Policy Scope

This policy applies between website users and Alpin Curry as website owner and service provider.

Last updated: 1 March 2026

Controller and Regulation

Data Controller: Alpin Curry SAS, Corso della Liberta 103, 39012 Merano, Italy.

Contact for data matters: alpincurry@gmail.com

Legal framework: Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Codice in materia di protezione dei dati personali), as amended by Legislative Decree 101/2018.

No Data Protection Officer (DPO) is formally required for this type of business activity. For data protection enquiries please use the contact above.

What We Collect

Identity and contact data such as name, phone number and email address, collected when you submit a reservation request or contact us.
Reservation details such as date, time, number of guests and any notes you provide.
Technical and usage data such as IP address, browser type and pages visited, collected automatically when you browse the website.
Cookie and tracking data as described in our Cookie Policy.

We do not knowingly collect data from children under the age of 16. If you believe a child has submitted personal data, please contact us immediately.

How Data Is Collected

Directly from you via reservation forms, telephone calls and email.
Automatically via cookies and similar technologies when you visit the website (see Cookie Policy for details and how to manage your preferences).
From public sources where required for legal compliance checks.

Legal Bases for Processing

Contract performance (Art. 6(1)(b) GDPR) — for handling reservation requests and related communications.
Consent (Art. 6(1)(a) GDPR) — for analytics cookies and optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Legal obligation (Art. 6(1)(c) GDPR) — for tax, accounting and regulatory requirements.
Legitimate interests (Art. 6(1)(f) GDPR) — for website security, fraud prevention and improving service quality, where these interests are not overridden by your rights.

Disclosure of Data

Your data may be shared with the following categories of recipients, only to the extent necessary for the stated purpose:

Hosting and IT providers — to operate and maintain the website and email infrastructure.
Analytics providers (where you have consented) — such as Google Analytics for aggregated website usage statistics.
Professional advisors — accountants and legal counsel acting under confidentiality obligations.
Public authorities — where required by law or valid legal order.

We do not sell or rent your personal data to third parties.

Data Retention

Reservation data — retained for up to 24 months from the reservation date for service and dispute resolution purposes.
Accounting and tax records — retained for 10 years in accordance with Italian fiscal law (D.P.R. 633/1972 and D.P.R. 600/1973).
Analytics data — retained in accordance with the analytics provider's retention settings (Google Analytics default: 14 months).
Cookie consent records — retained for up to 12 months.

After the applicable retention period, data is securely deleted or anonymised.

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure — request deletion of your data where there is no legitimate reason to continue processing it.
Right to restriction — request that we restrict processing in certain circumstances.
Right to data portability — receive your data in a structured, machine-readable format where technically feasible.
Right to object — object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent — withdraw consent at any time for consent-based processing. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority at any time. In Italy, this is:

Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Roma, Italy
https://www.garanteprivacy.it

You may also lodge a complaint with the supervisory authority of the EU member state in which you are habitually resident or where the alleged infringement occurred.

Security and International Transfers

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. Access to personal data is restricted to authorised personnel only.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of the breach, in accordance with Art. 33 GDPR.

We do not transfer personal data outside the European Economic Area (EEA) as standard practice. Where analytics services involve data transfers to countries outside the EEA (such as the United States), such transfers are covered by the EU Standard Contractual Clauses or equivalent safeguards under Art. 46 GDPR.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Allergen and Dietary Information

If you provide information about food allergies, dietary requirements or health conditions in connection with a reservation, this constitutes special category data under Art. 9 GDPR. We process such information solely for the purpose of accommodating your needs and ensuring your safety. This data is not shared beyond the kitchen and service team involved in your reservation.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the website after changes are posted constitutes acceptance of the revised policy.

Contact

Alpin Curry SAS
Corso della Liberta 103, 39012 Merano, Italy

Email: alpincurry@gmail.com

PEC: alpincurrysas@pec.it