Privacy policy | NIN Restaurant

Last updated: 27 October 2026. This is a translation provided for convenience; in case of discrepancies the Italian version prevails.

This notice explains how we process the personal data of people who visit ristorantenin.it, contact us or book a table at NIN Restaurant, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (“Privacy Code”), as amended by Legislative Decree 101/2018.

1. Data controller

Belfiore M & M S.r.l., Via Giuseppe Zanardelli 5, 37010 Brenzone sul Garda (VR), Italy. VAT no. 04676370234. Legal representative: Manuel Dalla Bona.
E-mail for privacy matters: info@consolinihotels.com. Restaurant contacts: info@ristorantenin.it, tel. +39 045 742 0179.

2. Data protection officer

The Data Protection Officer (DPO) can be contacted at the controller’s registered office, Belfiore M & M S.r.l., Via Giuseppe Zanardelli 5, 37010 Brenzone sul Garda (VR), Italy, or at info@consolinihotels.com.

3. What data we process, why, and on what legal basis

3.1 Browsing data

The systems that run the website collect, during normal use, certain data whose transmission is implicit in Internet protocols: IP address, date and time of the request, page requested, server response code, browser and operating system.

Purpose: running the website, keeping it secure and detecting misuse or malfunctions.
Legal basis: the controller’s legitimate interest in operating a secure and efficient website (Art. 6(1)(f) GDPR).
Retention: no more than 7 days, unless needed by the judicial authorities to investigate offences.

3.2 Enquiries

If you e-mail or call us, we process the data you give us (name, contact details, content of your request).

Purpose: answering your questions and providing the information requested.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Retention: as long as needed to handle the request and no longer than 12 months, unless it leads to a booking.

3.3 Bookings

You can book online through the TheFork calendar on the Book page, by phone or by e-mail. We process your name, contact details, date and time, number of guests and any special requests.

Purpose: managing your booking and our service, contacting you about changes, and applying the cancellation policy shown on the Book page.
Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR); compliance with legal and tax obligations (Art. 6(1)(c) GDPR).
Allergies and intolerances: if you tell us about allergies, intolerances or health-related dietary needs, we process this information (special categories of data, Art. 9 GDPR) only to serve you safely, on the basis of the explicit consent you give by sharing it (Art. 9(2)(a) GDPR). We keep it only as long as needed for your visit.
Retention: booking data up to 24 months after the date of service; accounting and tax records for 10 years, as required by law (Art. 2220 Italian Civil Code).

Online bookings are handled by TheFork (La Fourchette SAS), which processes the data entered in its calendar as an independent controller under its own privacy notice, available at thefork.com. The restaurant receives from TheFork the data needed to manage your booking.

3.4 Cookies and third-party services

The website uses technical cookies, which do not require consent, and, only with your consent, external content (YouTube, Google Maps, TheFork) and the Meta Pixel marketing tool. Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 Privacy Code), which you can withdraw at any time from the “Cookie preferences” link at the bottom of every page. Full details are in the Cookie policy.

3.5 Consent log

When you make a choice in the cookie banner we record a random identifier, the date and time, the categories accepted, the language, the page, your anonymised (truncated) IP address and the type of browser.

Purpose: demonstrating that consent was collected correctly.
Legal basis: compliance with a legal obligation (Arts. 6(1)(c) and 7(1) GDPR).
Retention: 13 months, then automatically deleted.

3.6 Social media pages

If you visit or interact with our Facebook and Instagram pages, Meta Platforms Ireland Ltd. processes your data under its own privacy policy. For page statistics (“Insights”) we are joint controllers with Meta under the agreement published by Meta; you can exercise your rights directly with Meta.

4. Is providing data mandatory?

Providing data is optional. Without the necessary data, however, we cannot answer your requests or manage your booking. Rejecting non-essential cookies does not prevent you from browsing the website.

5. How data are processed and kept secure

Data are processed electronically and, where necessary, on paper, by authorised and trained staff. We apply appropriate technical and organisational measures: encrypted connection (HTTPS), restricted and protected access, updates and backups. We do not make decisions based solely on automated processing. Advertising profiling through Meta Pixel only takes place with your consent.

6. Who receives the data

Data may be disclosed to:

the controller’s authorised staff;
suppliers processing data on our behalf, appointed as processors (Art. 28 GDPR): hosting, website management and maintenance, accounting and tax advisers;
service providers acting as independent controllers: TheFork (online bookings), Google Ireland Ltd. (YouTube, Google Maps), Meta Platforms Ireland Ltd. (Meta Pixel), only within the limits described above and in the Cookie policy;
public authorities, where required by law.

Data are not published or disseminated.

7. Transfers outside the European Union

Some providers (Google, Meta) may transfer data to the United States. Transfers rely on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (10 July 2023), for certified companies, and on the standard contractual clauses approved by the European Commission.

8. Your rights

At any time you may ask the controller for:

access to your data and a copy of it (Art. 15 GDPR);
rectification of inaccurate or incomplete data (Art. 16);
erasure (Art. 17) and restriction of processing (Art. 18);
portability of the data you provided (Art. 20);
to object to processing based on legitimate interest (Art. 21);
to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)); for cookies, simply use “Cookie preferences” at the bottom of the page.

To exercise your rights write to info@consolinihotels.com. We will reply within one month of your request (extendable by two months for complex requests, as provided for by Art. 12 GDPR).

9. Complaints

If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or with the authority of the country where you live or work, or take legal action (Arts. 77 and 79 GDPR).

10. Children

The website and booking services are not aimed at children under 14, and we do not knowingly collect their data.

11. Changes

We may update this notice, for example following changes in the law or in the services we use. The date of the last update is shown at the top.