Privacy and cookies

LUX COMPANY S.R.L. (Ristorante Rubaconte) — registered office: Via Ghibellina 178/R, 50122 Firenze (FI) — VAT no. and tax code 07131800489. For any privacy request write to info@ristoranterubaconte.it.

• Booking request (website form): name, email, phone, date, time, number of guests, type of request and notes. We use them to reply, handle your booking. Legal basis: carrying out your request (Art. 6(1)(b) GDPR). Without this data we cannot handle it.
• Allergies and intolerances: if you write them in the notes they are health data. We use them only to prepare your meal safely; by writing them you authorise us to do so (Art. 9(2)(a) GDPR) and you may withdraw at any time by writing to us.
• Technical browsing data (such as the IP address): needed to run the site and protect it from abuse (legitimate interest, Art. 6(1)(f) GDPR).

No marketing, newsletters, profiling or visitor statistics. We do not sell your data.

The restaurant's authorised staff and some providers acting on our behalf: Lovable and Supabase (website and database), Cloudflare (network and security), Brevo (sending the notification email to the restaurant). Some of these providers may process data outside the European Union, in which case they rely on standard contractual clauses or an adequacy decision.

Instagram, Google Maps and TheFork are third-party services with their own privacy notices, and they are activated only if you choose to (see below).

Booking requests are kept for 12 months from the requested date and then deleted automatically, unless the law requires otherwise. Technical data follows the hosting providers' retention periods.

You can ask for access, rectification, erasure, restriction, objection and portability by writing to info@ristoranterubaconte.it. You may also lodge a complaint with the Italian data protection authority (garanteprivacy.it).

This site uses only technical cookies, which do not require consent: __dpl (our domain, 24 hours, site operation), __cf_bm (Cloudflare, 30 minutes, bot protection), plus your chosen language (kept in your browser) and your choices about external content (until you close the browser).

Instagram (Meta Platforms Ireland), Google Maps (Google Ireland) and TheFork load only after you click. From then on they may receive your IP address and set their own cookies, under their own notices: Instagram, Google, TheFork.