Privacy policy
This website collects the bare minimum: no analytics cookies and no tracking tools. Here is what is processed, by whom and for how long.
Data controller
The data controller is the publisher of the website, Apulia Antichi Sapori: its full details are in the legal notice.
For any question about your data: phone +352 24 52 74 85, email info@apulia.lu, or write to Apulia Antichi Sapori, Galerie Auchan, 1st floor, 5, rue Alphonse Weicker, L-2721 Luxembourg-Kirchberg, Luxembourg.
Data we process
Browsing the website does not require any personal data from you. We only process the following data.
- Online booking and ordering (when these services are active)
- Your name, contact details and the details of your request (date, time, number of guests, dishes ordered), entered by you in the Delova modules (delova.app). Delova acts as a processor on behalf of the restaurant: it records your request and passes it on. Its modules are loaded from its own servers, so Delova receives your IP address, like any server your browser contacts.
- Online payment (when this service is active)
- Payment is handled by Stripe, also a processor. You enter your bank card details directly with Stripe: the restaurant has no access to your card number.
- Server logs
- Like any website, our host, OVH, automatically records technical logs (IP address, date and time, requested page, browser) to keep the server secure and working properly.
Cookies, local storage and tracking
This website sets no analytics or advertising cookies and uses no analytics or tracking tools (no Google Analytics or equivalent).
When an announcement banner is shown, you can close it: your browser then remembers this choice in its local storage (localStorage), solely so that the banner is not shown again. This entry contains no personal data, is never transmitted and disappears if you clear your browser data.
The typefaces (Cormorant Garamond and Jost) are hosted on this website itself: no request is sent to Google Fonts or to any other font service. No map is embedded either: the “Directions” link opens Google Maps in a new tab, and Google receives nothing until you click it.
When the booking, ordering or payment services are active, their providers may use cookies or your browser’s storage that are necessary for the service to work (session, payment security), under their own privacy policies.
Purposes and legal bases
- Handling your booking or order and replying to you: performance of your request (Art. 6(1)(b) GDPR).
- Keeping the website secure and working properly (server logs): legitimate interest (Art. 6(1)(f) GDPR).
This data is not used for advertising or profiling, and is shared only with the processors named above.
Retention periods
- Booking: for as long as needed to handle it.
- Order paid online: for the period required by accounting and tax obligations.
- Server logs: a limited period set by the host, no longer than needed for the security of the website.
- Announcement banner choice: until you clear your browser data.
Your rights and complaints
Under the GDPR you may access your data, have it rectified or erased, restrict its processing, object to it and, where applicable, receive it in a common format (portability). To exercise these rights, contact us by phone, by email or by post (details above).
If you believe your rights are not being respected, you may lodge a complaint with the Luxembourg supervisory authority: Commission nationale pour la protection des données (CNPD) (opens in a new tab).