Privacy & Cookie Policy

The data controller is Sunrise Wines Distribution S.A.S., registered at Via Arenula 21, 00186 Rome (RM), Italy, VAT and tax ID IT14593251003, operator of Hosteria La Togata.

For privacy questions or rights requests: info@hosterialatogata.com · +39 0577 1381492.

The site processes only the data needed for the functions described below:

• technical browsing data such as IP address, date and time, requested page, browser, device and information needed for security and operation;
• reservation-request data: name, email, phone, date, time, number of guests and an optional message;
• cookie preferences and, only after consent, Google Analytics identifiers and statistical data;
• connection data shared with Google when the embedded map loads, such as the IP address and browser and device information.

Please do not enter health data or other particularly sensitive information in the free-text field. For allergies or accessibility needs, contact the restaurant directly.

• Handling enquiries and reservation requests: steps requested before entering into a contract, GDPR Art. 6(1)(b).
• Responding to general enquiries: the controller's legitimate interest in communicating with guests and visitors, Art. 6(1)(f).
• Delivering and protecting the site: legitimate interests in security, abuse prevention and reliable service, Art. 6(1)(f).
• Google Analytics statistics: consent, Art. 6(1)(a), together with Art. 122 of the Italian Privacy Code.
• Showing the restaurant location with Google Maps: the legitimate interest in giving visitors useful directions, Art. 6(1)(f).
• Legal compliance: Art. 6(1)(c), where applicable.

Fields marked as required are needed to assess the request. The form cannot be submitted without them. The message field is optional.

Submitting the form creates a reservation request, not an automatic confirmation. A reservation is completed only after acceptance by the restaurant. The controller does not use automated decision-making or profiling.

Authorised staff and the following providers may process data where necessary:

• Vercel Inc., website hosting and infrastructure;
• Resend / Plus Five Five, Inc., delivery of reservation emails;
• Hostinger International Ltd., the restaurant's email service;
• Google Ireland Limited, consent-based Google Analytics and the embedded map;
• authorised technical providers when access is necessary for support or security.

The controller does not sell this data or use it to send marketing communications.

Some providers, particularly Resend, Vercel and Google, may process data outside the European Economic Area. Where required, transfers rely on adequacy decisions, the EU–US Data Privacy Framework where applicable, or the European Commission's Standard Contractual Clauses.

More information is available in each provider's privacy notice and data-processing terms.

• Reservation requests are kept for as long as needed to handle them and normally no longer than 12 months after the requested date, unless a longer period is required by law or to address a dispute.
• Technical logs are kept for the period needed for security and troubleshooting under the providers' configuration.
• Cookie preferences are stored for 182 days.
• Google Analytics cookies may last up to 2 years; analytics data are kept according to the account configuration and only for as long as needed for aggregate analysis.

Where applicable under GDPR Articles 15–22, you may request access, correction, deletion, restriction, portability or object to processing, and you may withdraw consent at any time.

Send requests to info@hosterialatogata.com. You may also lodge a complaint with the Italian Data Protection Authority.

Necessary cookies remember the selected language and consent choices. Google Analytics is enabled only after consent. Refusing analytics does not restrict use of the site.

Choices can be changed at any time through Cookie settings in the footer. Browser settings may shorten the stated durations.

The page includes a lazy-loaded Google map. When the browser loads it, it connects directly to Google, which receives connection data such as the IP address and browser and device information and may use its own identifiers under its privacy policy. Use of the map features is also subject to the Google Maps terms. The controller does not use Maps data for profiling or advertising.

Instagram, Google Business, directions and other external links transfer data to their operator only after the visitor opens them.

This notice is updated when the site's features or providers change. The latest revision date appears above.