Privacy Policy
This notice explains how personal data is handled in connection with the Gin’s Table website and bookings.
1. Data controller
The data controller is Ginevra, host of Gin’s Table, Rome. For privacy-related requests, you can use the same WhatsApp channel used for your booking.
2. Data we process
Gin’s Table may process information you voluntarily provide when booking, such as your name, phone number, requested date, group size, messages and information needed to organise the class. If you provide allergy, intolerance or other health-related information, it is used only to assess and manage your participation safely.
3. Purposes and legal bases
Data is used to respond to enquiries, organise and manage bookings, receive payments, comply with legal obligations and protect legal rights. Allergy, intolerance or health-related information is processed only where necessary for participation and, where required, on the basis of your explicit consent.
4. WhatsApp and PayPal
Booking communications take place through WhatsApp and payments through PayPal. These services process data under their own privacy notices and may involve processing or transfers outside the European Economic Area under the safeguards adopted by the relevant providers.
5. Retention
Data is kept for as long as necessary to manage the booking and comply with applicable administrative, tax or legal obligations. Allergy, intolerance or health-related information is not retained longer than necessary for the class, unless it needs to be kept for a dispute or legal obligation.
6. Sharing
Personal data is not sold. It may be shared with providers strictly necessary to manage the service, such as WhatsApp/Meta and PayPal, or with authorities and professional advisers where required by law or necessary to protect a legal right.
7. Cookies and tracking
The current version of the website does not use advertising profiling cookies. If analytics or marketing tools requiring consent are introduced in the future, this policy and the consent mechanism will be updated before those tools are activated.
8. Your rights
Where provided by applicable law, you may request access, correction, deletion, restriction or objection to the processing of your personal data and exercise the other rights available under the GDPR. You may also lodge a complaint with the competent data protection authority.
Last updated: 11 September 2026.