Privacy Policy

Effective date: 5 March 2026

Data Controller

I QUATTRO MORI DI MOSTAFA MOHAMED EL SHERBINY S.SAS
VIALE GIOVAN BATTISTA MORGAGNI N 6/8 R – 50134 FIRENZE (FI – IT)
VAT No. 04180560486
Email: scescerbiny@gmail.com

Phone: +39 055 436 0816
https://www.ristoranteiquattromori.it

Data processed

Booking data: name and surname, email, phone number, date, time, number of people, possible allergies or intolerances, high chair request, free message.
Browsing data: IP address, technical logs, data collected through cookies according to the Cookie Policy.

Purposes and legal bases

A) Management of bookings and contact requests, sending confirmations and operational communications. Legal basis: performance of a contract or pre contractual measures.

B) Internal organizational management, prevention of abuse, protection of the Controller’s rights. Legal basis: legitimate interest.

C) Compliance with legal obligations and requests from authorities. Legal basis: legal obligation.

We do not process online payments through the website.

Provision of data

Providing the data necessary for booking is mandatory in order to manage the request. Providing additional data (for example message) is optional.

Processing methods and security

Data are processed using IT and paper tools with appropriate technical and organizational measures to reduce the risks of unauthorized access, loss or alteration.

Data recipients

Authorized personnel.
Suppliers providing technical and organizational services (hosting, email, website management, possible booking platform) appointed as data processors or independent controllers where applicable.
Third party services integrated into the website (for example maps) may process data as independent controllers according to their privacy policies.

Transfers outside the EEA

If some suppliers process data outside the European Economic Area, transfers take place according to the safeguards provided by GDPR (for example Standard Contractual Clauses) and, where required, supplementary measures.

Retention

Booking data: for the time necessary to manage the booking and related communications and in any case up to [X] months from the booking date, unless legal obligations or the need to defend legal claims apply.

Technical logs: according to security and operational needs, up to 5 years.

Data subject rights

Access, rectification, erasure, restriction, portability (where applicable), objection, withdrawal of consent (only where processing is based on consent).
Complaint to the Italian Data Protection Authority.

Privacy contact

For privacy requests:
scescerbiny@gmail.com