Privacy Policy

1. Introduction

("we", "us", "our") operates the Aurevianesselle Restaurant located in Auckland, New Zealand, and maintains the website at aurevianesselle.com (the "Website"). We are committed to protecting the personal information of every person who visits or interacts with the Website, in accordance with the New Zealand Privacy Act 2020 and, where applicable, any other relevant privacy legislation.

This Privacy Policy explains what personal information we collect through the Website, why we collect it, how we use and protect it, how long we retain it, and what rights you have in relation to it. Please read this policy carefully before submitting any information through the Website.

By using the Website you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not submit personal information through the Website.

2. Data Controller

The data controller responsible for personal information collected through the Website is:

All questions, requests and complaints relating to privacy and personal information should be directed to us at the email address above.

3. Information We Collect

We collect personal information only to the extent necessary for the purposes described in this policy. The categories of information we may collect through the Website are set out below.

3.1 Contact and Reservation-Request Data

When you submit an enquiry or reservation request through the Website, we collect the information you provide. This may include:

• Full name
• Email address
• Telephone number
• Preferred date and time of visit
• Number of guests in your party
• Seating preferences or accessibility requirements you choose to disclose
• Occasion details or special requests included in your message

Where any information you voluntarily provide constitutes special-category personal data, we will handle it with additional care in accordance with Section 7 below.

3.2 Device and Technical Data

When you browse the Website, our web server and any analytics tools we have activated automatically collect certain technical information. This may include:

• IP address (which may be truncated or anonymised where technically feasible)
• Browser type and version
• Operating system and device type
• Referring URL and exit page
• Pages viewed and time spent on each page
• Date and time of each request
• Approximate geographic location derived from IP address (country or city level only)

This technical data is collected primarily for security, performance monitoring and aggregate statistical analysis. It is not used to identify you as an individual unless we are required to do so for a legitimate security or legal purpose.

3.3 Cookie and Consent Data

The Website uses cookies and similar tracking technologies. When you first visit the Website, we present you with a consent notice through which you may accept, reject or customise non-essential cookies. We record your consent choice, together with the date, time and version of the consent notice presented, so that we can demonstrate compliance with applicable requirements and honour your preferences.

For full details of the specific cookies we use, their purposes and their lifespans, please refer to our Cookie Notice, which is accessible from the Website footer.

3.4 Communications Data

If you contact us by email at the address published on the Website, we will retain a record of the correspondence, including your email address, the content of your message and our response, for as long as is necessary to handle your enquiry and for the retention periods set out in Section 9.

3.5 Age-Verification Acknowledgement

Certain areas of the Website that relate to the casino facilities within our venue are designated for persons aged 18 and over. Where the Website presents an age-gate or acknowledgement prompt, we record the response (for example, a confirmation that the visitor is 18 or older) but we do not record the visitor's date of birth or any document used to verify age at that stage.

4. Purposes and Legal Bases for Processing

We process personal information only for specific, explicit and legitimate purposes. The table below summarises each purpose, the categories of information used and the legal basis under the New Zealand Privacy Act 2020 and relevant international frameworks.

Where we rely on legitimate interests as our legal basis, we have assessed that our interests are not overridden by your rights and interests, taking into account the reasonable expectations of individuals who interact with a hospitality website.

Where we rely on your consent (for example, for non-essential cookies), you may withdraw that consent at any time by adjusting your cookie preferences using the tool available on the Website or by contacting us at info@aurevianesselle.com. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

5. Special-Category Personal Data

We do not request special-category personal data through our standard Website forms. However, if you voluntarily include information that constitutes special-category personal data in a free-text field (for example, an accessibility requirement or dietary need communicated as part of a reservation request), we will:

• Use that information solely for the purpose of fulfilling your reservation or request
• Not share it with any third party except where strictly necessary to accommodate your requirements at the venue
• Retain it only for as long as necessary to fulfil the reservation and comply with any applicable legal obligation
• Apply additional technical and organisational safeguards to protect it

The legal basis for processing such information, where you have provided it voluntarily in the context of a reservation or enquiry, is your explicit consent as implied by your disclosure, or, where applicable, that processing is necessary for reasons of substantial public interest or to fulfil our obligations to you.

6. Recipients of Personal Information

We do not sell, rent or trade personal information to third parties for their own marketing purposes. We may share your personal information with the following categories of recipients, strictly as necessary:

6.1 Service Providers and Processors

We engage trusted third-party service providers to support the operation of the Website and our reservation process. These providers act as processors on our behalf and are contractually required to process personal information only on our instructions and to apply appropriate security measures. Categories of provider include:

• Website hosting and infrastructure providers
• Reservation and booking management system providers
• Email delivery and communication platform providers
• Website analytics providers (where you have consented to analytics cookies)
• Cybersecurity and monitoring service providers

6.2 Legal and Regulatory Authorities

We may disclose personal information to government agencies, regulators, law enforcement bodies or courts where we are required to do so by law, court order or lawful authority, or where we reasonably believe that disclosure is necessary to protect the rights, property or safety of , our guests or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets or similar transaction involving , personal information held by us may be transferred to the acquiring or successor entity as part of that transaction, subject to equivalent privacy protections. We will notify affected individuals as required by applicable law.

