Privacy notice
How we handle the data of people who book a table through the website. Last updated: October 2026.
Who handles the data
The data controller is Pasticceria Ponti s.n.c., Via Mazzini 39, 22035 Canzo (CO), VAT no. 02350050130, which runs Ponti Bistrot at Piazza Garibaldi 2, 22035 Canzo (CO), Italy.
For any request about your data: pontibistrot@gmail.com.
What we collect
When you book through the website you give us your full name, phone number, email, the day, time and number of guests, plus any notes you choose to write.
If you mention allergies or intolerances in the notes, you are giving us health information: we use it only to prepare your table, and only with your consent.
The website uses no profiling cookies or analytics tools, and loads no content from other sites. The company hosting the website records the technical browsing data (IP address, date and time) needed to keep the service secure.
Why we use it
To record your booking, send you the confirmation email and contact you if needed about your table. The legal basis is your booking request (Art. 6(1)(b) of EU Regulation 2016/679). For allergies and intolerances the basis is the consent you give in the form (Art. 9(2)(a)).
We do not use this data for advertising or newsletters.
Who sees it
The bistrot staff who manage bookings.
Google Ireland Limited, which provides the spreadsheet where bookings are recorded (Google Sheets) and the service that sends the emails (Gmail). Google may also process data outside the European Union, under the safeguards set out in the Regulation (standard contractual clauses and the Data Privacy Framework).
Hostinger, which hosts the website. We do not pass on or sell the data to anyone else.
For how long
We keep booking data for 12 months from the date of the table, then delete it.
Your rights
You can ask us at any time to see your data, correct it, delete it, restrict its use or receive a copy, and you can withdraw your consent. Just write to the contact given above.
If you believe your data is being handled incorrectly you can contact the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
Phone and WhatsApp
If you call us or message us on WhatsApp, we use your number and what you tell us only to reply and manage your booking. WhatsApp’s own terms also apply.