Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users consulting the website of almaris-restaurant.com
(pursuant to Article 13 of EU Regulation 2016/679)

WHY THIS INFORMATION:

Pursuant to Regulation (EU) 2016/679 (hereinafter referred to as the 'Regulation'), this page describes how the personal data of users consulting this website, accessible electronically at the following address, are processed: www.almaris-restaurant.com

This information does not concern other sites, pages or online services that can be reached via links that may be published on the site, but which refer to resources outside the domain.

DATA CONTROLLER:

Following consultation of the site listed above, data relating to identified or identifiable natural persons may be processed.

The data controller is COSTA CALDURA S.R.L., with registered office at Via Cavallaro 13 - 90015 Cefalù (PA), VAT no. IT06497310828.

 (Email: info@almaris-restaurant.com)

DATA PROTECTION OFFICER:

COSTA CALDURA S.R.L. has not appointed a Data Protection Officer (DPO), as it is not required to do so under Art. 37(1)(a), (b) and (c) of the Regulation.

LEGAL BASIS FOR PROCESSING:

COSTA CALDURA S.R.L. processes personal data on the following legal bases:

• Contact requests and table bookings: performance of pre-contractual or contractual measures taken at the request of the data subject (Art. 6(1)(b) of the Regulation);
• Information on food allergies and intolerances voluntarily provided in the booking notes: explicit consent of the data subject (Art. 9(2)(a) of the Regulation). This information is used exclusively to prepare dishes safely;
• Newsletter subscription: consent of the data subject (Art. 6(1)(a) of the Regulation), which may be withdrawn at any time;
• Browsing data and website security: legitimate interest of the controller (Art. 6(1)(f) of the Regulation).

Providing the data requested in the forms is necessary to follow up on requests and bookings; otherwise it will not be possible to process them.

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

Navigation data:

The computer systems and software procedures used to operate this site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminals used by the users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

These data, necessary for the use of web services, are also processed for the purpose of:

• Obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.).
• Check the proper functioning of the services offered.

Browsing data are not kept for more than seven days (except where needed for the investigation of crimes by the judicial authorities).

Data provided by the user:

The optional, explicit and voluntary sending of messages to the contact addresses of almaris-restaurant.com, private messages sent by users to institutional profiles/pages on social media (where this possibility is provided for), as well as the completion and forwarding of the Forms on the almaris-restaurant.com website, entail the acquisition of the sender's contact data, necessary for replying, as well as all the personal data included in the communications.

Table booking:

To book a table through the website, we collect first name, last name, email address, telephone number, date, time and number of guests, as well as any notes entered by the user. The data are used to manage the booking and to contact the user if necessary.

Newsletter:

When subscribing to the newsletter, name and email address are used to send updates about the Almaris restaurant. You can unsubscribe at any time via the link in every email or by writing to info@almaris-restaurant.com.

Cookies and other tracking systems:

The website uses technical cookies, which are necessary for it to function properly and do not require the user’s consent. Any third-party cookies, such as those of the Google Maps map, are only installed after consent has been given via the cookie banner. Preferences can be changed or withdrawn at any time via the same banner.

Information on the processing of personal data through social media platforms:

For the processing of personal data carried out by the operators of the social media platforms used by COSTA CALDURA S.R.L., please refer to the information provided in their respective privacy policies. COSTA CALDURA S.R.L. processes the personal data provided by users through the social media pages dedicated to almaris-restaurant.com, within the scope of its purposes, exclusively to manage interactions with users (comments, public posts, etc.) and in compliance with applicable law.

THIRD-PARTY SERVICES:

The website integrates some services provided by third parties, which may process data such as the user’s IP address:

• Google Maps (Google Ireland Limited): display of the map;
• WhatsApp (WhatsApp Ireland Limited): only if the user chooses to contact us via the WhatsApp button;
• CookieYes: management of cookie consent.

Some of these providers may transfer data to countries outside the European Union, in particular to the United States. In such cases, the transfer is based on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on standard contractual clauses.

RETENTION PERIOD:

Data from contact requests and bookings are kept for as long as necessary to handle them and thereafter for the period required by law. Newsletter data are kept until consent is withdrawn. Browsing data are kept for a maximum of seven days.

RECIPIENTS OF THE DATA:

The recipients of the data collected through the website listed above and the social media profiles are the parties designated by COSTA CALDURA S.R.L. as data processors pursuant to Article 28 of the Regulation. The personal data collected are also processed by the staff of COSTA CALDURA S.R.L.which acts on the basis of specific instructions given as to the purposes and methods of processing.

In addition, the providers of the IT services required to operate the website (hosting, maintenance and booking management) may receive the data as data processors.

RIGHTS OF THE PERSONS CONCERNED:

Data subjects have the right to obtain from COSTA CALDURA S.R.L., where applicable, access to their personal data and the rectification or erasure thereof, or the restriction of processing concerning them, or to object to the processing (Art. 15 et seq. of the Regulation). Requests should be submitted by contacting COSTA CALDURA S.R.L., Via Vincenzo Cavallaro 13 – 90015 Cefalù (PA), email: info@almaris-restaurant.com

Data subjects also have the right to data portability (Art. 20 of the Regulation) and, where processing is based on consent, the right to withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Data subjects who believe that their personal data are being processed in breach of the Regulation have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), as provided for by Art. 77 of the Regulation.

Last updated: 17 October 2026