Privacy notice

Who is the controller

The data controller is La Stazione S.r.l.s., based at Via Nocera Umbra 96, 00181 Roma, VAT no. 18060131002, which runs Svolta Urbana.

For any question about your data write to info@svoltaroma.it.

What data we collect and why

The data you give us is used only for the purpose of the form you fill in.

• Booking: first and last name, phone, email, day, time, party size, preferred room, any notes, occasion and how you heard about us (the last two are optional). We use them to handle your request, to confirm it or tell you we cannot take it, and to contact you if needed.
• We also use the phone number from your booking to write to you on WhatsApp (confirmation, reminder, any changes): service messages only, with no promotions.
• Date of birth (optional): if you enter it in the booking form, we use it to understand, in aggregate, the age of our guests and, only if you have also agreed to news and offers, to wish you a happy birthday and send you something for it.
• Event enquiry: the same contact details, the type of event, the date you would like, the number of guests and your message. We use them to reply to you.
• Job application: first and last name, phone, email, role and your answers to the questionnaire. We use them to assess your application and to get back to you.
• Your email and phone, if you tick the optional box: to send you news and offers from Svolta Urbana, by email, phone or WhatsApp. This consent is separate from the others and you can decline it.
• Usage statistics, only if you accept them on the banner: with Google Analytics we collect, in aggregate form, the pages visited, the length of the visit, the type of device and browser and the approximate geographic area. We do not link them to your name or to booking data.
• Meta pixel, only if you accept it on the banner: when you visit the site Meta receives your IP address, your browser and device type, the page you are viewing and, if you send a booking or an event enquiry, the fact that you sent it (not what is in the form). We use it to see whether our Facebook and Instagram ads work and to show them to better-suited people. We do not send Meta your name, email, phone number or notes.
• Technical data: like any website, the server logs the IP address and time of requests. We use them for security and to limit abuse (for example, too many booking requests from the same address; in that case the address is kept only in unreadable form and for less than 24 hours).

Allergies and intolerances

If you write allergies or intolerances in the booking notes, you are giving us health data. We use it only to prepare a safe service for you and only the staff who need it handle it. By writing it you consent to this use. If you prefer not to write it down, you can tell us by phone or at the table.

Legal basis

• Booking and event enquiry: needed to carry out what you ask (Art. 6(1)(b) GDPR).
• WhatsApp messages about your booking: needed to carry out what you ask (Art. 6(1)(b) GDPR). They are service messages (confirmation, reminder, any cancellation or change), contain no promotions, and do not depend on your consent to news and offers.
• Job application: needed to assess your request before a possible contract (Art. 6(1)(b)). Keeping it for the period stated below is based on your explicit consent, given by ticking the box in the form.
• News and offers: your consent (Art. 6(1)(a)). You can withdraw it at any time without affecting anything else.
• Allergies and intolerances: your explicit consent (Art. 9(2)(a)).
• Statistics with Google Analytics: your consent (Art. 6(1)(a) and Art. 122 of the Italian Privacy Code), given on the banner and changeable at any time.
• Meta pixel: your consent (Art. 6(1)(a) and Art. 122 of the Italian Privacy Code), given on the banner and changeable at any time. For the data collected by the pixel, we and Meta are joint controllers.
• Website security and abuse prevention: our legitimate interest (Art. 6(1)(f)).

If you do not give us the data

Name, phone and email are needed to handle the booking: without them we cannot receive it. Every other field, and the consent to news and offers, is optional.

Who can see your data

The Svolta Urbana staff who deal with bookings, events and hiring see it, each with a personal password-protected account.

Suppliers who help us run the site process it on our behalf: the hosting service (IONOS) and the service we use to send confirmation emails. To write to you on WhatsApp about your booking (confirmation, reminder, any changes), your number and the text of the message go through WhatsApp (Meta Platforms Ireland Limited), which delivers them on our behalf. They are appointed as data processors. If you accept statistics, usage data is also received by Google (Google Ireland Limited and Google LLC), which processes it to provide the Analytics service. If you accept marketing, pixel data is also received by Meta (Meta Platforms Ireland Limited), which also uses it for its own purposes, as described in its terms. Apart from that, we do not sell your data and we do not give it to third parties for their own purposes.

Outside the European Union

We do not transfer your data outside the European Economic Area on our own initiative. If you accept statistics, Google may process usage data in the United States too: Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission considers to provide an adequate level of protection. The same applies to Meta pixel data, which may also be processed by Meta Platforms, Inc. in the United States. If another supplier were to process data outside the EU, it would only do so with the safeguards required by the GDPR (an adequacy decision or standard contractual clauses).

How long we keep it

• Bookings and event enquiries: 24 months from the booking or enquiry date. After that name, phone, email, date of birth and notes are deleted; only anonymous data (day, time, party size) remains for our statistics.
• Job applications: 12 months from receipt, then deleted. You can ask us to delete them sooner.
• Consent to news and offers: until you withdraw it.
• Google Analytics statistics: the cookies last up to 2 years and usage data stays with Google for the period set in our account, at most 14 months. If you reject or withdraw consent, nothing is collected.
• Meta pixel: the cookies last up to 90 days; how long Meta keeps the data is up to Meta, under its terms. If you reject or withdraw consent, nothing is collected.
• Technical security data: for short periods, according to the hosting service settings.

Your rights

You can ask us to access your data, correct it, delete it, restrict its use, receive it in a readable format (portability) or object to its processing. You can also withdraw any consent at any time. Write to info@svoltaroma.it: we usually reply within one month.

If you think your data is not being handled properly you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Automated decisions

We do not make automated decisions. Google Analytics statistics are aggregate and are not used to profile you. The Meta pixel, if you accept it, is used to measure ads and may be used by Meta to show you more relevant advertising. A person reviews every booking request.

Changes to this notice

If something important changes we update this page and the date above.