Privacy Policy

Information notice on processing of personal data pursuant to EU General Data Protection Regulation 2016/679

​

In compliance with the provisions of EU Regulation 2016/679, here is the necessary information on how we process your personal data; in detail, the categories of data processed, purposes, manner of processing, scope of communication and dissemination of the data, the expected time of retention of the data, the possibility of their being transferred to third countries and the existence of profiling processes which could involve processing your personal data.

​

Purpose of the processing

Depending on the services delivery of which has led you to provide us with your personal data, data processing will have the following purposes:

​

Purposes associated with processing by our websites:

  • letting the data subject access web portals belonging to the data Controller, as well as enjoying and using them according to the implemented technologies and tools

  • managing booking at our restaurant

  • answering requests for information coming from the data subject

  • Managing the registration needed to take part in competitions organised by us, distribution of tasting coupons

Purposes associated with marketing:

  • Delivery of commercial and promotional information by postal mail, email, phone and SMS

  • Subscription to the newsletter (should commercial content be involved)

  • Market research.

Purposes associated with profiling:

  • Analysing habits, behaviour and consumer choices in order to define a profile of the data subject to deliver promotional messages, offers or other commercial communication of interest to the addressee. The data will be retained for a period of time proportional to the specific purposes involved.

Nature of the data provided

Your personal data will be collected in order to respond to an explicit request by you, that is for the performance of one of our services which you intend to make use of. As an alternative, the data will always be processed on a consent basis.

​

You must provide your data whenever you request the activation/delivery/performance of one of the services we propose to you

Personal data will be processed for marketing and profiling purposes only after free expression of explicit and specific consent by the data subject.

Consent to data processing for purposes of profiling implies consent for marketing purposes, since the latter is only carried out after developing a profile of the addressee’s interests. You will not be the subject of any direct marketing activities if we cannot carry out the preliminary profiling operations.

Refusal to consent to processing for marketing and profiling purposes will in no way affect the possibility for the data subject to receive the services being offered.

Manner of processing

Your data will be processed according to principles of correctness, legality and transparency, and will be carried out using electronic tools but also on paper files suitable for filing, management and transmission. Processing will be carried out using tools which, in a reasonable manner and according to the state of the art, can guarantee security and confidentiality through the use of procedures for preventing the risk of loss, unauthorised access, illicit use and dissemination.

Scope and purpose of communication and dissemination

Your data may be made known to employed and/or consultant company staff especially appointed as data processors or as people in charge of the processing

The personal data may be communicated to third parties to fulfil legal obligations, that is to comply with orders coming from public authorities with the legitimate right to do so or to uphold or defend a right in court.

Your personal data, for the purposes mentioned above, may be made available to:

  • – The commercial network of the Data Controller

  • – Third parties carrying out specific tasks of collaboration on behalf of our company for advisory, commercial and promotional purposes;

​​

Your personal data will not be disseminated or communicated to third parties for reasons other than those mentioned above, unless required by a law or regulation or EU regulation

Transfer of personal data outside the European Union

The personal data provided by you and processed for the above purposes will in no case be transferred to countries not belonging to the European Union. Should a transfer become necessary in the future, this will be possible only following your informed and explicit consent

Data retention time

Your personal data will be kept solely for the time needed to activate/deliver/perform the service you have subscribed to and more in general as provided for by law or specific measures issued by the National or European Data Protection Authority.

Parties

The Data Controller is:

Trattoria Sotto L’Arco Sas di Galluzzo Matteo e C.

 C.F. e P.IVA 05176240488

Piazza G. Garibaldi 14B

Greve in Chianti, 50022 (FI)

Exercise of your rights

We remind you that at any time you may exercise your rights as provided for by EU Regulation 2016/679 which can be read in the annex.

Reference to EU Regulation 2016/679

Article 13: Information to be provided where personal data are collected from the data subject

Article 15: Right of access by the data subject

Article 16: Right to rectification

Article 17: Right to erasure

Article 18: Right to restriction of processing

Article 20: Right to data portability

Article 21; Right to object

Article 22: Automated individual decision-making, including profiling