Privacy Policy
Last Update: 11/06/2026
This privacy policy is provided pursuant to Regulation (EU) 2016/679, “GDPR”, and describes how the website www.osolemioischia.it processes the personal data of users who browse it or use the online services available, including contact forms and table booking forms.
1. Data Controller
The Data Controller is:
ARAGONESE S.R.L.
Registered office: Via Oronzio Costa 46, 80139 Naples (NA)
Tax Code and VAT Number: 10987411211
PEC: aragonese@pecditta.com
For any request relating to the processing of personal data, the Data Controller can be contacted at the PEC address indicated above.
2. Types of Data Processed
The following personal data may be collected and processed through the website:
- first and last name;
- phone number;
- email;
- booking date and time;
- number of guests;
- any requests or communications entered by the user in the form;
- data voluntarily transmitted via WhatsApp, email, or telephone;
- technical browsing data, such as IP address, browser type, device used, pages visited, and information collected through cookies or similar technologies.
The provision of data in the contact or booking forms is optional, but necessary to allow the Data Controller to respond to the user’s requests or manage the booking.
3. Purposes of Processing
3.1 Management of information requests
The data provided by the user may be used to respond to requests sent through the website, email, telephone, WhatsApp, or other contact channels.
Legal basis: performance of pre-contractual or contractual measures requested by the data subject.
3.2 Management of table bookings
The data entered in the booking form may be used to register, verify, confirm, modify, or cancel the booking requested by the user.
Legal basis: performance of pre-contractual or contractual measures requested by the data subject.
3.3 Communications via WhatsApp, email, or telephone
The Data Controller may use the contact details provided by the user for communications strictly related to the request received or the booking made.
Legal basis: performance of pre-contractual or contractual measures requested by the data subject.
3.4 Website security and abuse prevention
The website may process technical data to ensure the proper functioning of its pages, prevent spam, unauthorized access, computer fraud, or harmful activities.
Legal basis: the Data Controller’s legitimate interest in the security of the website and its IT systems.
3.5 Statistical analysis through Google Analytics
The website uses Google Analytics to collect statistical information on the use of the website, such as pages visited, browsing duration, device used, and traffic source.
This data helps the Data Controller understand how the website is used and improve its content, features, and performance.
Legal basis: the user’s consent, where required by the applicable legislation on cookies and tracking tools.
3.6 Protection of forms through Google reCAPTCHA
The website uses Google reCAPTCHA to protect forms from spam, bots, and automated or fraudulent use. The use of reCAPTCHA may involve the processing of technical data and information relating to the user’s interaction with the website.
Legal basis: the Data Controller’s legitimate interest in website security and, where required, the user’s consent.
4. Methods of Processing
The processing of personal data is carried out using IT, electronic and, where necessary, manual tools, in accordance with the principles of lawfulness, fairness, transparency, minimization, and security.
The Data Controller adopts appropriate technical and organizational measures to protect personal data from unauthorized access, loss, unlawful use, disclosure, or unauthorized modification.
5. Data Recipients
Personal data may be processed by:
- staff or collaborators authorized by the Data Controller;
- technical and IT service providers;
- website hosting provider, Aruba;
- email service providers;
- Google, for Google Analytics and Google reCAPTCHA services;
- any consultants or professionals appointed by the Data Controller;
- public authorities, in the cases provided for by law.
The data will not be sold or disclosed to third parties for purposes unrelated to those indicated in this privacy policy.
6. Hosting
The website is hosted by Aruba. Technical data relating to browsing and the operation of the website may be processed by the hosting provider for the purposes of service provision, security, technical maintenance, and infrastructure management.
7. Transfer of Data Outside the European Union
The use of services provided by Google, such as Google Analytics and Google reCAPTCHA, may involve the processing of data outside the European Economic Area.
In such cases, the transfer takes place in accordance with the safeguards provided for by applicable legislation, including any adequacy decisions, standard contractual clauses, or other instruments provided for by the GDPR.
8. Data Retention Period
Personal data is retained for the time necessary to achieve the purposes for which it was collected.
In particular:
- data relating to information requests: up to 12 months from the handling of the request;
- data relating to table bookings: up to 12 months from the date of the booking;
- communications via email, WhatsApp, or telephone: for the time necessary to manage the request or booking and in any case no longer than 12 months, unless further needs arise;
- technical data and system logs: according to the technical retention periods established by the hosting provider and, in any case, for the period necessary to ensure the security and proper functioning of the website;
- data processed through Google Analytics: according to the retention settings configured in the service;
- data processed for legal, tax, or administrative obligations: for the period required by applicable legislation.
Once the retention period has expired, the data will be deleted or anonymized, unless further retention is required by law or necessary to protect the rights of the Data Controller.
9. Cookies and Tracking Tools
The website may use technical cookies, which are necessary for the functioning of its pages, and third-party cookies or tools, such as Google Analytics and Google reCAPTCHA.
The user can manage their preferences through the cookie banner available on the website, where available, or through the browser settings.
For more details on the cookies used, it is also recommended to consult the website’s Cookie Policy.
10. Communications via WhatsApp
Where the user chooses to contact the restaurant via WhatsApp, the data provided will be processed to respond to the request, manage information or bookings, and provide assistance.
The use of WhatsApp also involves the processing of data by the relevant service provider, in accordance with the terms and privacy policies applicable to the platform.
11. Rights of the Data Subject
The user, as the data subject, may exercise the rights provided for under Articles 15 et seq. of the GDPR, including:
- right of access to personal data;
- right to rectification of inaccurate data;
- right to erasure of data, where applicable;
- right to restriction of processing;
- right to object to processing;
- right to data portability, where applicable;
- right to withdraw consent given, without affecting the lawfulness of the processing carried out before withdrawal.
To exercise their rights, the user may contact the Data Controller at the PEC address: aragonese@pecditta.com.
12. Complaint to the Supervisory Authority
If the user believes that the processing of their personal data is carried out in violation of current legislation, they have the right to lodge a complaint with the Italian Data Protection Authority, according to the procedures indicated on the official website www.garanteprivacy.it.
13. Changes to This Privacy Policy
The Data Controller reserves the right to modify or update this Privacy Policy at any time, including following regulatory, technical, or organizational changes.
Users are invited to consult this page periodically to check for any updates.