Privacy policy

Who processes your data

The data controller is:

• RISTORANTE «AL FOGHER» DI TRENO ANGELO & C. S.a.s.
• Contrada Bellia — incrocio SS 117 bis / SS 288 per Aidone, 94015 Aidone (EN), Italy
• VAT number 00579830860
• Email: alfogher.treno@gmail.com
• Phone: +39 0935 684123

What data we collect

The site has no account area, requires no registration, and collects nothing automatically beyond what the cookie policy describes and what the section “The data the server records by itself” below describes.

The only place where you enter data is the booking request form. Its fields are:

• Name — required
• Date — required
• Time — required
• Number of guests — required
• Phone — optional
• Notes — optional, free text

The Notes field and health information

The Notes field is free text and suggests telling us about allergies, a high chair, or the occasion. A food allergy or intolerance is health data, which the GDPR protects specifically (Article 9).

We process it only because you chose to tell us, and only to serve you safely at the table: the legal basis is your explicit consent (Article 9(2)(a)), the one you give by ticking the box in the form. Writing it is your choice — you can leave it out and tell us in person when you arrive, or over the phone.

Why we process it, and on what legal basis

Purpose: to act on your booking or information request, check availability and get back to you.

Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR). For any health information in the notes, the basis is your explicit consent, as explained above.

Providing the data is optional: nobody has to use the form. But without a name, date, time and number of guests we cannot book the table. The phone number you can leave out: the message reaches us through WhatsApp anyway, so we already see your number — the field is only there if you would rather be called back on another one.

How the processing actually works — worth reading

This is a static website: it has no application server and no database, and the data you type into the form does not reach us through it. There is no site archive for it to land in.

When you press “Send”, the form assembles what you wrote into a text message and opens WhatsApp on your device with that message ready. You are the one who sends it, from your own WhatsApp account. If you change your mind and do not send it, the data never reaches us: it stays in your browser and disappears when you close the page.

There is one point worth spelling out, because it is rarely mentioned and it matters here. The data travels inside the web address the form opens (wa.me), written into the address itself. Depending on your device, that address is either handled directly by the WhatsApp app or goes through Meta’s servers first: in the second case Meta sees that data the moment the link opens — that is, before you press send.

The message arrives at the restaurant’s WhatsApp number, +39 348 333 7561. Along with the text we also see your phone number and WhatsApp profile name: WhatsApp shows them to us because the message comes from you, even if you did not type them into the form.

If you prefer, you can simply call us: in that case no data passes through this site at all.

The data the server records by itself

As with any website, when you open a page the server delivering it records the request: IP address, date and time, page requested, browser type. This is technical data; it exists so that pages can be delivered and so that faults or attacks can be noticed, and we do not use it to work out who you are.

The site is hosted by Vercel Inc. (United States), which acts as a processor on our behalf and keeps those logs under its own terms. The legal basis is our legitimate interests in keeping the site running and secure (Article 6(1)(f)).

We do not cross-reference this data with the form data, and there is no way for us to get from an IP address to a booking.

Who we share it with

Nobody else. We do not sell, rent or share your data with third parties for commercial purposes.

• The restaurant — the owners and the people who handle bookings.
• Meta Platforms Ireland Ltd., as the provider of WhatsApp: the message travels through its infrastructure and is processed under its own policy.
• Vercel Inc., which hosts the site: it processes the technical browsing data described above, not the form data.

• WhatsApp privacy policy
• Vercel privacy policy

How long we keep it

Messages stay in the restaurant’s WhatsApp chat for one month from receipt, then they are deleted. We keep no other copies: as said above, the site stores nothing.

Transfers outside the European Union

The restaurant does not transfer your data outside the European Union.

The two providers above do, as both have a United States parent company. Meta and Vercel state that they transfer data on the basis of the standard contractual clauses approved by the European Commission (Article 46(2)(c)) and, for transfers to the United States, of the EU-US Data Privacy Framework. The safeguards they apply are described in their own notices, linked in the “Who we share it with” section.

Automated decision-making and profiling

We do none. No decision concerning you is made by an automated system, and we do not profile you in any way.

Your rights

You may exercise the rights under Articles 15-22 GDPR at any time:

To exercise them, write to alfogher.treno@gmail.com or call +39 0935 684123. We reply within one month.

If you believe the processing of your data breaches the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

• Access — find out what data of yours we hold, and get a copy.
• Rectification — have it corrected if it is wrong or incomplete.
• Erasure — ask for it to be deleted.
• Restriction — ask that it only be stored, not used.
• Objection — object to the processing.
• Portability — receive it in a machine-readable format.
• Withdrawal of consent — where processing is based on consent, you can withdraw it at any time, without affecting what was done beforehand.

• Garante per la protezione dei dati personali

Cookies

The site uses very few cookies, and none of them profile you. The details — names, purposes and durations — are in the cookie policy, linked at the bottom of every page.

Changes to this policy

If the way we process data changes, we will update this page along with the last-updated date shown at the top.