Notice
Privacy Policy
This notice explains how we process the personal data of people who visit santandrearestaurant.it, book a table or write to us, under Regulation (EU) 2016/679 (GDPR).
Data controller
S. Andrea S.r.l. (Ristorante Sant’Andrea), Via di Sant’Andrea delle Fratte 9, 00187 Rome (RM), Italy. Email: booking@santandrearestaurant.it. Phone: +39 06 679 3167.
For any request concerning your data, write to the email address above.
What data we process
- Online bookings: bookings are made on the OpenTable platform, which passes on the data needed to hold your table — first and last name, phone number, email, party size, date and time, and any notes such as allergies, intolerances or special occasions.
- Group and private-dining enquiries: the data you send us by email or phone — the same as for bookings, plus details of the occasion and, for companies and tour operators, business references.
- Browsing data: technical server logs (IP address, browser type, pages requested, date and time). They are needed to run and secure the website and are kept for a limited period, normally no longer than 30 days.
Why we process it and on what legal basis
- To manage your booking and table service — pre-contractual and contractual measures (Art. 6(1)(b)). Without this data we cannot hold your table.
- To answer information, group and event enquiries — legitimate interest in replying to those who contact us (Art. 6(1)(f)).
- Tax and accounting obligations — legal obligation (Art. 6(1)(c)).
- Website security and operation — legitimate interest (Art. 6(1)(f)).
Who may receive it
Your data is never sold or passed on to third parties for commercial purposes. It may be processed, on our behalf or as independent controllers, by:
- OpenTable, the platform on which online bookings are made. For the data collected on its platform, OpenTable is an independent controller and applies its own privacy notice.
- The hosting provider of this website, SiteGround Spain S.L. (Madrid, Spain), on Google Cloud infrastructure located in the European Union.
- The restaurant’s tax and accounting advisers, for legal obligations.
Transfers outside the European Union
The website is hosted in the European Union. OpenTable may also process data in the United States: transfers rely on the safeguards provided by the GDPR, including the standard contractual clauses approved by the European Commission.
How long we keep it
- Booking data: for as long as needed to provide the service and, afterwards, for the period required by tax and accounting obligations (up to 10 years for tax documents).
- Group and event enquiries: up to 24 months after the last contact, unless the enquiry becomes a booking.
- Technical server logs: normally no longer than 30 days.
Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing, objection and portability (Arts. 15–22 GDPR) by writing to booking@santandrearestaurant.it. If you believe the processing infringes the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Cookies
This website sets no cookies of its own and uses no analytics or profiling tools. Details are in the Cookie Policy.
Changes to this notice
If the tools or purposes of processing change, we will update this page before activating them. The date of the last update is shown at the top.