Privacy notice
How Nuova Ristorazione S.r.l. handles the personal data of people who visit this site and get in touch, under Articles 13 and 14 of Regulation (EU) 2016/679.
Last updated: 2026-10-05
1. Data controller
The data controller is Nuova Ristorazione S.r.l., registered office at Via della Spiaggia 29, 00054 Fiumicino (RM), operating premises at Via delle Ombrine 25, 00054 Fiumicino (RM), VAT number 15704811007.
Contact for any matter concerning personal data: info@vizio-fiumicino.it, or nuova_ristorazione@pec.it by certified email.
No Data Protection Officer has been appointed: the business does not fall within the cases in which Article 37 of the Regulation makes one mandatory.
2. Categories of data collected
Simply browsing the site does not require you to identify yourself. The data below is processed only in the situations described.
2.1 Data provided through the newsletter form
To subscribe to the newsletter you give us your email address. The sign-up box on the booking page also asks, optionally, for your name: it is used only to greet you by name in the welcome email and is not recorded in our database.
When you subscribe to the newsletter, the form sends your email address to our system, which generates a personal discount code and records it together with your email address in our database (Supabase infrastructure — see §4 and §6). In our system, the newsletter subscription and the resulting coupon are the same record, not two separate treatments with separate storage: there is no subscriber list kept apart from the coupon you receive. A welcome email with the code is sent to you through Resend (see §3.1 and §6).
2.2 Booking data
Anyone booking a table through the form on the site gives us their name, phone number, email address (optional), date, time slot and number of guests, and optionally any notes or allergies; for bookings tied to a specific event, also the answers to any additional questions set for that event.
This data is collected and processed directly by us, as data controller: it does not pass through, or get collected by, third-party booking platforms.
2.3 Browsing data
The systems that run the site record, out of technical necessity, IP address, browser type and pages visited. They are used in aggregate form for statistical purposes and to keep the service secure, not to identify who is browsing.
2.4 Cookies and similar technologies
The site uses cookies and browser storage. What they are, what they do and how long they last is set out in the Cookie Policy, which forms part of this notice.
3. Purposes of processing and legal bases
3.1 Sending the newsletter
Legal basis: consent (Art. 6(1)(a)). Subscription and the discount code generation are handled directly by our system (§2.1); the welcome email is sent through Resend.
Consent can be withdrawn at any time using the «Unsubscribe» link in the welcome email. If you subscribed before 4 September 2026, the email you received does not yet contain that link: in that case, or if you prefer, you can write to the contacts given in point 1, telling us which address the withdrawal is for. Withdrawal does not affect the lawfulness of processing carried out before the request.
After withdrawal we keep the email address and its discount code, no longer using them for the newsletter, solely to prevent the welcome coupon from being obtained repeatedly by unsubscribing and subscribing again. Legal basis: legitimate interest (Art. 6(1)(f)) in preventing such repeated use. How long is set out in point 5; you may object under Article 21 by writing to the contacts given in point 1.
3.2 Managing bookings
Legal basis: performance of pre-contractual measures or of the contract (Art. 6(1)(b)). Accepting a booking is a pre-contractual measure requested by the person booking; we process the data described in 2.2 to confirm it, manage it and, if requested, cancel it. Confirmation emails and any communications relating to a cancellation are sent through Resend.
3.3 Replying to people who write to or call us
Legal basis: performance of pre-contractual measures or of the contract (Art. 6(1)(b)). If you write to us or call us directly, using the contact details given on the site, we process what you tell us (such as your name, contact details and the content of your message) in order to reply and follow up on your request.
3.4 Aggregate usage statistics
Legal basis: legitimate interest (Art. 6(1)(f)) in knowing how the site performs. The intended tool is Vercel Analytics, which uses no cookies and does not retain IP addresses in clear: for that reason it is not subject to prior consent and does not appear in the banner.
This measurement is not active yet. You may object at any time under Article 21 by writing to the contacts given.
3.5 Google Analytics 4, if enabled
Legal basis: explicit consent (Art. 6(1)(a)), given by turning on the corresponding category in the cookie panel. Unlike anonymous measurement, Google Analytics 4 uses cookies and is not activated without your consent.
