1. Data controller

The data controller is Antonella Scatigna, owner of the sole proprietorship «Taverna del Duca» (VAT no. 02702020732), with registered office at Via Papatodero 3, 70010 Locorotondo (BA).

For any request regarding your personal data you can write to tavernadelduca@libero.it (certified email/PEC: antonellascatigna@pec.it) or call +39 080 4313007.

2. Categories of data processed

The following categories of data may be processed when you use this website:

• Browsing data: the IT systems and software procedures used to operate the site acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of internet protocols (e.g. IP addresses, browser type, request times). This data is collected by the hosting provider in log files for technical and security purposes.
• Contact data provided voluntarily: if you choose to contact us by phone, email, WhatsApp or social channels, we will process the data you spontaneously provide (e.g. name, phone number, message content) solely to reply to you.
• Technical data related to cookies: see the dedicated Cookie Policy.

The booking form on the site does NOT send data to a server and does not store it: it simply composes a message that you open yourself in WhatsApp. Transmission therefore takes place via WhatsApp and not through this website.

3. Purposes and legal bases of processing

• To ensure the operation, security and proper delivery of the site (legal basis: legitimate interest of the controller, Art. 6.1.f GDPR).
• To respond to contact requests and booking requests you send us by phone, email or WhatsApp (legal basis: response to your request / pre-contractual measures, Art. 6.1.b GDPR).
• To comply with any legal obligations (legal basis: legal obligation, Art. 6.1.c GDPR).

4. Google Maps (third-party service)

In the contact section the site may display a map provided by Google Maps (Google Ireland Ltd.). To protect your privacy, the map is NOT loaded automatically: it is shown only after you explicitly click the relevant button. Until you give your consent, no data is transmitted to Google and no third-party cookie is installed.

By clicking to load the map, your IP address and browsing data may be transmitted to Google, including outside the European Union. For more information see Google’s privacy policy: https://policies.google.com/privacy

5. Fonts (typefaces)

The typefaces used by the site are hosted directly on this website (self-hosted): to display them your browser does not make any request to third-party servers (such as Google), and no data, including your IP address, is communicated to external parties.

6. WhatsApp and social channels

The site contains links to WhatsApp and to the restaurant’s social profiles (e.g. Facebook, Instagram, TripAdvisor, Google). When you use these links, your data is processed by the respective operators according to their own privacy policies, over which the controller has no control. We invite you to consult the privacy policies of those platforms.

7. Retention period

• Browsing data in logs is kept by the hosting provider only for the time strictly necessary for technical and security purposes.
• Contact data provided voluntarily is kept for the time needed to handle your request and, thereafter, in accordance with applicable legal obligations.

8. Your rights

As a data subject, under Articles 15 to 22 of the GDPR, you have the right to:

• access your personal data and obtain a copy of it;
• request its rectification or erasure;
• request the restriction of processing or object to processing;
• request data portability, where applicable;
• withdraw any consent given at any time, without affecting the lawfulness of prior processing.

You can exercise these rights by writing to tavernadelduca@libero.it. You also have the right to lodge a complaint with the supervisory authority (in Italy, the Garante per la protezione dei dati personali – www.garanteprivacy.it).

9. Transfers outside the EU

Some third-party services (Google, Meta) may involve the transfer of data to countries outside the European Union. Such transfers take place in compliance with the safeguards provided by the GDPR (e.g. standard contractual clauses or adequacy decisions), as established by the respective providers.

10. Changes to this notice

The controller reserves the right to update this notice to reflect regulatory changes or changes to the services used. The date of the last update is shown at the top of the page.