← Back to Nazarè

Privacy Policy

Last updated: April 24, 2026

This Privacy Policy describes how personal data of users visiting the Nazarè website, browsing its contents, submitting booking requests or contacting the restaurant through the contact details published on the site are processed.

1. Data Controller

NAZARE’ S.R.L. UNIPERSONALE
Via Raffaele Bosco, 301
80069 Vico Equense (NA)
Tax Code / VAT No.: 08380521214

For any request concerning privacy or the exercise of data subject rights, users may write to: prenotazioni@nazare.it

2. Categories of data processed

a) Browsing data

During normal operation, the website may collect technical data such as IP address, browser type, device information, operating system, date and time of request, visited pages and technical logs necessary for website operation and security.

b) Data voluntarily provided by the user

Through the booking form and contact details published on the website, users may provide personal data such as:

• name and surname;
• phone number;
• email address;
• booking date and time;
• number of guests;
• notes and special requests.

c) Data contained in direct communications

If the user contacts Nazarè by email, phone or third-party services such as WhatsApp, the Controller may process the data included in the communication and any information necessary to respond.

d) Special categories of data provided voluntarily

The notes field may contain information relating to allergies, intolerances or other special dietary requirements. Users are invited to provide only the information strictly necessary. Such data will be processed solely to manage the booking and the requested service.

3. Purposes of processing and legal basis

a) Website operation and security

Personal data may be processed to allow browsing, ensure website security, prevent abuse and guarantee the proper functioning of technical features.
Legal basis: legitimate interest of the Controller.

b) Booking request management

Personal data may be processed to receive, manage and confirm booking requests, including any follow-up communication with the customer.
Legal basis: pre-contractual measures taken at the request of the data subject and, where applicable, performance of a contract.

c) Contact and information requests

Personal data may be processed to respond to questions, group requests or general information requests sent by the user.
Legal basis: pre-contractual measures and legitimate interest of the Controller.

d) Legal and administrative compliance

Personal data may be processed to comply with legal, administrative, accounting or tax obligations.
Legal basis: compliance with a legal obligation.

e) Protection of the Controller’s rights

Personal data may be processed to establish, exercise or defend legal claims.
Legal basis: legitimate interest of the Controller.

f) Management of allergies or intolerances voluntarily communicated

If the user voluntarily provides information relating to allergies, intolerances or similar health-related needs, such data will be processed exclusively to manage the requested service.
Legal basis: explicit consent of the data subject.

4. Nature of data provision

The provision of data necessary to process a booking request or respond to a contact request is optional, but failure to provide such data may make it impossible for Nazarè to handle the request.

The communication of health-related information, including allergies or intolerances, is always optional and should be limited to what is strictly necessary.

5. Processing methods

Personal data are processed using paper, electronic and digital tools in compliance with the principles of lawfulness, fairness, transparency, minimisation and security.

Appropriate technical and organisational measures are adopted to protect personal data against unauthorised access, accidental loss, destruction, disclosure or unlawful use.

6. Data recipients

Personal data may be processed, within the limits of the purposes described above, by:

• authorised internal staff;
• IT and technical service providers;
• hosting providers and website maintenance providers;
• administrative, legal or tax consultants;
• email or communication service providers;
• public authorities where required by law.

Personal data will not be disclosed to the public.

7. Third-party services and external links

The website may contain external links or contact tools leading to third-party platforms, such as WhatsApp, Instagram or navigation/map services.

When the user chooses to use such services, the related processing is carried out by those third parties according to their own privacy policies.

8. Transfers outside the European Economic Area

Personal data are mainly processed within the European Economic Area. Should processing by technical providers located outside the EEA become necessary, such processing will take place in compliance with applicable law and with appropriate safeguards.

9. Data retention period

• Browsing and technical logs: for the time strictly necessary to ensure security and proper operation of the website;
• Booking and contact requests: up to 12 months from completion of the request, unless further retention is required for legal protection;
• Administrative and accounting data: for the period required by applicable law;
• Health-related data voluntarily provided: only for the time strictly necessary to manage the booking and the requested service.

10. Data subject rights

In the cases provided for by Regulation (EU) 2016/679, the data subject may exercise the following rights: access, rectification, erasure, restriction of processing, objection, data portability, withdrawal of consent where applicable, and the right to lodge a complaint with the competent supervisory authority.

Requests may be sent to: prenotazioni@nazare.it

11. Cookies

The website uses technical cookies and session cookies necessary for its operation, security and proper management of pages and forms.

At the date of this policy, the website does not use profiling cookies as part of its initial visible setup. Should analytics, marketing or third-party tracking tools be added in the future, this policy will be updated accordingly.

Users may manage cookies through their browser settings. Disabling technical cookies may affect some website functions.

12. Changes to this Privacy Policy

The Controller reserves the right to update or amend this Privacy Policy at any time, including in the event of regulatory changes, technical developments or the introduction of new services. Updates will be published on this page with the relevant revision date.