01
Data controller
The data controller for this website is Stracuzzi Stefano, VAT number 03837830839, with registered office at Via Cavalieri della Stella, 39 — 98122 Messina (ME), which operates the restaurant Dastè, located at Via Cavalieri della Stella, 39 — 98122 Messina ME.
Email: info@ristorantedaste.itPhone: 090 369 8787
02
Data processed
Newsletter. The form on the homepage collects your email address to send news and updates from the restaurant. The date and time, source of the request, IP address and browser user-agent are also recorded when you subscribe, to document consent.
Browsing data. The systems that deliver the website may automatically process technical data, such as your IP address, the date and time of the request, the page requested, browser type and diagnostic information. This information is normally held in the server’s technical logs.
Enquiries and reservations. When you contact Dastè by email, telephone or WhatsApp, or book a table, we process the information you choose to share, such as your name, contact details, date and time, number of guests and the content of your enquiry.
If you tell us about food allergies or intolerances, this information may reveal health data. Please share it only when needed to manage your reservation and provide our service safely.
Usage statistics. Only with your consent, the website uses Google Analytics 4 to collect aggregate information about how it is used: pages visited, interactions (such as clicks to book, call, contact us on WhatsApp or open the map and menu), device and browser type, approximate location and online identifiers assigned by the cookies described in section 06.
03
Purposes and legal bases
Technical data is processed to deliver the website, keep it secure, prevent abuse and diagnose problems. The legal basis is the controller’s legitimate interest in keeping the service secure and operational, under Article 6(1)(f) of the GDPR.
Your email address is processed to send the restaurant news and updates you have requested. The legal basis is consent, given by selecting the checkbox in the form, under Article 6(1)(a) of the GDPR. You can withdraw your consent at any time by writing to info@ristorantedaste.it; withdrawal does not affect the lawfulness of earlier processing.
Information provided through our contact channels is used to answer enquiries, provide information about the restaurant and manage reservations. The legal basis is taking steps at your request before entering into a contract, under Article 6(1)(b), or our legitimate interest in handling communications received. For information about allergies and intolerances, the legal basis is the explicit consent you give by sharing it voluntarily (Article 9(2)(a) of the GDPR).
Usage statistics help us understand and improve the website and measure, in aggregate, how many people contact the restaurant through it. The legal basis is consent under Article 6(1)(a) of the GDPR and Article 122 of Italian Legislative Decree 196/2003. Declining does not restrict browsing.
Providing personal data is always optional. Without your email address we cannot send the newsletter; without contact details we cannot answer your enquiry or confirm a reservation.
Where necessary, some data may be retained to comply with legal obligations or protect the controller’s rights.
04
Retention
Newsletter email addresses are retained until consent is withdrawn or deletion is requested. Technical subscription records (date and time, source, IP address and user-agent) are retained for as long as necessary to document consent and manage service security.
Information received by email, telephone or WhatsApp, including reservations, is retained for as long as needed to respond and manage any subsequent relationship, plus any further periods required by law or needed to protect rights. Allergy and intolerance information is retained only for as long as strictly necessary for the reservation and service.
Technical logs are retained for the periods configured by the hosting provider and for a period proportionate to security and diagnostic needs.
Google Analytics cookies last for up to 2 years. Statistical data collected in Google Analytics is retained for the period configured in the website’s property. Your cookie choice is remembered for 180 days (approximately 6 months), after which you will be asked again.
Data is not kept longer than necessary for the purposes described.
05
Recipients and transfers
Appropriate measures protect data against loss, unauthorised access and unlawful use. Access may be granted to people authorised by the controller and technical providers required to operate the website, hosting, contact records and email, within their respective roles and as data processors.
If you consent to analytics, usage data is processed by Google Ireland Limited as a data processor. Some data may be transferred to Google LLC in the United States. Transfers rely on the safeguards provided by the GDPR: the European Commission’s adequacy decision for the EU-US Data Privacy Framework, where applicable, or standard contractual clauses.
Data is not made public. Information is disclosed to public authorities only where required by law.
07
Links and external services
The website links to WhatsApp, Google Maps and the restaurant’s social media channels. These services open only when you choose to use them and operate under their own privacy policies. Dastè does not control processing by their respective providers after you access those external platforms.
The newsletter form does not install cookies. The technical infrastructure may use tools strictly necessary to deliver and secure the service.
08
Your rights
Where provided by the GDPR, you may request access to your personal data, rectification, erasure, restriction of processing and portability. You may also object to processing based on legitimate interest and withdraw consent at any time.
To exercise your rights, write to info@ristorantedaste.it. Your request will be handled within the statutory time limits; we may need to verify your identity before responding.
09
Complaints and updates
If you believe processing infringes the applicable rules, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or seek a remedy before the competent court.
Information on complaints to the Italian Data Protection AuthorityThis notice may be updated when the website, services or legal requirements change. The date at the beginning identifies the current version.