Privacy Policy and Personal Data Processing Notice
Ristorante Evangelista — pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)
Last updated: September 9, 2026
1. Data Controller
The Data Controller for the processing of personal data is:
RISTORANTEVANGELISTA DI ADELE MAZZONI & C. S.A.S Via delle Zoccolette, 11/A – 00186 Rome (RM), Italy VAT No.: 06933670967 Email: ristorantevangelista@gmail.com
2. Data Protection Officer (DPO)
Giulia Massera Can be contacted at the Data Controller’s email address: ristorantevangelista@gmail.com
3. Data collected
When you make a reservation through the form on our website, we collect the following personal data provided directly by you:
- First and last name
- Phone number
- Email address
- Requested date, time, and number of guests
- Optional notes (e.g. special requests, food allergies or intolerances)
Health-related data (allergies/intolerances): if you choose to inform us of any food allergies or intolerances, this information falls within the special categories of personal data referred to in Article 9 GDPR. Providing this data is optional, and it is processed only with your explicit consent, for the sole purpose of ensuring your food safety during your visit.
4. Purposes and legal basis of processing
| Purpose | Legal basis |
|---|---|
| Managing the reservation and organizing the service | Performance of pre-contractual measures / contract (Art. 6.1.b GDPR) |
| Communications related to the reservation (confirmations, changes, reminders) | Performance of a contract (Art. 6.1.b GDPR) |
| Processing of allergy/intolerance data, if provided | Explicit consent (Art. 6.1.a and 9.2.a GDPR) |
| Compliance with legal obligations (e.g. tax, accounting) | Legal obligation (Art. 6.1.c GDPR) |
We do not use your data for marketing purposes or newsletters, unless you provide separate, explicit consent.
5. How your data is processed
Processing is carried out using IT and/or manual tools, following logic strictly related to the purposes indicated above, and in a manner that ensures the security and confidentiality of the data, adopting appropriate technical and organizational measures to prevent loss, unlawful use, or unauthorized access to the data.
6. Data recipients
Data collected through the reservation form is processed exclusively by Ristorante Evangelista staff authorized to do so. It may be shared with technical service providers acting as data processors (e.g. the provider hosting our email account and website), to the extent necessary to deliver the service.
Your data is not disclosed or shared with third parties for commercial purposes.
Transfers outside the EU: should the technical service providers mentioned above (e.g. email provider) process data on servers located outside the European Economic Area, such transfers are carried out on the basis of adequate safeguards provided for under the GDPR (e.g. the European Commission’s Standard Contractual Clauses).
7. Data retention period
Data collected during the reservation process is retained for as long as necessary to manage the reservation itself and, subsequently, for the period required under applicable tax and civil law (generally 10 years for accounting/tax purposes), unless earlier deletion is requested by the data subject where no retention obligation applies.
8. Data subject rights
As a data subject, under Articles 15-22 of the GDPR you have the right to:
- obtain confirmation of the existence of a processing activity and access your data (right of access);
- obtain rectification of inaccurate data or completion of incomplete data;
- obtain erasure of your data, in the cases provided for by law (right to be forgotten);
- obtain restriction of processing;
- object to processing, in whole or in part;
- receive your data in a structured, commonly used, machine-readable format (right to data portability);
- withdraw your consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal;
- lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) if you believe the processing violates the GDPR.
To exercise these rights, you may write to: ristorantevangelista@gmail.com
9. Provision of data
Providing the data marked as mandatory on the reservation form is necessary in order to process your reservation request; failure to provide this data will make it impossible to complete the reservation. Providing optional data (e.g. allergies/intolerances) has no impact on your ability to make a reservation.
10. Contact via WhatsApp
Our website provides a button that allows you to contact the Restaurant directly via WhatsApp. By clicking this button, you are redirected to the WhatsApp application, where you may choose whether or not to start a conversation.
If you choose to message us via WhatsApp, your phone number, the name associated with your profile (if any), and the content of the messages exchanged will be processed by:
- Ristorante Evangelista, as Data Controller, for the purpose of managing your request (e.g. reservation, information requests);
- WhatsApp Ireland Ltd. (Meta Group), as an independent data controller, for the operation of the messaging service, in accordance with WhatsApp’s privacy policy, available at https://www.whatsapp.com/legal/privacy-policy.
Using WhatsApp involves the transfer of data to servers that may be located outside the European Economic Area, based on the safeguards adopted by Meta (Standard Contractual Clauses). We recommend reviewing WhatsApp’s privacy policy before starting a conversation.
11. Google reCAPTCHA
This website uses Google reCAPTCHA, provided by Google Ireland Limited / Google LLC, to protect contact and booking forms from abuse and spam. reCAPTCHA analyses visitor behaviour (such as IP address, mouse movements, time spent on the page and browser data) to distinguish real users from automated systems. This data is sent to Google and processed in accordance with Google’s Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms). The purpose of this processing is to ensure the security of the site and prevent fraudulent or automated submissions.
12. Changes to this Policy
The Data Controller reserves the right to change this policy at any time, giving appropriate notice on the website. You are advised to check this page periodically.
Ho lasciato fuori la nota interna sulla visura camerale: prima di pubblicare, verificala e togli anche quella dalla versione italiana. Ricorda inoltre che i form non hanno un campo note, quindi o lo aggiungi o togli i riferimenti ad allergie e note dalla sezione 3 e 9.