DATA PROCESSING AND OBJECTIVES
All the personal information that you give us is supplied at your own free will. We have no unlawful means of obtaining such information without your consent. The information you send us via e-mail and/or by filling in the registration form is used only to answer your questions or to meet your requirements. Only with your express consent can our organisation use your personal data for purposes such as promotional and commercial information, or in relation to new offers of products or services. Lastly, only with your further specific consent can your personal data be placed at the disposal of our commercial partners, for the transmission of helpful information or promotional material which might be of interest to you.
Your personal data may be processed with or without the aid of electronic or automated equipment. All the processing operations laid down under article 4, paragraph 1, letter a of Legislative Decree 196, dated 30 June 2003, will be carried out. (“Processing” is considered as any operation or group of operations carried out, even without the aid of electronic instruments, concerning the collection, registration, organisation, storage, consultation, amendment, selection, extraction, comparison, use, interconnection, blockage, communication, distribution, cancellation and destruction of data, even when it is not registered in a database); in any case, the processing will be carried out in observance of every cautionary measure, guaranteeing security and confidentiality. The personal data will be processed only by personnel appointed directly by the Owner of the process, Ristorante all’Enoteca s.n.c, which has drawn up all the minimum IT security measures necessary to minimise the risk of third-party breach of user privacy, updating such measures constantly and every time it is necessary.
The IT systems and software procedures used by this website acquire certain personal data during their standard operation, and the transmission of this data is implicit in the use of internet communication protocols. This information is not collected for association with identified parties but, due to its nature, it may allow the identification of users via elaboration and association with data held by third parties. This category of data includes IP addresses or dominions of the computers of users of the website, the URI (Uniform Resource Identifier) addresses of the resources required, the time of the request, the method used to present the request to the server, the size of the response file, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used only to obtain anonymous statistical information on the use of the website and to monitor its correct operation, and is cancelled immediately after it has been processed. The data could be used to ascertain responsibility in the event of hypothetical IT crimes damaging the website.
OPTIONAL SUPPLY OF DATA
The optional, explicit and voluntary dispatch of e-mail to the addresses indicated on this website implicates the subsequent acquisition of the sender’s address, which is necessary in order to respond to the requests, as well as any other personal data included in the message. The personal data will be processed for the time strictly necessary to pursue the aims for which it has been collected: specific security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorised access.
Cookies are small strings of text sent by the sites visited by users to their terminals (usually to the browser) where they are memorised and retransmitted to the same sites the next time the same users visit them. There are two macro-categories: “technical” cookies and “profiling” cookies. This website uses so-called “technical” cookies solely to “transmit a communication on an electronic network or in the measure strictly necessary for the supplier of a service requested specifically by the user, in order to supply such service” (art. 122, paragraph 1 of the Policy): they can be divided into browsing or session cookies, which guarantee normal browsing and use of the website (allowing, for example, a purchase or authentication to access reserved areas) and/or analytics cookies, which are similar to technical cookies when used directly by the site manager to collect information, in aggregate form, on the number of users and how they visit the site, and/or function cookies, which allow users to browse in relation to a series of selected criteria (e.g.: language, the products selected for purpose) in order to improve the service provided.
The use of “technical” cookies (session variables with values memorised on the hard disc of the device that can be cancelled: it is also possible to disable the cookies by following the indications given by the main browsers) is strictly limited to the transmission of session identifiers (random numbers generated by the server) and data on use of the software necessary to allow the safe and effective exploration of the site: the session variables (so-called cookies) can avoid the use of IT techniques that can be potentially detrimental to the browsing of users and do not allow the acquisition of personal data which identifies the user. This website does not use “profiling” cookies (used to create profiles related to the user and then used to send advertising messages aligned to the preferences expressed by the user while browsing online). It uses “third-party” cookies (aimed at receiving cookies sent by different websites or services on the user’s device while browsing a particular website).
AWARENESS OF DATA
Only parties appointed by the owner of the process, Ristorante all’Enoteca s.n.c, can become aware of the data, in their capacity as process managers or operators.
COMMUNICATION AND DISTRIBUTION
The data can be communicated, meaning that it can be made available to one or more specific parties, under the following terms:
• to public and private parties who may access the data by virtue of the law, regulations or EU legislation, within the limits envisaged by such legislation (e.g.: welfare and social security institutions and departments, associations of local authorities, administrations and public bodies, associations, foundations, insurance and associative departments and bodies)
• to parties who need to access the data in order to facilitate the relationship between the parties, within the limits strictly necessary to perform the auxiliary tasks (such as banks and financial institutions, service providers, carriers and shipping companies)
• to our consultants, within the limits necessary to perform their role within our organisation, with a letter of appointment from us, enforcing the obligation to respect confidentiality and implement security measures.
The data will not be distributed, in the sense that it will not be made available to indeterminate parties in any way, not even for consultation, unless specific, free and informed consent is granted for each type of processing.
RIGHTS OF THE DATA SUBJECT
The data subject may exercise the rights pursuant to article 7 of the Code (Right to access personal data and other rights), and particularly: the right to obtain information on the existence or otherwise of his/her personal data, to access it and know its content and origin, check that it is exact, request its completion or update, rectification, cancellation or blockage if incomplete, incorrect or collected in breach of the laws in force, also opposing its processing for legitimate reasons. As regards the exercise of personal rights, and for an up-to-date list of the managers of personal data process, the data subject may present his/her requests in accordance with article 13, letter f) of Legislative Decree 196/2003 to the manager appointed for the processing of the personal data, Davide Palluda, at the registered office, also sending communication via e-mail to firstname.lastname@example.org, to receive a prompt reply.
OWNER OF THE PROCESS
The owner of the personal data processing system is Ristorante all’Enoteca s.n.c, with registered office in Via Roma 57, 12043 Canale (CN) – Italy.