Information notice on processing of personal data pursuant to EU General Data Protection Regulation 2016/679
In compliance with the provisions of EU Regulation 2016/679, here is the necessary information on how we process your personal data; in detail, the categories of data processed, purposes, manner of processing, scope of communication and dissemination of the data, the expected time of retention of the data, the possibility of their being transferred to third countries and the existence of profiling processes which could involve processing your personal data.
Purpose of the processing
Depending on the services delivery of which has led you to provide us with your personal data, data processing will have the following purposes:
Purposes associated with processing by our websites:
letting the data subject access web portals belonging to the data Controller, as well as enjoying and using them according to the implemented technologies and tools
managing booking at our restaurant
answering requests for information coming from the data subject
Managing the registration needed to take part in competitions organised by us, distribution of tasting coupons
Purposes associated with marketing:
Delivery of commercial and promotional information by postal mail, email, phone and SMS
Subscription to the newsletter (should commercial content be involved)
Purposes associated with profiling:
Analysing habits, behaviour and consumer choices in order to define a profile of the data subject to deliver promotional messages, offers or other commercial communication of interest to the addressee. The data will be retained for a period of time proportional to the specific purposes involved.
Nature of the data provided
Your personal data will be collected in order to respond to an explicit request by you, that is for the performance of one of our services which you intend to make use of. As an alternative, the data will always be processed on a consent basis.
You must provide your data whenever you request the activation/delivery/performance of one of the services we propose to you
Personal data will be processed for marketing and profiling purposes only after free expression of explicit and specific consent by the data subject.
Consent to data processing for purposes of profiling implies consent for marketing purposes, since the latter is only carried out after developing a profile of the addressee’s interests. You will not be the subject of any direct marketing activities if we cannot carry out the preliminary profiling operations.
Refusal to consent to processing for marketing and profiling purposes will in no way affect the possibility for the data subject to receive the services being offered.
Manner of processing
Your data will be processed according to principles of correctness, legality and transparency, and will be carried out using electronic tools but also on paper files suitable for filing, management and transmission. Processing will be carried out using tools which, in a reasonable manner and according to the state of the art, can guarantee security and confidentiality through the use of procedures for preventing the risk of loss, unauthorised access, illicit use and dissemination.
Scope and purpose of communication and dissemination
Your data may be made known to employed and/or consultant company staff especially appointed as data processors or as people in charge of the processing
The personal data may be communicated to third parties to fulfil legal obligations, that is to comply with orders coming from public authorities with the legitimate right to do so or to uphold or defend a right in court.
Your personal data, for the purposes mentioned above, may be made available to:
– The commercial network of the Data Controller
– Third parties carrying out specific tasks of collaboration on behalf of our company for advisory, commercial and promotional purposes;
Your personal data will not be disseminated or communicated to third parties for reasons other than those mentioned above, unless required by a law or regulation or EU regulation
Transfer of personal data outside the European Union
The personal data provided by you and processed for the above purposes will in no case be transferred to countries not belonging to the European Union. Should a transfer become necessary in the future, this will be possible only following your informed and explicit consent
Data retention time
Your personal data will be kept solely for the time needed to activate/deliver/perform the service you have subscribed to and more in general as provided for by law or specific measures issued by the National or European Data Protection Authority.
The Data Controller is:
Trattoria Sotto L’Arco Sas di Galluzzo Matteo e C.
C.F. e P.IVA 05176240488
Piazza G. Garibaldi 14B
Greve in Chianti, 50022 (FI)
Exercise of your rights
We remind you that at any time you may exercise your rights as provided for by EU Regulation 2016/679 which can be read in the annex.
Reference to EU Regulation 2016/679
Article 13: Information to be provided where personal data are collected from the data subject
Article 15: Right of access by the data subject
Article 16: Right to rectification
Article 17: Right to erasure
Article 18: Right to restriction of processing
Article 20: Right to data portability
Article 21; Right to object
Article 22: Automated individual decision-making, including profiling