Privacy Policy

1. Introduction

(referred to in this policy as "we", "us" or "our") operates the restaurant and casino dining venue known as Savoriavellinea Restaurant, located at , and maintains the website at savoriavellinea.com (the "Website").

We are committed to protecting the personal data of every individual who visits our Website or contacts us in connection with our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, with whom we share it, how long we retain it, and what rights you hold under applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation.

Please read this policy carefully. By using the Website you acknowledge that you have read and understood how we handle your personal data. If you do not agree with any part of this policy, please discontinue use of the Website.

2. Data Controller

The data controller responsible for the personal data collected through this Website is:

Any questions, requests or complaints relating to the processing of your personal data should be directed to us using the contact details above.

3. Personal Data We Collect

We collect only the personal data that is necessary for the purposes described in this policy. The categories of data we collect through the Website are set out below.

3.1 Contact and Reservation-Request Data

When you submit a reservation request, an enquiry form or a general contact message through the Website, we collect the following information:

• Full name
• Email address
• Telephone number (if provided)
• Requested reservation date and time
• Number of guests in your party
• Seating or dining preferences stated in your message
• Any other personal data you voluntarily include in the free-text fields of the form

Providing a name, email address and reservation details is necessary to respond to your request. Fields marked as optional may be left blank without affecting your ability to submit the form.

3.2 Device and Technical Data

When you browse the Website, our web server and any analytics tools we operate automatically receive and may store certain technical information, including:

• IP address
• Browser type and version
• Operating system and device type
• Pages visited on the Website and the sequence of those visits
• Date and time of each request
• Referring URL (the page from which you navigated to our Website)
• Time spent on individual pages

This technical data does not, on its own, identify you by name. However, it may constitute personal data when combined with other information we hold or when an IP address can reasonably be used to identify an individual.

3.3 Cookie and Consent Data

The Website uses cookies and similar tracking technologies. When you first visit the Website, a consent banner is presented and your consent choice is recorded. We collect:

• Your consent status (accepted, declined or preferences selected by category)
• The date and time your consent was recorded
• The version of the consent notice that was displayed to you

For full details of the cookies we use, their purposes and how to manage them, please refer to Section 7 (Cookies) of this policy.

3.4 Special-Category Personal Data

We do not intentionally solicit or process special-category personal data through this Website. If you voluntarily include any such data in a free-text field (for example, in a reservation note), we will treat that information with the heightened level of care required by applicable law and will use it solely to respond to your specific request. We ask that you share only the information necessary for us to assist you.

3.5 Age-Related Information

Our venue includes a casino area, and access to that area is restricted to individuals who are at least 18 years of age. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected personal data from a person under the age of 18, we will delete that data promptly. If you believe that we may hold data relating to a minor, please contact us immediately at info@savoriavellinea.com.

4. Purposes and Legal Bases for Processing

We process your personal data only where we have a valid legal basis for doing so. The table below sets out each processing purpose, the categories of data involved and the applicable legal basis under PIPEDA and related Canadian privacy legislation.

Where we rely on legitimate interests as the legal basis, we have assessed that our interests do not override your fundamental privacy rights. You may contact us at any time to request information about that balancing assessment.

Where we rely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, please email info@savoriavellinea.com.

5. Marketing Communications

We will only send you promotional emails or newsletters about Savoriavellinea Restaurant, its dining experiences and its events if you have expressly opted in to receive such communications. Each marketing email we send will contain a clear and easy-to-use unsubscribe link. You may also opt out at any time by emailing us at info@savoriavellinea.com with the subject line "Unsubscribe".

We do not sell, rent or trade your email address or other personal data to third parties for their own marketing purposes.

6. Recipients of Personal Data

We do not sell your personal data. We may share your personal data with the categories of recipients described below, and only to the extent necessary for the relevant purpose.

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf and under our documented instructions. These include:

• Website hosting and infrastructure providers: to host and deliver the Website and its content.
• Email delivery services: to transmit reservation confirmations and other transactional messages.
• Website analytics providers: to help us understand how visitors use the Website so that we can improve it. Where such tools are used, we configure them to anonymise IP addresses wherever technically possible.
• Reservation management systems: to record and manage table bookings.

All service providers are required by contract to process your data only on our instructions, to maintain appropriate security measures and to delete or return data when the service relationship ends.

6.2 Legal and Regulatory Authorities

We may disclose personal data to government authorities, law enforcement bodies or courts in Canada when required to do so by applicable law, court order or regulatory requirement, or when we believe disclosure is necessary to protect the rights, property or safety of , our guests, staff or others.

6.3 Business Transfers

In the event of a merger, acquisition, reorganisation, sale of assets or similar corporate transaction involving , personal data held by us may be transferred to the successor entity as part of that transaction. We will notify affected individuals in accordance with applicable law and ensure that the recipient entity is bound by data protection obligations no less protective than those set out in this policy.

