Rawana Bar & Restaurant respects your privacy. This page explains what personal data we collect when you book a table, contact us or simply browse this website, why we collect it, how long we keep it and what you can ask us to do with it.
1. Who is responsible for your data
The data controller (titolare del trattamento) is:
- Rawana Bar & Restaurant
- Via Giuseppe Cesare Abba 7, 20158 Milano (MI), Italia
- P. IVA / VAT no.: to be added
- Email: rawanabar.restaurant@gmail.com · Phone: 324 796 5832
We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Any privacy question can be sent to the email address above.
2. What we collect and why
Table reservations
When you book through this website we collect your name, email address, phone number, the date, time and size of your party, and anything you write in the notes field (for example allergies or a special occasion). We use it only to hold your table, contact you about the booking, and manage the dining room.
Legal basis: performance of a contract or pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). If you tell us about a food allergy or intolerance, that may be health data: we process it only to keep you safe while serving you, on the basis of your explicit consent (Art. 9(2)(a) GDPR), given by writing it into the booking. Please do not send us health details you do not want us to hold.
Contacting us
If you write or call us, we process the contact details and the content of your message in order to answer you. Legal basis: our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
Browsing this website
Our hosting provider records standard server logs — IP address, date and time of the request, pages requested, browser and operating system — for security and to keep the site running. We also use strictly necessary cookies, described in our Cookie Policy. Legal basis: legitimate interest in the security and correct operation of the site (Art. 6(1)(f) GDPR).
3. Who else sees your data
Your data is handled by our staff, and by suppliers appointed as data processors under Article 28 GDPR:
- our web hosting and email provider, which stores the site and delivers booking notifications;
- the reservation software that runs the booking form on this site;
- our accountant and, where a receipt or invoice is issued, the tax authorities, as required by Italian law.
We do not sell your data and we do not share it for anyone else’s marketing. Our servers are located within the European Economic Area. If a supplier ever needs to transfer data outside the EEA, we will only allow it under an adequacy decision or the Standard Contractual Clauses adopted by the European Commission.
4. How long we keep it
- Reservation records: 24 months from the date of the booking, then deleted.
- Emails and enquiries: 12 months from our last reply.
- Server and security logs: up to 12 months.
- Accounting and tax documents: 10 years, as required by Article 2220 of the Italian Civil Code.
5. Your rights
Under Articles 15 to 22 GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to another provider in a portable format. You can object to processing based on legitimate interest, and where processing rests on consent you can withdraw that consent at any time without affecting what we did before.
Write to rawanabar.restaurant@gmail.com and we will answer within one month. If you are not satisfied, you may lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the country where you live.
6. Children
This website is not aimed at children. Bookings should be made by an adult; we do not knowingly collect data directly from anyone under 14, the age of digital consent in Italy.
7. Changes to this policy
If we change how we handle personal data we will update this page and change the date at the top. Please check back occasionally.