Privacy Policy
Last updated: September 2026
This notice describes how personal data is handled for visitors to the Nile & Palms website.
Data Controller
The Data Controller is Nile & Palms S.N.C. (VAT No. 14770090968), reachable at ciao@nileandpalms.it for any request regarding the processing of personal data.
Data collected and purposes
The site has no contact form, online booking, or account registration: the venue's details (phone, email, address) are published so visitors can use them freely with their own tools (a call, an email, a map) — none of this passes through our systems. While browsing, aggregated and anonymous usage data is collected through Vercel Web Analytics and Vercel Speed Insights (pages visited, general traffic origin, performance metrics), without the use of cookies and with no way to trace it back to an identifiable person. The hosting provider also processes technical data (IP address, access logs) needed to run and secure the site.
Legal basis for processing
The processing of technical and browsing data is based on the Data Controller's legitimate interest in the site's correct operation, security, and improvement (Art. 6(1)(f) GDPR), since this is aggregated data that cannot be traced back to an identified or identifiable person.
Recipients of the data
The site is hosted on Vercel Inc., which processes technical access logs and provides the aggregated usage-analytics service (Vercel Web Analytics, Vercel Speed Insights) used to monitor the site's performance. The site's content (menu, photo gallery, events) is managed through Sanity.io, used purely as an internal editorial tool: it does not collect or process any personal data of site visitors. None of these providers uses the data for purposes of their own beyond those described above.
International data transfers
Vercel Inc. and Sanity.io are companies based in the United States. Data transferred to these providers relies on Standard Contractual Clauses (SCCs) or other adequacy mechanisms provided for by the GDPR and adopted by each provider.
Retention period
Since the Data Controller does not directly collect personal data, technical and aggregated usage data is retained for as long as technically necessary under the retention policies of the providers listed above.
Your rights
You may at any time request access to your data, its rectification, erasure, restriction of processing, data portability, or object to its processing, by writing to ciao@nileandpalms.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) if you believe the processing violates applicable law.
Children
The site is not intended to knowingly collect data from children under 16.
Cookies
This site does not currently use profiling or analytics cookies that require prior consent: the measurement tools in use (Vercel Web Analytics and Speed Insights) do not use cookies. Once the final domain goes live, we will introduce a consent-management banner to request authorization for any technical or third-party cookies that may become necessary in the future. Details will be described in the Cookie Policy, published at the same time.
Changes to this notice
This notice may be updated over time; the last-updated date is shown at the top of the page.