Privacy Policy

Your Privacy is Our Priority at Our Italian Restaurant

Effective Date: January 1, 2024 | Last Updated: January 1, 2024

Introduction

Welcome to our authentic Italian restaurant's privacy policy. We are committed to protecting your personal information and respecting your privacy rights. This comprehensive policy explains how we collect, use, store, and protect your personal data when you visit our restaurant, use our services, or interact with our digital platforms. We operate in full compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Data We Collect

Personal Information

  • Name and contact details for reservations and orders
  • Dietary preferences and allergen information
  • Payment information for transactions
  • Special occasion details for personalized service
  • Feedback and review information
Data Type Purpose Legal Basis
Contact Information Reservation management and communication Contract performance
Dietary Preferences Safe and personalized dining experience Legitimate interest
Payment Data Transaction processing Contract performance
Marketing Preferences Promotional communications Consent

Technical Information

We automatically collect certain technical information including IP addresses, browser types, device information, and usage patterns to improve our digital services and ensure security. This data helps us optimize our online reservation system and enhance user experience.

How We Use Your Data

Primary Uses: We use your personal information primarily to provide exceptional dining experiences, manage reservations, process payments, accommodate dietary requirements, and maintain communication about your visits and preferences.

  • Processing reservations and managing table availability
  • Preparing meals according to dietary restrictions and preferences
  • Processing payments and maintaining transaction records
  • Sending confirmation messages and important updates
  • Improving our menu offerings and service quality
  • Complying with health and safety regulations
  • Marketing communications (with your explicit consent)

Your Rights Under GDPR

As a data subject under GDPR, you have comprehensive rights regarding your personal information:

Right of Access

Request copies of your personal data and information about how we process it.

Right to Rectification

Request correction of inaccurate or incomplete personal information.

Right to Erasure

Request deletion of your personal data under certain circumstances.

Right to Restrict Processing

Request limitation of how we process your personal information.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for marketing purposes.

Data Protection and Security

We implement robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

  • Encrypted data transmission and storage systems
  • Regular security assessments and vulnerability testing
  • Staff training on data protection and privacy practices
  • Access controls limiting data access to authorized personnel only
  • Secure payment processing through certified payment providers
  • Regular backup procedures and disaster recovery plans
  • Compliance monitoring and audit procedures

Data Retention: We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Reservation data is typically retained for 2 years, while financial records are kept for 7 years as required by law.

Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:

  • With payment processors for secure transaction handling
  • With delivery services when you order takeout or delivery
  • With legal authorities when required by law or regulation
  • With service providers who assist in restaurant operations under strict confidentiality agreements
  • In case of business transfer, merger, or acquisition (with prior notice)

Cookies and Tracking

Our website uses cookies to enhance your browsing experience and provide personalized services. We use essential cookies for website functionality, analytical cookies to understand usage patterns, and preference cookies to remember your choices. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect website functionality.

International Data Transfers

If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or certification schemes approved by supervisory authorities.

Children's Privacy

We do not knowingly collect personal information from children under 16 years of age without parental consent. If we become aware that we have collected such information, we will take immediate steps to delete it from our systems.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes through our website or direct communication. Your continued use of our services after such modifications constitutes acceptance of the updated policy.