Who processes the data
We have not appointed a Data Protection Officer: the business does not fall within the cases where the regulation requires one. For anything concerning your data, write or call the details above.
Booking a table
The booking form is provided by Dineout. What you enter — name, contact, date, number of guests and any notes about allergies or special occasions — is used to hold the table and to prepare for your evening.
The legal basis is the performance of a contract and of pre-contractual measures taken at your request (art. 6.1.b GDPR). Without this data a booking is not possible: it is the only case where providing data is necessary.
If you tell us about an allergy or intolerance, that is health data: we use it only to feed you safely, for the duration of your visit, and we pass it to the kitchen alone.
Writing or calling
There is no contact form on this site: there is an email address and a telephone number. If you write, we handle what you send for as long as it takes to reply and to act on your request. The legal basis is our legitimate interest in answering those who contact us (art. 6.1.f GDPR).
What we do not do
We send no newsletter and keep no mailing list. We profile nobody and take no automated decisions. We do not sell, transfer or exchange data with anyone for commercial purposes.
We use Google’s measurement tools to learn which pages get read. They do not start on their own: the legal basis is your consent (art. 6.1.a GDPR), which we ask for on your first visit and which you can refuse or withdraw whenever you like through “Cookie preferences” at the foot of every page. Say no, or say nothing, and nothing is measured. What it involves is set out on the cookies page.
Who else sees the data
Dineout — bookings
- Role
- Data processor
- What it handles
- Booking data
- Why
- Provides and runs the online booking system
Hosting provider
- Role
- Data processor
- What it handles
- Server technical logs
- Why
- Keeps the site and the mail running
Beyond these, restaurant staff see the data as far as their work requires, and the professionals who assist us on tax and legal matters see it where the law requires.
How long we keep it
Booking data stays for as long as it takes to handle the booking and to keep the accounts the law obliges us to keep. Emails stay while the conversation still means something, and no longer. Notes about allergies are not kept after your visit.
Where the law sets the period — tax records, for instance — that period applies.
Your rights
You may ask what data of yours we hold, obtain a copy, have it corrected if wrong or erased if we no longer need it, ask for restriction or portability, and object to processing based on our legitimate interest (arts. 15–22 GDPR).
Write to info@lasostadelcavaliere.com. We reply within a month. If our answer does not satisfy you, you may complain to the Italian data protection authority (Garante per la protezione dei dati personali).
If this page changes
If the tools we use change — for instance if we introduce traffic measurement — this page will say so before it happens, not after.