DATA PRIVACY POLICY

The personal data that the User (hereinafter “Data Subject”) provides while browsing this website (hereinafter the “Website”) will be processed fairly and transparently for lawful purposes, protecting their privacy and rights in compliance with EU legislation on personal data protection (EU Regulation 2016/679).

This document does not include processing activities carried out on other websites that may be accessed by the user through links available on this Website.

The processing activities will be carried out according to the following purposes and methods:

1. Data Controller.
Pursuant to the aforementioned legislation, the Data Controller is Trattoria Do Forni S.r.l.

2. Subject of the Processing.
The Data Controller will process the personal data that the Data Subject provides by accessing this Website or by sending an email to the Data Controller, exclusively for the purposes indicated in this policy.

3. Purpose of the Processing.
The purposes generally pursued by the Data Controller may be summarized as follows:
a) to allow the Data Controller to respond to a message or request for information sent by the Data Subject.

4. Categories of Personal Data Processed.
The data processed will be those described in point 2, strictly necessary for the requested and/or authorized purposes.

5. Recipients or Categories of Recipients of Personal Data.
The data provided by the Data Subject may be communicated to employees and collaborators of the Data Controller. The data will not be disclosed publicly and will be processed using organizational and logical methods related to the purposes specified above.

6. Data Transfer.
Data processing by the competent company departments will be carried out using tools suitable for ensuring security and confidentiality and may also be performed through automated means (both IT and telematic) designed to store, manage and transmit the data. The management and storage of personal data will take place on servers located within the EU owned by the Data Controller and/or by appointed third-party companies, and no transfer of such data outside the European Union will take place.

7. Data Retention Period.
The Data Controller will retain the personal data provided for the time necessary to fulfill the purposes described above and in particular:
- the first name, surname and email address provided by the Data Subject through this Website or by sending an email to the Data Controller will only be used to respond to requests and/or messages sent by the Data Subject and will be deleted once the correspondence has ended.

8. Rights of the Data Subject.
The Data Subject has the following rights:
- the right to access their personal data (once confirmation has been obtained that their data is being processed by the Data Controller);
- the right to obtain the rectification and integration of their data;
- the right to obtain the erasure of their data;
- the right to obtain the restriction of the processing of their personal data under certain conditions;
- the right to receive the personal data provided to the Data Controller in a structured and commonly used format, and to transmit them to another controller;
- the right to object to the processing of personal data when reasons related to their personal situation apply;
- the right not to be subject to an automated decision-making process;
- the right to receive communication in the event that their data suffers a serious data breach;
- the right to withdraw consent to processing at any time;
- the right to lodge a complaint with a supervisory authority.

The Data Subject may exercise the above rights by sending a communication to the Data Controller at the addresses indicated in Article 1 above.

9. Nature of the Provision of Data and Consequences of Refusal to Provide Data.
Providing data for the purposes indicated above is optional.

Last updated: March 26, 2024