contact Us

If you have any questions about this Privacy Policy, how we use your personal information or how to exercise your data protection rights, please contact us: