Privacy Policy
Last updated: 30 July 2026
This policy describes how the personal data of users who visit ebrius.restaurant and use its services (table booking and digital menu) are processed, pursuant to Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended.
1. Data controller
Ninetyfour S.r.l. — Ebrius Restaurant
Piazza Matteotti 2, 80065 Sant'Agnello (NA), Italy
P.IVA IT09293651213
Email: info@ebrius.restaurant · Tel: +39 081 975 8058
2. Types of data processed
Browsing data
The IT systems and software procedures that operate the website acquire, during normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (e.g. IP address, browser and device type, pages visited, date and time of access). These data are used solely to obtain anonymous statistical information on the use of the site and to check that it works correctly and securely.
Data provided for booking
Through the booking form (available at book.ebrius.restaurant) we collect the data needed to handle the request: name, email address, phone number, date and time, number of guests and any notes or special requests.
Contact data
If you contact us by email or phone, we will process the data you voluntarily provide in order to respond to your request.
Cookies and measurement tools
The site uses technical cookies and, subject to consent, statistics cookies. For details, see the Cookie Policy.
3. Purposes and legal bases of processing
| Purpose | Legal basis |
|---|---|
| Managing bookings and contact requests | Art. 6(1)(b) GDPR — performance of pre-contractual/contractual measures |
| Operation, maintenance and security of the site | Art. 6(1)(f) GDPR — legitimate interest |
| Browsing statistics via Google Analytics | Art. 6(1)(a) GDPR — consent of the data subject |
| Measurement and optimisation of advertising campaigns (Meta Pixel) | Art. 6(1)(a) GDPR — consent of the data subject |
| Compliance with legal obligations (e.g. accounting/tax) | Art. 6(1)(c) GDPR — legal obligation |
4. Nature of data provision
Providing data for the booking is optional, but failing to provide it makes it impossible to process the request. Processing for statistical purposes takes place only with the consent given via the cookie banner and is always optional and revocable.
5. Methods of processing
Data are processed using electronic tools, applying appropriate technical and organisational measures to ensure their confidentiality, integrity and availability and to prevent unauthorised access, loss or misuse.
6. Recipients and processors
Data may be processed, on behalf of the Controller, by third parties providing services instrumental to the site, appointed as data processors under Art. 28 GDPR where applicable, including:
- Google Ireland Ltd — statistics (Google Analytics 4), web fonts (Google Fonts) and maps (Google Maps);
- Meta Platforms Ireland Ltd — advertising campaign measurement via Meta Pixel (Facebook/Instagram);
- Behold LLC — widget for displaying Instagram content;
- Featurable — display of Google reviews (where active);
- Hosting provider of the site and related services;
- MaitaiSolution.it — development and technical maintenance of the site.
Data are not disclosed or transferred to third parties for their own marketing purposes without specific consent.
7. Transfer of data to third countries
Some providers (in particular Google and Meta) may also process data outside the European Union, in the United States. Such transfers take place in compliance with Art. 44 et seq. GDPR, on the basis of the EU-US Data Privacy Framework adequacy decision and/or the Standard Contractual Clauses adopted by the European Commission.
8. Retention period
- Booking data: for the time needed to manage the booking and, thereafter, for the periods required by any legal obligations;
- Browsing and statistical data: according to Google Analytics retention settings (normally up to 14 months), in aggregated/anonymised form;
- Contact data: for the time needed to handle the request.
9. Rights of the data subject
As a data subject, you may exercise at any time the rights provided by Art. 15-22 GDPR, including: access to your data, rectification, erasure, restriction of processing, objection to processing, data portability and withdrawal of consent (without affecting the lawfulness of processing carried out before withdrawal).
To exercise these rights, you may write to info@ebrius.restaurant.
10. Complaint to the supervisory authority
If you believe that the processing of your data breaches the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of your country.
11. Changes to this policy
The Controller reserves the right to update this policy to reflect regulatory developments or changes to the services offered. The updated version is always published on this page with the date of last update.