AIRA Beach Club Privacy
Español ← Home

Privacy policy

This policy explains what personal data we process at AIRA Beach Club, what we use it for, how long we keep it and how you can exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 (LOPDGDD).

01Data controller

Controller
UTE Sala Magma y Esatur XXI Playa El Altet
Tax ID (CIF)
U93764934
Registered office
Avda. Pintor Xavier Soler, 16 · 03015 Alicante, Spain
Premises
El Altet beach · 03195 Elche (Alicante), Spain
Contact
hola@airabeach.es · +34 622 70 69 15

02What we process and why

We only process data you give us yourself, apart from the technical statistics described below. This website has no user accounts and no online sales, and we do not buy databases from third parties.

Enquiries, bookings and contact

Data
Your name, telephone number, email address and the content of your message.
Purpose
To answer your enquiry, arrange a table or event booking and maintain the conversation you started.
Legal basis
Your consent when you contact us, and pre-contractual steps taken at your request (art. 6(1)(a) and 6(1)(b) GDPR).
Retention
For as long as we are dealing with your request and afterwards for as long as needed to address any legal liabilities.

Event RSVPs and invitations

Data
Name, email address, mobile number and number of guests.
Purpose
To manage the guest list and capacity for specific events (such as our opening night) and to send you the practical details of that event.
Legal basis
Your consent, given when you confirm your attendance (art. 6(1)(a) GDPR).
Recipients
This data is also recorded in Grupo Magma's internal management system, hosted on the same infrastructure and accessible only to authorised staff.
Retention
Up to twelve months after the event, unless you ask us to delete it sooner.

Job applications

Data
Whatever you include in your application or CV: identification and contact details, education and professional experience.
Purpose
To assess your application and manage the venue's recruitment processes.
Legal basis
Your consent and pre-contractual steps prior to possible employment (art. 6(1)(a) and 6(1)(b) GDPR).
Retention
One year from receipt, so we can consider you for future vacancies. You may ask us to delete it sooner.

Menu QR code statistics

Data
Date and time of the scan, browser type and an anonymised IP address: we strip the final block before storing it, so it cannot identify anyone.
Purpose
To know how often the menu is viewed from the tables, so we can decide how many printed menus to produce and how to improve them.
Legal basis
Our legitimate interest in understanding how our own materials are used (art. 6(1)(f) GDPR), with minimal impact thanks to anonymisation.
Retention
Kept indefinitely as aggregated, anonymised data, since it cannot identify individuals.

Social media and WhatsApp

Data
Your public profile and the messages you send us via Instagram or WhatsApp.
Purpose
To reply through whichever channel you choose and to manage our presence on those platforms.
Legal basis
Your consent when you contact us that way (art. 6(1)(a) GDPR).
Please note
These platforms are controllers of their own processing and are also governed by their own terms and privacy policies, which we do not control.

03Server logs

Like any web server, ours automatically records accesses (IP address, date, time and the resource requested) for security purposes and to diagnose faults. These logs are kept for a short period, used solely for that purpose, and never combined with other data to build profiles.

04Who receives your data

We do not sell or trade your data. The following may access it solely in order to provide us with their service, under the corresponding data processing agreement:

We will also disclose your data to public authorities, courts and law enforcement where we are under a legal obligation to do so.

05International transfers

We do not carry out international transfers on our own initiative. Any that occur arise from the Google and Meta services mentioned above, which rely on the EU-US Data Privacy Framework and on standard contractual clauses approved by the European Commission.

06Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, without affecting the lawfulness of processing carried out beforehand.

To do so, write to hola@airabeach.es or by post to the address in section 1, identifying yourself and stating which right you wish to exercise. We will reply within one month at the latest.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid · www.aepd.es).

07Automated decisions and profiling

We do not make automated decisions or build profiles from your data.

08Security

We apply appropriate technical and organisational measures to protect your data: encrypted HTTPS connections, access restricted to authorised staff, and regular system backups.

09Children

This website is not aimed at children under fourteen and we do not knowingly collect their data. If we find that we have received data from a child without the consent of their parent or guardian, we will delete it.

10Changes to this policy

We may update this policy if our processing activities or the applicable legislation change. The version in force is always the one published on this page, with its update date at the foot.

Last updated: 18 July 2026 · UTE Sala Magma y Esatur XXI Playa El Altet · Tax ID U93764934