Privacy and cookie notice

Italiano · Français · Deutsch · Español

Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR). Last updated: 26 October 2026. This is a translation of the Italian notice; in case of doubt, the Italian version prevails.

Data controller

Cot Cos di Ronco Mauro, VAT no. (P.IVA) 11130270017, Via Nizza 129/B, 10126 Torino, Italy. Phone +39 011 992 5109, email prenotazioni@cotcos.it.

What data we collect

• Reservation: name, mobile number, email (optional, required if you do not have WhatsApp), date, time, number of guests, any allergies or intolerances you indicate and the notes you write. We use allergies and intolerances only to prepare your table and our kitchen.
• Reservations by phone: the same data, entered by our staff.
• Deposit: if we ask you for a deposit, you pay on the SumUp page. We do not see your card details: SumUp only tells us the amount and the outcome of the payment.
• Technical data: the server briefly logs your IP address for security and to prevent abuse of the booking form.

Why we use it and on what legal basis

• Managing the reservation (confirmation, reminder and attendance confirmation via WhatsApp or email, any deposit): necessary to handle your request (Art. 6.1.b GDPR). Without a name and mobile number we cannot book a table.
• Messages you send us on WhatsApp to the restaurant's number: we receive them in our management panel, link them to your reservation and forward them to the owner to reply to you (Art. 6.1.b GDPR). If you reply "yes" to the request to confirm, we mark your attendance as confirmed.
• Allergies and intolerances you indicate: these are health data; we process them only with the consent you give by ticking the box on the form (Art. 9.2.a GDPR), and you can withdraw it at any time.
• Reservation history linked to your phone number (previous visits, no-shows): used to organise the dining room and to manage people who book without showing up, in our legitimate interest (Art. 6.1.f GDPR).
• Review request after dinner, once only, by email or WhatsApp: legitimate interest (Art. 6.1.f GDPR). You can object at any time by writing to us or replying to the message.
• Legal obligations, for example tax and accounting obligations for deposits (Art. 6.1.c GDPR).

We do not use your data for advertising and we do not sell it. We do not make automated decisions or carry out profiling.

How long we keep it

Reservation data is deleted automatically 24 months after the reservation date, WhatsApp messages 24 months after they were sent. Daily backup copies of the data stay on the server for 30 days and are then deleted. Payment data with tax relevance is kept for the period required by law (usually 10 years). Technical logs with IP addresses are not kept for more than a few days.

Who processes data on our behalf

Only authorised restaurant staff can access the data. To run the service we rely on these providers, appointed as data processors or, for payments, acting as independent controllers:

• Render Services, Inc.: hosting of the website and of the reservation archive, on servers in the European Union (Frankfurt).
• Meta Platforms Ireland Ltd. (WhatsApp Business): sending confirmation, reminder and review messages and receiving the messages you send us.
• Resend (Plus Five Five, Inc.): sending emails.
• SumUp Ltd. and group companies: deposit payment, as independent controller for payment data.
• Google Ireland Ltd.: website fonts (Google Fonts); the map, only if you open it; the restaurant's public rating and reviews on Google Maps, read by our server (your browser does not contact Google for these).

Some of these providers are based in the United States or may process data outside the European Union. In these cases the transfer is based on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

Cookies

The public website does not use profiling, advertising or analytics cookies and shows no banner because none is needed.

• If you choose the language with the selector on the site, the site remembers it with a technical cookie (lang) for one year; otherwise it follows your device's language.
• The staff-only area uses a single technical session cookie, required to log in; it does not concern guests.
• The Google map loads only if you press the "Show the map" button. From then on Google may set its own cookies, according to Google's privacy policy. Alternatively you can use the directions links, which open Google Maps or Apple Maps.
• To display the fonts, your browser downloads them from Google Fonts, which receives your IP address; Google Fonts does not set cookies.

Your rights

At any time you can request access to your data, rectification, erasure, restriction of processing and portability, object to processing based on legitimate interest, or withdraw your consent, without affecting what was done before. Write to prenotazioni@cotcos.it or call +39 011 992 5109: we reply within one month.

If you believe the processing breaches the GDPR you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the authority of the EU country where you live.

Cot Cos di Ronco Mauro · P.IVA 11130270017 · Via Nizza 129/B, 10126 Torino · Back to the site