It is not integrated at present. The site is however already set up with Google Consent Mode, whose starting state is «denied» for every purpose requiring consent.
3.6 Compliance with legal obligations
Legal basis: legal obligation (Art. 6(1)(c)). This covers administrative, accounting and tax obligations, and lawful requests from the authorities.
4. How data is processed
Processing is carried out using IT systems, applying the appropriate technical and organisational measures required by Article 32 of the Regulation.
- traffic between your browser and the site is encrypted (HTTPS/TLS);
- access to data is limited to authorised staff and protected by authentication;
- the data infrastructure is provided by Supabase, with the database located in the European Union region.
There is no automated decision-making and no profiling within the meaning of Article 22.
5. Retention period
- Newsletter subscription (and its coupon)
- Until consent is withdrawn. After withdrawal, the email address and the coupon remain on record for 12 months from the date of withdrawal, solely for the purpose set out in point 3.1 (preventing repeated use of the welcome coupon), and are then deleted together with the record of their use. If you subscribe again in the meantime, the subscription resumes on the same record.
- Messages and requests received by email or phone
- 24 months from the last exchange, save for anything that must be kept longer by law.
- Booking data
- 12 months from when the booking was made, save for the need to keep it longer for tax or accounting obligations.
- Browsing data
- No more than 12 months.
- Cookies and similar tools
- Durations are given entry by entry in the Cookie Policy.
6. Categories of recipients
We do not sell or trade personal data. It may be seen by:
- staff authorised to process it, instructed under Article 29;
- suppliers processing data on our behalf as processors under Article 28;
- public authorities, where the law requires it.
- Supabase Inc. — processor
- Site database — content, bookings, newsletter subscriptions and their coupons — and storage for media files, including the home page video, which your browser receives directly from its servers. European Union region, eu-west-3 (Paris).
- Vercel Inc. — processor
- Site hosting and, once active, aggregate measurement of visits.
- Google LLC — processor, if enabled
- Google Analytics 4 and the map on the Contact page, both subject to your consent.
- Resend, Inc. — processor
- Sending booking confirmation emails, any communications relating to a cancellation, and newsletter welcome emails. Based in the United States.
7. Transfers to third countries
Vercel Inc. and Google LLC are based in the United States. Transfers to those suppliers rest on the EU-U.S. Data Privacy Framework and, additionally, on the Standard Contractual Clauses adopted by the European Commission under Article 46.
Resend, Inc., the supplier used for sending booking confirmation emails, any cancellation-related communications, and newsletter welcome emails, is also based in the United States.
The Supabase database is configured on the European Union region eu-west-3 (Paris), which keeps transfers to a minimum; access from abroad by the supplier's technical support cannot be ruled out, and is covered by the same safeguards.
The conditions applying to each supplier are those set out in that supplier's own contractual documentation, which it may update: on request we will tell you which mechanism applies at the time you ask.
8. Your rights
The Regulation gives you the rights set out in Articles 15 to 22:
- access to data concerning you, and a copy of it (Art. 15);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure, in the cases provided for (Art. 17);
- restriction of processing (Art. 18);
- notification to recipients of rectification, erasure or restriction (Art. 19);
- portability of data in a machine-readable format (Art. 20);
- objection to processing based on legitimate interest (Art. 21);
- not to be subject to automated decisions, which do not occur here (Art. 22).
Where processing rests on consent, you may withdraw it at any time under Article 7(3), without affecting the lawfulness of processing carried out before withdrawal.
9. How to exercise your rights
You can write by email, certified email or post:
- info@vizio-fiumicino.it
- Certified email (PEC)
- nuova_ristorazione@pec.it
- Post
- Nuova Ristorazione S.r.l., Via della Spiaggia 29, 00054 Fiumicino (RM)
We reply without undue delay and in any case within one month of the request, as Article 12(3) requires. That period may be extended by two months where the request is complex or where we receive many: if so, we tell you within the first month and explain why.
10. Complaint to the supervisory authority
If you believe the processing infringes the Regulation, you have the right to lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali, or with the authority of the Member State where you live, work, or where the alleged infringement took place.
11. Changes to this notice
This notice may be updated when processing, the tools used or the law change. The date of the last update is shown at the top.
If the changes concern purposes requiring consent, you will be asked again rather than having it treated as already given.