Privacy Policy – La Cambusa

1. Data Controller

The Data Controller is TRATTORIA LA CAMBUSA DI TARDI LEOPOLDO (Tierre Soc. Coop.), located in Piazza Marina, Palermo (Italy).
Email: info@lacambusa.it

2. Data Processors

For the management of online services, La Cambusa uses external providers appointed as Data Processors, including:

Plateform Srl (www.plateform.app), which provides the table reservation and restaurant marketing platform. Plateform processes data exclusively on behalf of the restaurant and does not use the data for its own purposes.
Other technical service providers (hosting, email delivery systems, website maintenance).

3. Types of Data Collected

Through the website and the Plateform platform, only electronic data are collected:

Reservation data: name, surname, phone number, email, date and time of reservation, number of guests, and any optional notes or dietary preferences provided by the user (e.g., allergies, intolerances).
Browsing data: IP address, browser, device, visited pages, automatically collected by IT systems and cookies.
Data for promotional communications: only with the user’s explicit consent, email address or phone number for receiving newsletters, SMS, or other promotional communications.

4. Purposes of Processing and Legal Bases

Data are processed for the following purposes:

Managing reservations and confirmations → legal basis: performance of a contract.
Service communications (reminders, post-visit requests, reviews) → legal basis: consent.
Legal and tax obligations → legal basis: legal obligation.
Statistical analysis and service improvement → legal basis: legitimate interest.
Promotional communications (email, SMS, newsletter) → legal basis: user consent.

5. Data Retention

Reservations: up to 24 months from the booking date, except for longer periods required by tax/administrative obligations (max 10 years).
Marketing: until consent is withdrawn and in any case no longer than 24 months.
Anonymous data: Plateform may store anonymized statistical data without time limits.

6. Data Disclosure and Sub-processors

Data may be disclosed to:

Plateform Srl, appointed as Data Processor.
Sub-processors used by Plateform, such as SendGrid (Twilio Inc.) for sending newsletters and communications.
Legal and tax consultants, only where strictly necessary.
Competent authorities, in cases required by law.

Data will never be disseminated or sold to third parties for independent commercial purposes.

7. Data Transfer Outside the EU

Currently, Plateform stores data on servers located within the European Union.
If in the future data are transferred outside the EU, the Data Controller will ensure compliance with Articles 44 et seq. of the GDPR, using adequacy decisions or Standard Contractual Clauses approved by the European Commission.

8. Online Payments

Any online payments (e.g., delivery or take-away) are managed through external providers such as PayPal, Satispay, or other payment platforms.
These providers are independent Data Controllers for payment data, and La Cambusa/Plateform do not access such information.

9. Data Subject Rights

Users have the right to:

Access their personal data.
Request rectification or erasure.
Restrict or object to processing.
Request data portability.
Withdraw consent at any time (without affecting the lawfulness of prior processing).
Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Requests may be sent to: info@lacambusa.it or to Plateform at amministrazione@plateform.app.

10. Minors

Data from individuals under 18 years of age are not intentionally collected. Any such data provided will be deleted.

11. Cookies

This website uses technical cookies and, subject to consent, analytical and profiling cookies. More details are available in the Cookie Policy.

12. Updates

This Privacy Policy may be modified at any time to comply with legal or technical changes.

Last updated: 23 September 2025.