Privacy

The controller is TRATTORIA AL TORCIO S.N.C. di Crivellaro Devis & C., identified above. This notice covers browsing altorciobb.it and communications sent to the published contact details. For further processing connected with a stay, the controller provides the relevant information when collecting the data.

There are no enquiry forms, personal accounts, newsletters or online payments. Contact information is provided directly by you; technical data is generated when you browse.

Browsing and security: the systems delivering the website receive data such as your IP address, requested resources, date and time, browser and request outcome. Processing, including any technical logs, serves to deliver pages, diagnose problems and prevent abuse. The legal basis is the legitimate interest in operating and securing the service (Article 6(1)(f) GDPR).

Availability and service enquiries: names, contact details and the content of telephone, email, certified email or WhatsApp communications are used to respond and handle pre-contractual or contractual requests (Article 6(1)(b)). Other correspondence is based on the legitimate interest in responding to enquiries (point (f)).

Obligations and legal claims: data needed to comply with applicable obligations, including data subject requests, is processed under Article 6(1)(c). Establishing, exercising or defending legal claims is based on the controller’s legitimate interests (point (f)).

Providing your data is optional. Without contact details or essential information, we may be unable to reply or handle your request. Technical data needed to deliver pages is necessary to use the website. Please do not send special category data or information unrelated to your enquiry.

Data is processed electronically and, where necessary, on paper, with access restricted to authorised people and the stated purposes. The website does not carry out profiling or solely automated decisions with legal or similarly significant effects.

Enquiries and correspondence: for the time needed to complete the response and any follow-up requested by you. If a contractual relationship results, the relevant documents are subject to the retention obligations applicable to that relationship.

Technical data: for a period proportionate to the operational and security checks that justify its collection. In the event of incidents, disputes or requests from authorities, relevant data may be retained for the time needed for the associated investigations.

Records subject to legal obligations and data subject requests: for the applicable periods and to document compliance. Retention for legal proceedings is limited to the necessary data and periods connected with the dispute. Once these purposes end, data must be deleted or anonymised.

Data may be accessed by people authorised by the controller and providers of hosting, email, certified email, maintenance and support, within the scope of their work. When processing on the controller’s behalf, they act as processors under Article 28 GDPR; other parties may act as independent controllers for their own activities.

Data may be disclosed to advisers and authorities where needed for legal obligations or legal claims. It is not intended for public disclosure. You may ask the controller about the recipients processing your data.

The ordinary email address uses Gmail. Email services or other providers may involve processing outside the European Economic Area. Transfers are subject to Chapter V GDPR: adequacy decisions or appropriate safeguards, such as standard contractual clauses, depending on the service and recipient.

Google describes data processing on servers around the world, applicable transfer mechanisms and how to obtain information about safeguards in its privacy policy and transfer frameworks linked below. You may contact the controller for information about safeguards for data processed on its behalf and obtain a copy where applicable.

The pages do not integrate Google Analytics, advertising pixels, profiling systems or embedded Google Maps content. The website does not save browsing preferences or profiling identifiers in your browser. Any strictly technical service cookies are used only for necessary functions; these cookies do not require consent under Article 122 of the Italian Privacy Code.

Google Maps and directions open only through links to an external service; Google content is not loaded within this website. If you choose to open it, Google processes data about your visit to its service, including your IP address, according to its policy and your settings. For EEA users, Google identifies Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as controller of user data, subject to the exceptions described in its policy.

WhatsApp and other external links follow the same principle: processing on the destination website is explained in its own notice. Al Torcio’s address and written directions remain available without opening external services. You can manage or delete cookies in your browser settings.

Subject to Articles 15–22 GDPR, you may request access, rectification, erasure, restriction and portability of your data. You may object at any time to processing based on legitimate interests on grounds relating to your particular situation. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Send your request using the controller’s contact details on this page. A response must be provided without undue delay and normally within one month. Any extension, of up to two further months under Article 12 GDPR, must be communicated within the first month together with the reasons. Proportionate information may be requested to verify your identity where necessary.

You may lodge a complaint with the Italian Data Protection Authority or the competent authority in the country of your habitual residence, place of work or alleged infringement (Article 77 GDPR), and seek a judicial remedy. An official link about exercising rights and lodging complaints is provided below.