Privacy & Cookie Policy

Data controller

Data Protection Officer

The controller has not appointed a Data Protection Officer (DPO), as the mandatory conditions of Art. 37 of the Regulation do not apply. For any matter regarding your data you can contact the controller directly at the details above.

Purposes and legal basis

The data you provide is processed for the following purposes:

• To manage your booking and send confirmation and reminders via WhatsApp or SMS, with the option to cancel — legal basis: steps taken at the data subject’s request (Art. 6.1.b GDPR).
• To comply with the controller’s legal obligations — legal basis: legal obligation (Art. 6.1.c GDPR).
• To load third-party cookies and services (map, traffic measurement, marketing) — legal basis: your consent (Art. 6.1.a GDPR).

Provision of data

Providing data is optional, but the essential data (name and phone number) is necessary to manage your booking: without it we cannot process the request. Non-essential cookies and third-party services depend on your consent, and not enabling them does not affect your use of the site.

Recipients of the data

Your data stays with the restaurant. On our behalf it may be processed, as processors, by service providers: messaging providers (WhatsApp Business / Meta Platforms Ireland Ltd) and SMS, site hosting and maintenance services. With your consent, the third-party services listed in the cookie policy (Google, Meta) process data as independent controllers under their own notices. We do not sell or share your data for marketing without your consent.

Transfers to third countries

Some third-party services (Google, Meta), activated only with your consent, may involve the transfer of personal data to the United States. Such transfers take place under the safeguards of Art. 44 ff. of the Regulation (EU-US Data Privacy Framework adequacy decision and/or Standard Contractual Clauses). Without consent, no transfer occurs.

Retention period

Booking data is kept for as long as needed to manage the booking and for a short period afterwards for organisational and legal purposes, after which it is deleted or anonymised. Data collected through third-party cookies is retained for the durations set by the respective providers and in any case until consent is withdrawn.

Your rights

At any time you can exercise the following rights towards the controller:

• access to your personal data (Art. 15);
• rectification, erasure or restriction of processing (Art. 16, 17, 18);
• portability of data in electronic format (Art. 20);
• objection to processing (Art. 21);
• withdrawal of cookie consent at any time, via “Manage cookies” in the footer.

Right to lodge a complaint

If you believe your data is being processed in breach of the Regulation, you have the right to lodge a complaint with the Italian Data Protection Authority (Art. 77, garanteprivacy.it) or to bring the matter before the competent courts (Art. 79).

Automated decision-making

The data you provide is not subject to automated decision-making or profiling.

Changes to this notice

We may update this notice; changes will be published on this page, with the new update date shown at the top.

Cookies and similar technologies

The site uses technical cookies and local storage that are necessary for it to work and — only with your consent — third-party cookies and technologies for the map, traffic measurement and marketing. Technical cookies do not require consent. You can give or withdraw consent anytime via “Manage cookies” in the footer.