Revised on 20 October 2026, based on the privacy notice of 8 June 2025.
Who is responsible for your data
The data controller is Trattoria La Tavernetta di Ravaioli Rita & C. sas. You can contact us at the restaurant at Viale Giuseppe Garibaldi, 73, 00069 Trevignano Romano, or email info@trattorialatavernetta.it.
The information you provide
First name, last name, email address and phone number are collected through our forms and managed using Wix.com Ltd as an external data processor. The booking form also includes your date, time, party size, preferred area and optional notes.
Why we use it
We use this information to respond to enquiries, manage bookings and send communications about the services you request.
Legal basis for processing
We manage enquiries, bookings, proposed changes and cancellations to take steps at your request before entering into a contract or to perform a contract (Article 6(1)(b) of the GDPR). We process any information required by law to comply with legal obligations (point (c)). Security and abuse prevention checks serve our legitimate interest in protecting the service and its users (point (f)), while respecting their rights.
What information is required
Required fields let us handle your request and tell you the outcome. Without them, we cannot complete your online request. Notes are optional: please only include information relevant to your booking and avoid unnecessary sensitive information.
How long we keep your data
We keep your data for as long as needed to manage your request, booking and related communications. Any further retention is limited to information necessary to meet specific legal obligations or handle disputes, for the period these purposes require. When retention is no longer necessary, data is deleted or anonymised.
Your rights
Where the GDPR provides, you may request access, rectification, erasure, restriction of processing and data portability, or object to processing. To exercise your rights, email info@trattorialatavernetta.it. You may also lodge a complaint with the Italian Data Protection Authority.
Website hosting and services
The website and technical services for managing personal links are hosted on Cloudflare. Wix manages menus, bookings, contacts, staff tasks and automated communications. Authorised staff and service providers can access data within the limits of their respective roles.
To manage bookings securely, we also retain technical identifiers, hashes of personal links, sessions and operation receipts. These help verify access, prevent duplicates and establish the outcome of a request. A link expiring does not by itself delete the booking data.
Technical browsing tools
Personal access to your booking uses a temporary technical session; keep the link received by email safe and do not share it. The website also uses technical services needed for connectivity and security. Communications about your table manage the service you requested and do not subscribe you to a newsletter.
Protection and international transfers
We use access controls and security measures. Wix and Cloudflare may also process data outside the European Economic Area under their respective agreements and GDPR safeguards, including standard contractual clauses where applicable. Provider information: Wix and Cloudflare. You may ask the controller for information about the applicable safeguards and a copy of them.
Links to other services
When you open WhatsApp, Facebook or directions in Google Maps, you access external services that process data under their own privacy notices. You do not need to use these links to view the menu.