6.4 No Sale of Personal Data

We do not sell, rent, lease or otherwise transfer your personal data to third parties in exchange for monetary or other valuable consideration.

7. Cookies and Similar Technologies

7.1 What Cookies Are

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to remember certain information about your preferences or actions.

7.2 Categories of Cookies We Use

7.3 Managing Your Cookie Preferences

When you first visit the Website, you will be presented with a cookie consent notice. You may accept all cookies, accept only strictly necessary cookies, or customise your preferences by category. You may change your preferences at any time by clearing your browser cookies and revisiting the Website, whereupon the consent notice will reappear.

You may also control cookies through your browser settings. Most browsers allow you to block or delete cookies entirely. Please note that disabling certain cookies may affect the functionality of the Website. For guidance on cookie controls specific to your browser, please visit the help section of that browser.

8. International Transfers of Personal Data

is established in Canada and processes personal data primarily within Canada. Some of the third-party service providers we engage (for example, cloud infrastructure or analytics services) may process data on servers located outside Canada, including in the United States or the European Economic Area.

Where personal data is transferred outside Canada, we take steps to ensure that appropriate safeguards are in place. These may include:

• Transferring data only to countries that the Office of the Privacy Commissioner of Canada considers to provide an adequate level of protection;
• Entering into contractual arrangements with the recipient that require them to protect personal data to a standard substantially similar to PIPEDA; or
• Applying other safeguards recognised under applicable Canadian privacy law.

You may request further information about the specific safeguards applied to any cross-border transfer by contacting us at info@savoriavellinea.com.

9. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

10. Security of Personal Data

We implement technical and organisational measures appropriate to the nature of the personal data we hold and the risks presented by its processing. These measures are designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Our security practices include, but are not limited to:

• Transmission of data between your browser and our Website over encrypted connections (HTTPS/TLS);
• Access controls that limit who within our organisation can access personal data, based on role and necessity;
• Regular reviews of our information security practices and systems;
• Contractual requirements imposed on service providers to maintain appropriate security measures.

While we take reasonable steps to protect your personal data, no transmission of data over the internet or method of electronic storage can be guaranteed to be entirely secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at info@savoriavellinea.com.

In the event of a personal data breach that poses a real risk of significant harm to affected individuals, we will notify the Office of the Privacy Commissioner of Canada and the affected individuals in accordance with the breach reporting requirements under PIPEDA.

11. Your Privacy Rights

Under PIPEDA and applicable provincial privacy legislation, you have the following rights in relation to your personal data:

11.1 Right of Access

You have the right to request confirmation of whether we hold personal data about you and, if so, to receive a copy of that data together with information about how it is being used. We will respond to access requests within 30 days of receipt, or notify you if an extension of that period is necessary.

11.2 Right to Correction

If you believe that any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. We will take reasonable steps to verify the accuracy of the corrected information before updating our records.

11.3 Right to Withdraw Consent

Where we process your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11.4 Right to Challenge Processing

You may challenge whether our processing of your personal data complies with applicable privacy law. We will investigate your challenge and respond in writing, setting out our findings and any corrective action we have taken or propose to take.

11.5 Right to Lodge a Complaint

If you are not satisfied with our response to any privacy request or challenge, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada. Details are provided in Section 13 (Complaints) of this policy.

11.6 How to Exercise Your Rights

To exercise any of the rights described above, please send a written request to us by email at info@savoriavellinea.com. Please include your full name, a description of your request and, where helpful, the approximate date(s) of your interaction with the Website or our venue, so that we can locate the relevant data efficiently. We may need to verify your identity before processing your request.

We will not charge a fee for processing most requests. Where a request is manifestly unfounded, excessive or repetitive, we reserve the right to charge a reasonable administrative fee or to decline the request, in accordance with applicable law. We will inform you before doing so.

12. Links to Third-Party Websites

The Website may contain links to external websites operated by third parties. This Privacy Policy applies solely to data collected through savoriavellinea.com. We are not responsible for the privacy practices of any third-party website, and we encourage you to review the privacy notices of any website you visit via a link on our Website before providing any personal data to that site.

13. Complaints

If you have a concern about the way we have handled your personal data, we encourage you to contact us in the first instance so that we have the opportunity to resolve the matter directly:

Privacy enquiries: info@savoriavellinea.com

If we are unable to resolve your concern to your satisfaction, you have the right to escalate your complaint to the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Canada
Website: www.priv.gc.ca

Ontario residents may also direct complaints to the Information and Privacy Commissioner of Ontario at www.ipc.on.ca.

14. Changes to This Privacy Policy

We review this Privacy Policy periodically and may update it from time to time to reflect changes in our data processing practices, applicable law or Website functionality. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or by a prominent notice on the Website.

We encourage you to review this policy each time you visit the Website to stay informed about how we protect your personal data. Your continued use of the Website after any update constitutes your acknowledgment of the revised policy.

15. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or our data processing practices, please contact us:

We aim to respond to all privacy-related enquiries within 30 days of receipt.