6.4 Professional Advisers

We may share personal information with our legal advisers, accountants or auditors where necessary for the provision of professional services, subject to confidentiality obligations.

7. International Transfers of Personal Information

Some of our third-party service providers are located or maintain servers outside New Zealand. Where personal information is transferred to a country that does not provide a comparable level of protection to that afforded by the New Zealand Privacy Act 2020, we take steps to ensure that appropriate safeguards are in place before any transfer occurs. Such safeguards may include:

• Standard contractual clauses or equivalent contractual protections binding the recipient to data-protection obligations
• Transfers only to countries or organisations recognised by the New Zealand Privacy Commissioner as providing comparable safeguards
• Binding corporate rules or other approved transfer mechanisms where applicable

You may request further information about the specific safeguards applied to any international transfer of your personal information by contacting us at info@aurevianesselle.com.

8. Retention of Personal Information

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by law. The following table provides guidance on our standard retention periods.

Where personal information is no longer required, we securely delete or irreversibly anonymise it. In some cases, legal obligations may require us to retain information for a longer period than set out above, in which case those legal requirements take precedence.

9. Security of Personal Information

We implement and maintain appropriate technical and organisational security measures designed to protect personal information against unauthorised access, disclosure, alteration, accidental loss or destruction. These measures include:

• Transmission of data over the Website using Transport Layer Security (TLS) encryption
• Access controls that restrict access to personal information to authorised personnel only, on a need-to-know basis
• Regular review of our information security practices and policies
• Contractual obligations on third-party processors to maintain equivalent security standards
• Procedures for detecting, assessing and reporting personal information breaches in accordance with our obligations under the Privacy Act 2020

Notwithstanding these measures, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. We encourage you to exercise care when transmitting personal information online and to keep your own devices and accounts secure.

In the event of a notifiable privacy breach affecting your personal information, we will notify you and the New Zealand Privacy Commissioner in accordance with our obligations under Part 6 of the Privacy Act 2020.

10. Your Privacy Rights

Under the New Zealand Privacy Act 2020, you have the following rights in relation to your personal information held by us.

10.1 Right of Access

You have the right to request confirmation of whether we hold personal information about you and, if so, to request access to that information. We will provide you with a copy of your personal information in a reasonably accessible format, subject to any lawful grounds for withholding information permitted by the Privacy Act 2020.

10.2 Right of Correction

You have the right to request that we correct any personal information we hold about you that is inaccurate, incomplete, misleading or not up to date. We will take reasonable steps to correct such information promptly. Where we decline to make a correction, we will give you written reasons and inform you of your right to complain.

10.3 Right to Withdraw Consent

Where we process your personal information on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10.4 Right to Object to Processing

Where we rely on legitimate interests as our legal basis, you may object to that processing. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless processing is necessary for the establishment, exercise or defence of legal claims.

10.5 Right to Complain

You have the right to raise a concern or complaint with us directly and, if you are not satisfied with our response, to lodge a complaint with the New Zealand Privacy Commissioner. Details of how to contact the Privacy Commissioner are set out in Section 12.

10.6 How to Exercise Your Rights

To exercise any of the rights described above, please contact us in writing at:

We will respond to your request within 20 working days of receipt, in accordance with the Privacy Act 2020. We may need to verify your identity before we can act on your request. We will not charge a fee for handling a request unless the request is excessive or repetitive, in which case we will notify you of any applicable fee before proceeding.

11. Cookies and Similar Technologies

The Website uses cookies, which are small text files placed on your device when you visit a website. We use the following categories of cookies.

You can manage or withdraw your consent to non-essential cookies at any time using the cookie preference tool available on the Website. You may also control cookies through your browser settings; however, please note that disabling certain cookies may affect the functionality of the Website.

12. Links to Third-Party Websites

The Website may contain links to external websites operated by third parties. This Privacy Policy applies only to the Website at aurevianesselle.com and does not extend to any third-party website. We are not responsible for the privacy practices or content of any external website. We encourage you to review the privacy policy of any third-party website you visit.

13. Children and Minors

The Website is not directed at persons under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. Content relating to the casino facilities at the venue is restricted to persons aged 18 and over, consistent with the requirements of the Gambling Act 2003 (New Zealand). If you believe that a person under 18 has submitted personal information to us through the Website, please contact us at info@aurevianesselle.com and we will take prompt steps to delete that information.

14. Complaints

If you have a concern about the way we have handled your personal information, we encourage you to contact us first so that we have an opportunity to address your concern:

We will acknowledge your complaint within 5 working days and aim to provide a substantive response within 20 working days. If you are not satisfied with our response, or if you wish to raise a complaint directly with the regulatory authority, you may contact the New Zealand Privacy Commissioner:

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Website, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, we will draw changes to your attention when you next visit the Website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of the Website following any update constitutes acknowledgement of the revised policy.

16. Contact Us

If you have any questions about this Privacy Policy or about our privacy practices, please contact us: