Privacy Policy (GDPR)
1. Data Controller
Pazzo (Poco Pazzo BV, Oudeleeuwenrui 12, 2000 Antwerp, Belgium, company number BE 0464.627.624) is the data controller. For privacy-related enquiries, please contact us at contact@pazzo.be.
2. What Personal Data Do We Collect?
We may collect identification and contact details (name, email address and telephone number), reservation details (date, number of guests and comments), payment and invoicing details, preferences and allergies (when voluntarily provided), and communication history.
3. Purposes and Legal Bases (Article 6 GDPR)
Performance of a contract: processing reservations, communications and payments.
Compliance with legal obligations: accounting and tax-related record-keeping requirements.
Legitimate interests: improving the quality of our services, planning and capacity management, and limited direct marketing to existing customers.
Consent: newsletters and marketing communications. You may withdraw your consent at any time.
4. Retention Periods
Reservation data is retained for up to 24 months after your most recent visit.
Invoicing data is retained for seven years, as required by law.
Marketing data is retained until you withdraw your consent or following a period of inactivity.
Incident and security-related data is retained for a maximum of 12 months, unless a longer retention period is required by law.
5. Recipients and Data Processors
External service providers that process personal data on our behalf—such as our reservation platform, email provider, web-hosting provider and payment service provider—enter into a data processing agreement with us and process personal data solely in accordance with our instructions.
6. International Data Transfers
If personal data is processed outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.
7. Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
8. Your Rights
You have the right to access, rectify or erase your personal data, restrict its processing, request data portability, object to its processing, and withdraw your consent.
You can exercise these rights by contacting us at contact@pazzo.be. We will respond within the time limits prescribed by law.
9. Complaints
You may lodge a complaint with the Belgian Data Protection Authority:
Data Protection Authority
Rue de la Presse 35
1000 Brussels
Belgium
More information is available through the authority’s official public contact channels.
10. Photographs, Social Media and Events
We may occasionally take photographs or videos capturing the atmosphere at events, based on our legitimate interest. If you do not wish to appear recognisably in such images, please inform us in advance or notify a member of staff during the event.
11. Changes to This Privacy Policy
We may amend this Privacy Policy from time to time. The most recent version and its effective date will be published on our website.
Cookie Policy
1. What Are Cookies?
Cookies are small files placed on your device when you visit a website. They allow the website to remember your preferences, analyse how the website is used and provide certain functionality.
2. Types of Cookies We Use
Strictly necessary cookies: technically required for the website to function.
Preference cookies: remember choices such as your language, location and other preferences.
Analytical cookies: collect anonymous statistics about website use and performance.
Marketing cookies: are used to provide personalised content or advertisements and are placed only with your consent.
3. Cookie Settings
When you first visit our website, we ask for your consent through a cookie banner. You can change your preferences at any time via “Cookie Settings”.
You can also delete or block cookies through your browser settings. Please note that doing so may limit certain website features.
4. Cookie Overview and Retention Periods
An up-to-date overview of the cookies used—including their name, purpose, retention period, type and any relevant third party—is available in the website’s cookie settings.