ROMA · ITALIA · MEDITERRANEO

PRIVACY

Your information,
handled with care.

How your information is handled when you browse the website or enquire about a private experience.

Controller and contact. The data controller is Samuele Zaninotto, a private chef based in Rome, Italy. For questions about processing or to exercise your rights, email zaninottosamuele@gmail.com.

Information collected and purposes. The form collects your name, email address and requested experience. You may add your role, preferred date, destination, guest count and other relevant details. This information is used to reply, check availability and prepare a proposal. Please do not include health information, guests’ names or other confidential details; dietary requirements will be discussed directly when needed.

Legal basis and your choice. Requests for services and steps taken at the individual’s request before entering a contract are processed under Article 6(1)(b) GDPR. Correspondence with professional representatives and website security rely on the legitimate interests of managing business contacts and preventing abuse, Article 6(1)(f). Sending an enquiry is optional; your name, email and chosen experience are needed to handle the form and reply. The privacy checkbox acknowledges this notice and does not subscribe you to promotional messages.

Access and service providers. Enquiries are recorded in a private dashboard available to the controller and people expressly authorised to manage the website. Cloudflare supplies hosting, database and security services through Workers, D1 and Turnstile; administrative access is protected with Cloudflare Access. The provider’s data-processing terms apply where it processes information on the controller’s behalf. Further information: https://www.cloudflare.com/cloudflare-customer-dpa/ and https://www.cloudflare.com/privacypolicy/ .

Correspondence. Replies may be sent from zaninottosamuele@gmail.com. Messages exchanged through that mailbox are also processed by the email provider Google under its terms: https://policies.google.com/privacy . The website records enquiries in the dashboard and, in its current configuration, does not send automatic email notifications. Your information is not published or used for newsletters, commercial profiling or automated decisions about you.

Retention. Form records are kept for 90 days from receipt, then removed from view and deleted by scheduled cleanup. D1 technical recovery copies remain available only within the service’s recovery window, up to 30 days. Subsequent correspondence is kept for the time needed to handle the enquiry; if an assignment follows, records needed to deliver it or meet legal obligations are handled separately for those purposes. You may request earlier erasure where there is no reason requiring continued retention.

Where processing takes place. The form’s D1 database is configured within the European Union jurisdiction. Cloudflare’s network, security functions and email services may also involve processing outside the European Economic Area. Where applicable, processing and transfers rely on GDPR adequacy decisions and safeguards, including the standard contractual clauses identified in the provider’s agreements. You may ask the controller for information about these safeguards; Cloudflare’s agreement is available at the link above.

Browsing and spam prevention. Delivering and protecting the website involves technical data such as IP address, network requests and browser information. To limit submission frequency, the application uses short-lived pseudonymous identifiers rather than storing a plain IP address in the enquiry record. Turnstile checks technical signals to distinguish people from automated traffic. Cloudflare also describes its own processing to improve that service at https://www.cloudflare.com/turnstile-privacy-policy/ .

Cookies and content. The site uses only technical functions needed for delivery, security and restricted access; authentication cookies relate to the administrative area. Audience analytics and advertising pixels are not installed. Fonts, photographs and videos are served by this website, without embedded social or external video players. Links to external websites, including Instagram, open services governed by their own privacy notices.

Your rights. Where applicable, you may request access, correction, erasure, restriction and portability, or object to processing based on legitimate interests. Email zaninottosamuele@gmail.com with your request; identity verification may be needed. You may also complain to a competent supervisory authority, including the Italian Garante per la protezione dei dati personali: https://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali .

Updated: 9 November 2026. Version 2026-11-09-cf1.

Portraits and dish photographs edited with AI. Films provided by the chef.