Privacy & Cookie Policy

Data controller

Data Protection Officer

The controller has not appointed a Data Protection Officer (DPO), as the mandatory conditions of Art. 37 of the Regulation do not apply. For any matter regarding your data you can contact the controller directly at the details above.

Purposes and legal basis

The data you provide is processed for the following purposes:

• To manage your booking and send confirmation and reminders via WhatsApp or SMS, with the option to cancel — legal basis: steps taken at the data subject’s request (Art. 6.1.b GDPR).
• To comply with the controller’s legal obligations — legal basis: legal obligation (Art. 6.1.c GDPR).
• To load third-party cookies and services (map, marketing) — legal basis: your consent (Art. 6.1.a GDPR).

Provision of data

Providing data is optional, but the essential data (name and phone number) is necessary to manage your booking: without it we cannot process the request. Non-essential cookies and third-party services depend on your consent, and not enabling them does not affect your use of the site.

Recipients of the data

Your data stays with the restaurant. On our behalf it may be processed, as processors, by service providers: messaging providers (WhatsApp Business / Meta Platforms Ireland Ltd) and SMS, site hosting and maintenance services. With your consent, Google (map) processes data as an independent controller under its own notice. For the Meta Pixel and the Conversions API the controller and Meta Platforms Ireland Ltd are joint controllers (Art. 26 GDPR) limited to the collection and transmission of the data; for any subsequent processing Meta acts as an independent controller under its own notice. We do not sell or share your data for marketing without your consent.

If you consented to marketing cookies, when a booking is confirmed we send Meta — including from our server, via the Conversions API — the corresponding event: first name, last name and phone number in hashed form (SHA-256), the country derived from the dialling code, your IP address, your browser identifier (user agent), the Meta advertising identifiers stored on your device and the number of guests. Hashing does not make the data anonymous: it lets Meta match it to an existing profile. Without your consent this transmission does not take place.

Transfers to third countries

Some third-party services (Google, Meta), activated only with your consent, may involve the transfer of personal data to the United States. Such transfers take place under the safeguards of Art. 44 ff. of the Regulation (EU-US Data Privacy Framework adequacy decision and/or Standard Contractual Clauses). Without consent, no transfer occurs.

Retention period

Booking data is kept for as long as needed to manage the booking and for a short period afterwards for organisational and legal purposes, after which it is deleted or anonymised. Data collected through third-party cookies is retained for the durations set by the respective providers and in any case until consent is withdrawn.

Your rights

At any time you can exercise the following rights towards the controller:

• access to your personal data (Art. 15);
• rectification, erasure or restriction of processing (Art. 16, 17, 18);
• portability of data in electronic format (Art. 20);
• objection to processing (Art. 21);
• withdrawal of cookie consent at any time, via “Manage cookies” in the footer.

Right to lodge a complaint

If you believe your data is being processed in breach of the Regulation, you have the right to lodge a complaint with the Italian Data Protection Authority (Art. 77, garanteprivacy.it) or to bring the matter before the competent courts (Art. 79).

Automated decision-making

The controller does not carry out profiling or automated decision-making on the data you provide. With your consent, Meta may use the data received via the Pixel and the Conversions API for advertising profiling, under its own notice.

Changes to this notice

We may update this notice; changes will be published on this page, with the new update date shown at the top.

Cookies and similar technologies

The site uses technical cookies and local storage that are necessary for it to work and — only with your consent — third-party cookies and technologies for the map and marketing. Technical cookies do not require consent. You can give or withdraw consent anytime via “Manage cookies” in the footer.