Privacy Policy
Last updated: 11 October 2026
This notice explains how personal data of visitors to https://pizzeriacalvino1946.it and of customers booking a table are processed, pursuant to art. 13 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003. In case of discrepancies, the Italian version prevails.
1. Data controller
PIZZERIA CALVINO S.R.L.
Registered office: Via Nunzio Nasi, 71 — 91100 Trapani (TP), Italia
VAT no.: 02894190814
Phone: +39 0923 21464
No Data Protection Officer (DPO) has been appointed, as it is not mandatory under art. 37 GDPR.
2. Data we process
Browsing data
The systems running this website collect data implicitly transmitted by Internet protocols (e.g. IP address, browser type, access time, requested pages). These data are processed by the hosting provider only to deliver the website and keep it secure. The website uses no analytics, profiling or advertising tools.
The weather shown in the navigation bar is requested by our server from Open-Meteo: the visitor's IP address is not shared with third parties.
Messages sent to the virtual assistant (chatbot)
If you use the virtual assistant, your messages are transmitted and processed to generate a reply. Please do not enter personal data (name, contact details, health data such as allergies or intolerances): the service only provides information on opening hours, menu and services. The chatbot does not take bookings.
Data of customers booking by phone
Bookings are made only by phone or in person. Our staff may record name, phone number, number of guests and any notes in our internal booking system, solely to manage the booking. Allergies and intolerances are not recorded at booking: please tell our staff directly when ordering.
Cookies and similar technologies
The website uses technical local storage and, only with your consent, Google Maps, as described in the Cookie Policy.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Operating the website, security | Legitimate interest (art. 6.1.f GDPR) |
| Virtual assistant replies | Pre-contractual steps at your request (art. 6.1.b) / legitimate interest in providing assistance (art. 6.1.f) |
| Managing phone bookings | Pre-contractual steps / contract (art. 6.1.b GDPR) |
| Displaying the Google Maps map | Your consent (art. 6.1.a GDPR and art. 122 Italian Privacy Code) |
4. Whether providing data is mandatory
Using the chatbot and the map is optional and does not affect browsing the website. To book a table we need a name and a phone number; without them we cannot reserve the table.
5. Recipients and processors
Data may be processed by authorised staff of the controller and by the following providers, acting as processors (art. 28 GDPR) or independent controllers:
- Vercel Inc. (USA) — website hosting and delivery.
- Groq, Inc. (USA) — processing of virtual assistant messages.
- Upstash, Inc. (USA) — database of the internal booking system.
- Google Ireland Ltd. / Google LLC — Google Maps, loaded only with your consent; Google acts as an independent controller (Google privacy policy).
Data are not disclosed or sold to third parties for marketing purposes.
6. Transfers outside the EU
Some providers are based in the United States. Transfers comply with arts. 44 et seq. GDPR, based on the European Commission adequacy decision on the EU-US Data Privacy Framework (for certified providers) and/or the Standard Contractual Clauses approved by the European Commission.
7. Retention
- Technical browsing logs: only as long as needed for security and operation, according to the hosting provider's policies.
- Chatbot conversations: not stored by the controller; the history stays in the page and is erased when you close it, except for the provider's temporary technical logs.
- Booking data: automatically deleted within 30 days.
8. Security
The website is served only over encrypted HTTPS. Access to the booking system is restricted to authorised staff and protected by credentials.
9. Your rights
You may exercise at any time the rights under arts. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest and withdrawal of consent, without affecting the lawfulness of prior processing. To exercise them, contact the controller by phone at +39 0923 21464 or in writing at the registered office above. We reply within 30 days.
10. Right to lodge a complaint
If you believe the processing infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your EU country of residence.
11. Interaction with artificial intelligence (AI Act)
The website offers a virtual assistant ("Maria") based on artificial intelligence. In accordance with art. 50 of Regulation (EU) 2024/1689 ("AI Act"), you are clearly informed that you are interacting with an AI system, not a human operator.
- Replies are generated automatically and may contain inaccuracies. For binding information (bookings, prices, allergens, availability) only direct contact with the restaurant at +39 0923 21464 is authoritative.
- The system only provides information and makes no automated decisions producing legal or similarly significant effects within the meaning of art. 22 GDPR.
- Messages are processed by Groq, Inc. solely to generate the reply (see section 5).
12. Changes
The controller may update this notice. The current version is always published on this page with its last update date.