Privacy Policy

INFORMATION ON CUSTOMER PERSONAL DATA PROCESSING
(Privacy Policy)
Art. 13 European Regulation No.2016/679 GDPR

Why this information
Dear Customer,
this Privacy policy describes how to manage the website of Our Company Arnolfo Ristorante S.r.l. in relation to personal data processed by browsing this site.
The privacy policy is provided pursuant to Art. 13 European Regulation No.2016/679 GDPR, Art. 13 D.Lgs. 196/03 and D.Lgs. 101/18 and the Privacy Authority Provision “Identification of simplified procedures for disclosure and “acquisition of consent for the use of cookies May 8, 2014 “. The information is provided only for the website of the Individual Company Il Cellese di Sardelli Sergio and not for other external websites, possibly consulted by the user through links.

The Data Controller
The Data Controller is Arnolfo Ristornate Srl, Via XX Settembre 50-52/A, 53034 Colle Val d’Elsa (SI), P.IVA 00899270524
Mail: arnolfo@arnolfo.com

Types of Data collected
Among the types of Personal Data that this Application collects, by itself or through third parties, there are: Usage Data; Cookies; name, surname, email address.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application. Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service. Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.

Additional categories of data
This is all the personal data provided by the visitor through the site, for example, by registering and / or accessing a reserved area and / or a service and writing to an Arnolfo Ristorante e-mail address to request information.

Place of data processing
The Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located. For table reservation, the data will be transmitted to the Superb reservation software (read here the privacy policy here). Depending on the User’s location, data transfers may involve transferring the User’s Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data. No data deriving from the web service make known, except in cases expressly provided for by law. The personal data provided by users are used only to perform the service or provision requested and expressed for the purpose of processing and are disclosed to third parties only if this is necessary for this purpose and, if necessary, after obtaining the consent of user.

Purpose of data processing
Your data will be processed to:
– detect the experience of using our web services, as well as the products and services we offer, as well as ensure the proper functioning of the web pages and their contents. The treatments put in place for these purposes are
based on a legitimate interest of the Data Controller, and do not require specific consent from the interested party.
-to answer to your purchase requests and / or the information you could do using the e-mail address or forms for entering data on the website; this entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
– to make reservations for our restaurant and our accommodations.
– to follow up the specific requests addressed to the Data Controller by the User through the Website and its communication tools (contact form, information request forms and similar).
– to respond to your request to work with us.

Data processing procedures
Data processing will be carried out through instruments and procedures designed to ensure safety and confidentiality, both in paper and electronically. These data will be processed by the company’s authorized staff, also using electronic instruments, and as well as trusted third parties who are officially helping us to provide the aforementioned products and services (law firm, lawyer, business consultants). In addition, your data may be disclosed to individuals, public and private, who may access these data under statutory or regulatory provisions and within the limits imposed by these standards.

Data transfer outside the EU
No data is transferred outside the borders of the EU.

Retention time
The data will be kept for the time necessary for the fulfillment of legal obligations with respect to the purposes of the processing. When the aforementioned legal obligations no longer exist, your data will be deleted or anonymised.
Therefore:
– Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
– User data registered on a portal / website: the data will be stored until you request the deletion of your profile. The cancellation request must be received from the email address provided during registration;
– Curriculum Vitae: for 12 months from receipt.

Rights of Users
You may exercise at any time, pursuant to Art. 7 of Legislative Decree No. 196/2003 and articles 15 to 22 of EU Regulation No. 2016/679, the right to:
a) obtain confirmation as to whether or not personal data concerning him/her exist;
b) obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data has been or will be communicated and, where possible, the retention period;
c) request rectification and erasure of personal data;
d) request restriction of processing;
e) data portability, i.e. to receive personal data from data controller in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance;
f) oppose processing at any time, even for direct marketing purposes;
g) object to an exclusively automated decision-making process on individuals, including profiling;
h) ask the Data Controller to have access and rectify or delete personal data or to limit data processing concerning data subject, or to oppose data processing, besides the right to data portability;
i) withdraw consent at any time, without affecting the lawfulness of any processing based on consent given prior to revocation;
j) file a complaint with a supervisory authority.
You can exercise your rights by sending a written request to Data Controller, to the registered office address: Via XX Settembre 50-52/A, 53034 Colle Val d’Elsa (SI), Italy, or to the email address: arnolfo@arnolfo.com