Privacy notice
This is the notice on the processing of personal data relating to the website www.ristorantemustafa.it (hereinafter also referred to as the “site” or “website”), owned by Ristorante Mustafà.
This page describes how the site is managed with regard to the processing of the personal data of the users who visit it. The website processes all personal data of users/visitors in full compliance with European and Italian data protection law and, in particular, with the GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and Italian Legislative Decree 196/2003 as amended, in application of Legislative Decree no. 101 of 10 August 2018.
This notice is provided pursuant to Articles 13 and 14 of the GDPR to everyone who visits the web page www.ristorantemustafa.it, which is the homepage of the site. The notice applies only to the website of Ristorante Mustafà and not to any other websites the user may visit through external links.
The data controller is Ristorante Mustafà, based in Via Murrano, 9 – 80069 Vico Equense (Naples), Italy.
Email: ristorantemustafasrl@gmail.com
“Personal data” (Article 4(1) of Regulation (EU) 2016/679) means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Special categories of data” (Article 9(1) of Regulation (EU) 2016/679) means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
“Processing” (Article 4(2) of Regulation (EU) 2016/679) means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The website is mainly intended to provide information about the restaurant’s activities and therefore, in most cases, no personal data is collected from visitors. In some cases, however, users may be asked to fill in an online form.
Accessing and using the website implies the user’s acceptance of the following conditions. Users who do not agree with the conditions set out below and/or do not intend to accept them should not continue browsing the website.
The data controller reserves the right to modify the website and/or the conditions below, in whole or in part. Given this broad right to make changes without notice, users are invited to review these conditions regularly to check whether any changes have been made.
Data is collected and stored through the site solely for purposes related to improving the browsing experience, making the site easier and more intuitive to use, improving the type and quality of its content and optimising its performance. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
Through the “Booking request” form on the Contact page, users may voluntarily send the following data: full name, email address, phone number, number of guests, preferred date and time, type of request and any notes. This data is used solely to reply to the request, check availability and confirm the booking. Requests are sent to the data controller’s email address and recorded in the site’s private area. Sending a request does not constitute an automatic booking confirmation.
Providing this data is optional, but without it we cannot follow up on the request. Users are asked not to include special categories of data in the notes field, except where strictly necessary for the request (for example, to report food allergies or intolerances).
Processing personal data for the purposes described above does not require consent, as it is necessary to allow the site to be browsed. Any personal data provided by users who send requests through the form is used solely to provide the service or perform the requested action (Article 6(1)(b) GDPR) and on the basis of the consent given by the user when submitting the form (Article 6(1)(a) GDPR).
The site includes content provided by third parties, which may collect browsing data in accordance with their own privacy policies:
Data sent through the form is kept for as long as necessary to handle the request and, afterwards, for any period required by law. Browsing data is kept only for as long as strictly necessary for the operation and security of the site.
Data is not disclosed to the public. It may be processed on behalf of the data controller, and only to the extent necessary, by the providers of the technical services used to run the site (hosting and email services).
At any time, data subjects may exercise the rights set out in Articles 15–22 of the GDPR: access to their data, rectification, erasure, restriction of processing, data portability and objection to processing, as well as withdrawal of consent, without affecting the lawfulness of processing based on consent before its withdrawal. Requests can be sent to the data controller at ristorantemustafasrl@gmail.com.
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Last updated: October 2026
