Privacy
Policy.

Data Controller

The Data Controller responsible for the processing of personal data is:

Personal data processed

While browsing the website, technical data necessary for its operation may be processed, including IP address, device and browser information, date and time of requests, pages visited and technical information relating to the security and proper functioning of the systems.

When users submit a contact form or a table availability request, personal data such as name, surname, email address, telephone number and any additional information voluntarily provided may be processed.

The table availability form may also process information such as the requested date, number of guests and lunch or dinner preference.

The website also uses a local preference named convivial-language, stored in the user's browser exclusively to remember the selected language between Italian and English.

Purposes and legal bases

Website operation and security

Technical data are processed to ensure the operation, security and proper delivery of the website, as well as to prevent abuse, anomalies or potentially harmful activities. This processing is based on the legitimate interest of the Controller in maintaining the security and proper functioning of its systems.

Information requests

Data submitted through the contact form are used exclusively to respond to the user's request and to manage any related communications. The legal basis is the performance of measures taken at the request of the data subject.

Availability requests and reservations

Data provided to check table availability are used to manage the request and any related pre-contractual or contractual activities concerning the reservation.

Legal obligations

Where necessary, certain data may be processed in order to comply with obligations imposed by law, regulations or competent authorities.

Analytics and marketing

Subject to consent where required, the website may use statistical measurement and advertising tools such as Google Analytics and Meta Pixel.

These tools will not be activated for non-essential purposes before the user has expressed their choice through the cookie preference management system.

External services and content

Google Maps

The Contact page may include map content provided by Google Maps. The use of such content may involve communication between the user's browser and the provider's systems.

TheFork

The website contains links to the external service TheFork for table reservations. When users follow these links, they leave the Convivial website and any subsequent processing of personal data is carried out in accordance with the terms and privacy notices of the external provider.

Social networks

The website contains links to Convivial's social media profiles, including Instagram and Facebook. A simple external link does not necessarily result in data being transmitted to the social network until the user accesses the relevant service.

Google Analytics and Meta Pixel

If these services are activated, their use will be subject to the preferences expressed by the user through the consent management system. Detailed information regarding the tools actually in use will be provided in the Cookie Policy.

Recipients of personal data

Personal data may be processed by authorised personnel of the Controller and, where necessary, by providers of technical, hosting, email, maintenance, cybersecurity or other services strictly connected with the operation of the website and the management of requests received.

Where required by applicable law, such providers are appointed as data processors pursuant to Article 28 of the GDPR.

Personal data may also be disclosed to competent authorities where required by law.

Transfers outside the European Economic Area

The use of certain international technology providers may involve the processing or transfer of personal data outside the European Economic Area.

Where this occurs, processing will be carried out in accordance with the requirements of the GDPR and on the basis of the applicable legal safeguards intended to ensure an adequate level of protection for personal data.

Data retention

Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected.

Information and availability requests are retained for the time necessary to manage them and any resulting relationship, unless longer retention is required for legal, administrative, accounting purposes or for the protection of the Controller's rights.

Technical and security data are retained for limited periods proportionate to their purposes, except where longer retention is necessary to investigate security incidents or unlawful activity.

Consent and language preferences may remain stored on the user's device until they are deleted, changed or expire, in accordance with the methods described in the Cookie Policy.

Your rights

Where provided for by the GDPR, data subjects may request access to their personal data, rectification or erasure, restriction of processing, data portability and may object to the processing of their personal data.

Where processing is based on consent, consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority, where applicable.

Children's personal data

The services provided through this website are not specifically intended to collect personal data from children.

Users are therefore requested not to submit personal information relating to children through the website forms unless this is necessary and lawfully carried out by a person exercising parental responsibility.

Data security

The Controller adopts appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental or unlawful loss, alteration, disclosure or destruction.

Changes to this Privacy Policy

This Privacy Policy may be updated over time as a result of regulatory, technical or service-related changes affecting the website.

The latest version will always be available on this page together with the date of the most recent update.