Last updated: 24 October 2026.
Controller and contact details
The data controller is ARRA’ RISTORANTE DI APOSTU IULIA, a sole proprietorship, VAT no. 04193580042. The registered business address shown in the Chamber of Commerce record dated 10 March 2026 is Via Carlo Giuliano 9, 12060 Murazzano (CN), Italy. The restaurant is at Via Villa 3, 12070 Sale San Giovanni (CN), Italy. For questions about personal data or to exercise your rights, email info@arraristorante.it.
Data we process and why
Browsing and security. When you visit the site, technical systems may record your IP address, date and time, requested pages, browser information and logs needed to deliver the site, prevent abuse and resolve faults. The legal basis is our legitimate interest in keeping the site working and secure (GDPR Article 6(1)(f)).
Enquiries. If you write or call, we process your contact details and the content of your enquiry to respond. The legal basis is taking steps at your request before entering into a contract or performing a contract, as applicable (GDPR Article 6(1)(b)).
Bookings. We process information provided directly or through the TeamSystem booking portal, such as your name, contact details, date, number of guests and booking requests, to manage the service. The legal bases are taking steps before entering into a contract and performing a contract. Administrative and tax requirements are based on legal obligations (GDPR Article 6(1)(b) and (c)). The external booking portal also has its own privacy information.
Please avoid sending health information or other special-category data in ordinary messages. If you tell us about dietary needs that reveal health information, we use it only to handle your request in connection with the service, under the applicable legal basis and for as long as necessary.
Analytics. With your consent to the Statistics category, the site uses Google Analytics 4 through Google Tag Manager to understand use of its pages. You can change or withdraw your choice in the cookie preferences panel. The legal basis is consent (GDPR Article 6(1)(a)). Search Console and Rank Math are used by the site operator to manage the site and review search data; their administrative connection does not, by itself, mean that each places an additional cookie on your device.
External content. The site loads its Vimeo video only after you consent to the Experience category. If you enable it, Vimeo may receive technical data about your visit under its own privacy terms. External links, including maps and the booking portal, take you to services governed by their respective notices.
Providing data and recipients
Technical data needed to deliver the site is necessary for browsing. Providing contact details for an enquiry or booking is optional, but without the information needed we cannot respond or manage your booking. Authorised staff and service providers may access data where necessary: Hostinger for hosting, TeamSystem for bookings, Google for Analytics and connected site-management tools, Vimeo for video when enabled, and Automattic for Jetpack services used on the site. Providers process data according to their respective roles and applicable agreements.
International transfers
Digital providers may process data outside the European Economic Area. Where this happens, the safeguards required by the GDPR, such as adequacy decisions or contractual protections, apply according to the specific service and transfer. You can ask us for information about providers and applicable safeguards at the contact address above.
Retention
We keep technical logs for the time needed for security and troubleshooting; enquiries for the time needed to respond and handle possible disputes; and booking information for the service and the periods required by administrative and tax law. Analytics data follows the service’s retention settings; withdrawing consent prevents further collection from your device. After the applicable period, data is deleted or anonymised, unless a legal duty or the protection of rights requires otherwise.
Your rights
Where applicable under GDPR Articles 15–22, you may request access, rectification, erasure, restriction and portability of your data, or object to processing based on legitimate interest. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Email info@arraristorante.it to exercise your rights. You may also lodge a complaint with the Italian Data Protection Authority.
Cookies and preferences
See our Cookie Policy for cookie categories, services and durations. You can review your choices using the cookie preferences link in the site footer.
Updates
We update this notice when services or processing practices change. The date of the latest revision appears at the top.