Privacy Policy

1. Data controller

2. Data we process

The website may process technical browsing data generated by the web infrastructure and security systems, such as IP address, date and time of the request, requested resource, user agent and similar information contained in server logs. The website code does not use analytics, advertising or profiling tools.

When you submit a table request, we process the information entered in the form: full name, phone number, email address, date, time, number of guests and any non-sensitive notes you choose to provide.

Do not enter health data or other special-category data in the notes field, such as diagnoses, medical conditions or medical details. For allergies or dietary needs that require health information, please contact the restaurant staff directly.

3. Purposes and legal bases

• Website operation and security: technical delivery, abuse prevention and system security, based on the Controller’s legitimate interest in providing and protecting the service (Article 6(1)(f) GDPR), while respecting users’ rights.
• Table requests: receiving and replying to your request and taking pre-contractual steps at your request (Article 6(1)(b) GDPR).
• Legal obligations and protection of rights: where necessary, compliance with legal obligations (Article 6(1)(c) GDPR) and the establishment, exercise or defence of legal claims.

4. Table request form

Mandatory fields are necessary to handle your request. The checkbox in the form confirms that you have read this notice: it is not the consent used as the legal basis for handling the booking request, which is processed in order to respond to your request.

The form sends the request to the restaurant’s operational email address. After submission, the website may show an optional link that opens WhatsApp with a pre-filled message. The information is shared with WhatsApp/Meta only if you voluntarily choose to open that link.

5. Recipients and service providers

Data may be processed by authorised staff and technical suppliers that are necessary to deliver the service, including hosting and email providers. The website is hosted on Aruba infrastructure; form requests are forwarded to the restaurant’s Gmail mailbox and may therefore be processed by Google services. If you choose the WhatsApp link, the information in the message is processed by the relevant Meta service under its terms and privacy notices.

Depending on their services and safeguards, some providers may process data in countries outside the European Economic Area. Where applicable, such transfers must rely on safeguards provided by the GDPR, such as adequacy decisions or standard contractual clauses.

6. Retention

Table-request data are kept for as long as necessary to manage and document the request, subsequent communications and any applicable administrative or legal requirements. Technical logs are kept for periods consistent with security, maintenance and applicable provider obligations. This website does not retain data for profiling or marketing purposes.

7. Requirement to provide data

Providing the mandatory form fields is necessary to handle a table request. If they are not provided, the form cannot be submitted. Notes are optional.

8. Your rights

Where the GDPR applies, you may request access, rectification, erasure, restriction, portability, object to processing and, where processing is based on consent, withdraw consent without affecting prior lawfulness. You may exercise your rights by writing to info.tamarindo@legalmail.it.

You also have the right to lodge a complaint with the Italian Garante per la protezione dei dati personali.

9. Cookies and third-party content

The current version of the website does not use profiling, advertising or analytics cookies and does not automatically embed third-party maps or videos. See the Cookie Policy for details.

10. Changes

This notice may be updated if the website, suppliers or processing activities change. Material changes will be published on this page.

Last updated: 11 September 2026.