Bookings
Privacy notice
Provisional text, pending the final version.
Who handles your data
The data controller is the venue you are booking with: its name, address and contacts are shown on the booking page and in the confirmation messages.
What we collect
Your name, mobile number, email and any notes you choose to write in the form; the booking details (room, day, time, number of players, price, any discount code); your replies to WhatsApp messages (for example “Confirm” or a cancellation request). Bookings, games played, cancellations and no-shows stay linked to the mobile number: if you book with a number that has been used before, the booking is added to that number's history, under the name you enter this time.
Why we use it
To manage your booking: record it, confirm it, remind you of it, receive your cancellation requests (from the booking page or WhatsApp) and let you know about any problems. The legal basis is performing the booking you ask for (Art. 6(1)(b) of EU Regulation 2016/679, GDPR): that is why your name, mobile number and email are required to book. We also keep the history linked to your number to recognise you when you come back and to protect the venue from people who book and don't show up without warning, up to no longer accepting online bookings from that number: this is a legitimate interest of the venue (Art. 6(1)(f) GDPR) and you can object by writing to the venue.
WhatsApp and offers
Confirmation, reminders and notices about your booking are sent on WhatsApp to the mobile number you give, with buttons to confirm or request a cancellation in one tap; if the number has no WhatsApp, by email. These are service messages about your booking, not advertising. Offers and news from the venue, by email and WhatsApp, are sent only if you tick the dedicated box: it is optional, your booking works without it, and you can withdraw it at any time by writing to the venue. After your game we may also ask you by email, at the address you gave when booking, to tell others how it went in a Google review: we do so without the offers box, as article 130(4) of the Italian Privacy Code (Legislative Decree 196/2003) allows for existing customers. You can say no right away by writing to the venue, or at any time with the link at the bottom of every email.
Who sees it
The venue's staff and the technical providers acting as data processors: Supabase (the database, with servers in Frankfurt), Vercel (the booking page, hosted in Frankfurt), Meta Platforms Ireland (WhatsApp messages) and Resend (sending emails). Some of these providers are based in or rely on the United States: in that case data is transferred under the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission (Arts. 45 and 46 GDPR). Your data is not sold or passed on to third parties for their own purposes.
How long
Booking data for as long as needed to manage it and to meet legal obligations (for example tax); the history linked to your number for as long as it serves the purposes above or until you ask for it to be erased: from then on only dates, rooms and amounts remain, with nothing that identifies you. Consent to offers and news lasts until you withdraw it.
Your rights
You can ask at any time to access, correct or delete your data, restrict or object to its use, receive it in a readable format and withdraw your consent to offers and news, by writing to the venue. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
Cookies
We only use technical cookies: one with a random code to count the booking steps anonymously. No profiling or advertising cookies: if the venue ever turned on analytics or advertising (for example from Meta or Google), they would start only after your consent, asked in a banner.
Last updated: October 2026.