Privacy & cookies
Last updated: 6 November 2026 · This is a translation of the Italian version, which prevails in case of discrepancies.
Who handles your data
The data controller is Sushi Garden di Qi Feihe, VAT no. IT03389770599, Via Don Mazza 1/D, 37010 Affi (VR), Italy. For any privacy request, write to info@sushigarden.it.
What data we collect
This website has no contact forms, newsletters, analytics or advertising. The data we process is:
- Technical browsing data. When you visit the website, the service that hosts it automatically records data such as IP address, date and time, page requested and browser type. It is used only to run the website and protect it from abuse.
- Data you send us. If you call or email us, we use the information you give us only to reply and handle your request.
Online bookings
The «Book online» button takes you to the Tavola booking service at tavola.mtpsolutions.it. For the data you enter to book (name, contact details, date, number of guests and notes) Sushi Garden remains the controller: we use it to manage your booking. MTP Solutions, which provides Tavola, processes it on our behalf as a data processor (Art. 28 GDPR). The Tavola privacy policy also applies to how the platform works.
Loyalty programme «Fidelity Sushi Garden»
If you join the loyalty programme from your Tavola account, we use your account data (name, email, phone) together with the amounts you spend to collect points (1 point per euro), assign your level (Classic or VIP) and give you rewards. Sushi Garden is the controller and MTP Solutions processes the data on our behalf, as for bookings.
The legal basis is the performance of the programme rules you accept when you join (Art. 6(1)(b) GDPR). Joining is optional: you can book and visit us without it. We do not use this data for advertising or personalised offers; if we ever wanted to, we would first ask for your separate consent.
Service providers
| Provider | What for | Data involved |
|---|---|---|
| Cloudflare, Inc. | Hosts and protects the website | Technical browsing data |
| Supabase, Inc. | Stores the website content (opening hours, menus, photos) and staff access to the management panel | Technical browsing data; for staff, login email |
| Aruba S.p.A. | Runs the info@sushigarden.it mailbox and the domain | Emails you send us and your contact details |
| MTP Solutions / MTP Digital | Builds and maintains the website | Only when needed for support |
Website content and panel logins are stored by Supabase in a data centre in the European Union (Frankfurt). Cloudflare and Supabase are companies based in the United States: any access to data by them takes place with the safeguards required by the GDPR, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses. Aruba stores emails in data centres in Italy.
Google Maps. If you consent to the map, it is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which processes browsing data as an independent controller under its own privacy policy. Data may also be transferred to Google LLC in the United States, with the safeguards of the EU-U.S. Data Privacy Framework.
How long we keep data
Technical data is kept by providers only as long as strictly needed to run and secure the service. Messages you send us are kept as long as needed to handle them and for any legal obligations. Loyalty programme data is kept while you are a member: if you leave or ask us, we delete it, except what the law requires us to keep.
Legal basis
For technical data, our legitimate interest in running and protecting the website (Art. 6(1)(f) GDPR). For your requests, steps taken at your request (Art. 6(1)(b)). For the loyalty programme, the performance of its rules (Art. 6(1)(b)). For the Google map, your consent (Art. 6(1)(a)), which you give with the «Accept» button of the cookie banner or by clicking «Show the map».
Cookies
The website uses no profiling or analytics cookies. The only non-technical cookies are those of Google Maps: this is why, on your first visit, a banner asks whether you want to load the map. If you accept, the map loads automatically; if you reject or close the banner with ✕, the map stays off and you can always load it with «Show the map». You can change your choice at any time from the «Cookie settings» link at the bottom of the home page. Your choice lasts 6 months, then we ask again.
| Cookie | Type | Purpose and duration |
|---|---|---|
| Panel login | Technical | Only for authorised staff logging into the management panel; lasts until logout. |
sg_anteprima | Technical | Only during the «Coming soon» phase, for people opening the preview link; 30 days. |
sg_consent | Technical (browser storage) | Remembers your cookie banner choice so we don't ask on every visit; 6 months. |
| Google Maps | Third-party | Only if you accept in the banner or click «Show the map»: Google may set cookies under its privacy policy. Without consent the map is not loaded. |
The website's fonts and scripts are hosted on the website itself: opening the pages, your browser does not contact services such as Google Fonts. You can still delete or block cookies in your browser settings.
Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Arts. 15–22 GDPR), by writing to info@sushigarden.it. If you believe your data is not being handled correctly, you can lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali, or with the authority of the EU country where you live.