Privacy and cookie policy
Last updated: 23 August 2026
1. Data controller
The data controller is Santisè, Strada Castelletto 2, Frazione San Desiderio,
14031 Calliano Monferrato (AT), Italy — VAT no. 00998010052.
Phone 0141 928747 · Email info@santise.it.
2. What data we process
2.1 Data you give us
If you email or call us to book a table, we process the data you provide: name, phone number or email address, date and time of the booking, number of guests and any dietary requirements (which may include information about allergies or intolerances).
2.2 Data collected automatically
This site is made of static pages. There are no online contact forms, no analytics and no advertising tools. The hosting server records standard technical access logs (IP address, date and time, page requested, browser type) for security and diagnostics.
3. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) | Retention |
|---|---|---|
| Managing your booking and answering your requests | Pre-contractual and contractual measures — Art. 6(1)(b) | As long as needed for the booking; correspondence no longer than 12 months |
| Taking account of declared allergies and intolerances | Explicit consent — Art. 9(2)(a) | Only for the duration of the service |
| Tax and accounting obligations | Legal obligation — Art. 6(1)(c) | 10 years |
| Website security (server logs) | Legitimate interest — Art. 6(1)(f) | Usually no more than 30 days |
4. Who we share data with
Data is never published or sold. It may be processed on our behalf, under an Art. 28 GDPR processing agreement, by our hosting provider, our email provider and our accountant, each strictly for their own service. Data may also be disclosed to competent authorities where the law requires it.
5. Transfers outside the European Union
If you enable the Google Maps map (see the cookie section), the request is sent to Google Ireland Limited and may involve a transfer of data to the United States, on the basis of standard contractual clauses and the EU–US Data Privacy Framework. If you do not enable the map, no data is sent to Google.
6. Your rights
You may at any time request access to your data, its rectification or erasure, restriction of processing, portability, and object to processing based on legitimate interest (Arts. 15–22 GDPR). Where processing is based on consent, you may withdraw it at any time. To exercise these rights write to info@santise.it. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
7. Cookie policy
7.1 Technical storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
santise_consent_v1 | First-party localStorage | Remembers the choice made on the cookie banner | Until site data is cleared |
This is strictly necessary for the site to work and does not require prior consent.
7.2 Third-party cookies
The Contact page offers a Google Maps map. The map is
not loaded until you explicitly enable it. If you do, Google Ireland Limited may set
cookies and similar technologies (for example NID, CONSENT). Google's policy is at
policies.google.com/privacy.
7.3 Changing your mind
You can change your choice at any time with the button, also available at the bottom of every page, or by clearing the site data in your browser settings.
8. Security
We apply appropriate technical and organisational measures to protect data. The site is served over HTTPS.
9. Children
The site is not directed at children under 14 and does not knowingly collect their data.
10. Updates
This policy may be updated. The version in force is always the one published on this page.