In compliance with the European General Data Protection Regulation No. 679/2016, GDPR and the national legislation – L.D. 30 June 2003 No. 196, (Code for the protection of personal data) and subsequent changes, this website respects and protects the privacy of visitors and users, by adopting all possible and proportionate measures not to infringe the rights of users. This privacy applies solely to the online activities of this site and is valid for users and visitors of the site. It does not apply to any information collected through means other than this website. This privacy policy aims to explain, as transparently as possible, the nature of the data that is collected by the website and the ways in which this data is used.
1) Lawful basis for processing
This site processes data on the basis of consent. By using or consulting this site users and/or visitors explicitly approve this privacy statement and give their consent to the processing of their personal data, in respect to the methods and the purposes specified here below, including the possible disclosure to third parties, if necessary for the performance of a service.
The provision of data and, thus, the consent to data collection and processing is optional, the User can refuse to give his/her consent and can withdraw his/her consent which had been previously given, at any time (through the link Contacts at the bottom of the page). However, the denial of the consent may imply the impossibility to provide certain services and may limit the browsing experience on this website. This site will process some of the data based on the legitimate interests of the owner.
2) Data collected and purposes
Like all websites, this site also uses log files where information is collected in an automated form during users’ visits to the site.
● The data that may be collected includes:
- internet protocol (IP) address;
- browser type and device parameters used to connect to the site;
- name of the Internet service provider (ISP);
- date and time of visit;
- the website that the visitor visited prior to this website (referral), and the website visited afterwards;
- where applicable, the number of clicks.
● The above information is processed in an automated form and collected in an exclusively aggregated form to ensure the website is functioning properly, and for security reasons such information will be processed according to the legitimate interests of the owner.
● For security purposes (i.e. through spam filters, firewalls, anti-virus software), automatically recorded data might contain personal data such as IP address, which might be used, in compliance with applicable laws, to block attempts to damage the website or to cause harm to other users, or in any case to carry out any other form of harmful activity or offence. This data is never used to identify or profile users, the sole purpose of this processing is to protect the website and its users. This data will be processed based on the legitimate interests of the owner.
● If the site allows the insertion of comments, or in the case of specific services requested by the user, the site automatically detects and records some identification data of the User, including the email address. These data are considered voluntarily provided by the user when requesting service delivery. By inserting a comment or other information, the user expressly accepts the privacy policy, and in particular agrees that the contents included can be disseminated to third parties.
● The data received will be used exclusively for the provision of the requested service and only for the time strictly necessary for the provision of the service. The information that the Users of the site deem to make public through the services and tools, are provided by the User knowingly and voluntarily, exempting this site from any liability regarding any violation of laws. It is up to the User to verify that they have permission to enter personal data of third parties or contents protected by national and international regulations.
● The data collected by the site during its operation are used exclusively for the purposes indicated above and kept for the time strictly necessary to carry out the activities specified. In any case, the data collected from the site will never be provided to third parties, for any reason, unless it is a legitimate request by the judicial authority and only in the cases provided by law.
3) Place of processing
The data collected from the site is processed at the headquarters of the Data Controller, he is based in the European Economic Area and acts in compliance with European legislation.
4) Cookies
As it is customary on all websites, this site also uses cookies, small text files that allow you to store information on visitor preferences, to improve the functionality of the site, to simplify navigation by automating the procedures (e.g. Login, site language) and for the analysis of the use of the site. There are different types of cookies. Some are necessary to navigate the site, others have different purposes such as internal security, system administration tasks, statistical analysis, to understand what are the sections of the website that matter most to users or offer a personalised visit of the site.
Session cookies are essential in order to distinguish between connected users, and are useful to avoid that a required feature can be provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, i.e. until the browser is closed. Session cookies do not require the user’s consent.
The functionality cookies used by the site are strictly necessary for the use of the site, in particular they are linked to an express request for functionality by the user (such as Login), for which no consent is required.
Disabling cookies
Cookies are connected to the browser used and can be disabled directly from the browser, thus refusing/withdrawing consent to the use of cookies. It should be noted that disabling cookies may prevent the correct use of some features of the site itself. Instructions for disabling cookies can be found on the following web pages:
Mozilla Firefox - Microsoft Internet Explorer - Microsoft Edge - Google Chrome - Opera - Apple Safari.
