
Privacy Policy
Last updated: October 2025
1. Data controller
The data controller is Cibum – CIBUM SRL with registered office in Via Di Santa Lucia, 118 00013 Fonte Nuova, VAT number 17205641008 e-mail info@cibumfontenuova.com
2. Type of data collected
The following personal data are collected and processed through the website:
-
Identification and contact details (name, surname, email, telephone number) for table reservations;
-
Payment and billing data for the purchase of event tickets;
-
Contact details and preferences for enrolling in the loyalty program and sending promotional communications;
-
Browsing data (IP address, technical and analytical cookies).
3. Purpose of the processing
The data is processed for the following purposes:
a. Manage reservations and respond to user requests;
b. Manage online purchases and related tax obligations;
c. Send communications related to the loyalty program and promotions (with prior consent);
d. Analyze site traffic and improve the services offered.
4. Legal basis
The treatment is based on:
-
Performance of a contract or pre-contractual measures (booking, ticket purchase);
-
Legal obligations (billing and accounting);
-
Express consent from the user to sign up for the newsletter or loyalty program;
-
Legitimate interest in IT security and service improvement.
5. Processing methods
The data is processed using IT and electronic means, in compliance with the security measures required by the GDPR.
No automated profiling with legal effects on the user is carried out.
6. Data retention
-
Booking data: retained for up to 12 months after the date of use.
-
Purchase data: retained for 10 years for tax purposes.
-
Marketing data: retained until consent is revoked or for 24 months.
7. Communication and dissemination
The data may be shared with technical, management, or payment service providers (e.g., Stripe, PayPal, Wix Payments), in compliance with applicable legislation.
They are not disclosed to third parties or transferred outside the European Union without adequate guarantees.
8. Rights of the interested party
The user may at any time exercise the rights provided for by Articles 15-22 of the GDPR:
-
access, rectification, erasure, limitation, opposition and data portability;
-
withdrawal of consent without affecting the lawfulness of the previous processing.
To exercise your rights: write to [owner's email].
9. Cookie Policy
The site uses technical cookies and, with your consent, analytical and profiling cookies. More information is available in the "Cookie Policy" section.