Third-party cookies
This site also acts as an intermediary for third-party cookies, used to provide additional services and features to visitors and to improve the use of the site, such as buttons for social media, or video. This site has no control over the cookies of third parties, entirely managed by third parties. As a consequence, the information on the use of these cookies and their purposes, as well as on how to disable them, are provided directly by the third parties on the pages indicated below. In particular, this site uses cookies of the following third parties:
- Google Analytics: a Google analysis tool that through the use of cookies (performance cookies), collects anonymous browsing data (IP truncated to the last octet) and exclusively aggregates for the purpose of examining the use of the site by users, compile reports on activities on the site and provide other information, including the number of visitors and pages visited. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google’s behalf. Google will not associate the IP address with any other data held by Google. Data transmitted to Google are stored on Google’s servers in the United States.
On the basis of a specific agreement with Google, which is designated as the data controller, the latter undertakes to process the data according to the requests of the Data Owner (see at the end of the privacy policy), given through the software settings. Advertising and data sharing options respect the users‘ privacy choices.
Further information on Google Analytics cookies can be found on the Google Analytics Cookie Usage on Websites page.
For more information on the use of data and their processing by Google, you are kindly invited to refer to the information on the page provided by Google, and on the page on how to use the data by Google when using sites or apps of partners.
- YouTube: a platform owned by Google, for sharing videos, which uses cookies to collect information from users and navigation devices. The videos on the site do not convey cookies when the page is accessed, since the “advanced privacy (no cookie)” option has been set, according to which YouTube does not store visitors’ information unless they voluntarily reproduce the video.
Social Network Plugins
This website also incorporates plugins and/or buttons to enable content to be shared easily via your favourite social media sites. These plugins have been programmed so that they do not allow any cookies to access the page, in order to safeguard the users’ privacy. Where provided by social networks, any cookie may be setup only when the user voluntarily and actually uses the plugin. Where the user browses while being logged in the social network, then he/she has already consented to the use of cookies conveyed through this website at the time of the subscription to the social network.
The collection and the use of information obtained through the plugin are governed by the respective privacy policies of the social networks, to which you are kindly invited to refer.
- Google+
5) Transfer of personal data to non-EU countries
This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook and Microsoft (LinkedIn) through social plugins and the Google Analytics service. The transfer is authorized on the basis of specific decisions of the European Union and the Guarantor for the protection of personal data, in particular the decision 1250/2016 (Privacy Shield - here the information page of the Italian Privacy Guarantor), for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.
6) Security measures
This site processes data of the users in a lawful and correct manner, adopting all adequate security measures to prevent any unauthorized access, any disclosure, any unauthorized change or destruction of data. The processing is carried out using IT and/or telematic tools, in an organised manner and strictly in connection to the purposes indicated. In addition to the owner, in some circumstances, may have access to the data categories of authorised persons involved in the management of the website (administrative, sales, marketing and legal staff, as well as system administrators) or external subjects (such as technical service suppliers, postal services, hosting providers or IT companies).
7) User rights
Pursuant to the legislation in force (EU Regulation 679/2016) and national regulations, according to the manners and within the limits set out by the applicable law, the User can exercise the following rights:
- the right to request confirmation as to whether personal data relating to him/her exist (right of access);
- the right to know the source;
- the right to obtain intelligible communication;
- the right to obtain information on the logic, methods and purposes of the processing;
- the right to request that the data is updated, corrected, integrated, erased, anonymised, and to request the block of the data processed in breach of the law, including those no longer necessary for the purposes for which it was collected;
- where processing is based on consent, the right to receive only the cost of any support, the user’s data provided to the owner, at the sole cost of the possible support, in a structured form and in such a form which can be read a data calculator, as well as in a format which is commonly used by an electronic device;
- the right to lodge a complaint with the Supervisory Authority (Garante Privacy – www.garanteprivacy.it);
- as well as, more in general, exercise all the rights that are recognized by the current provisions of the law.
Requests should be addressed to the data controller.
Where data is processed on the basis of the legitimate interests of the company, the rights of the data subjects are however guaranteed (with the exception of the right to portability that is not provided for by the regulations), particularly the right to object to the processing which can be exercised by sending a request to the data controller.
8) Data Controller
The data controller in accordance with the laws in force is Karuna Catering di Katya Waldboth, who can be contacted through the CONTACTS section.