PRIVACY POLICY

This information governs the processing of personal data carried out by the owner, defined below, of this website, the information indicated here may also be provided orally, provided that the identity of the applicant is proven, by means of a telephone request addressed to the addresses of the owner.

1. Identity and contact details of the data controller

The data controller is:

Ristorante Perbacco di Marco Bracciali
Via della Ghiacciaia, 3/1
52020 Loc. Pieve a Presciano – Pergine Valdarno (AR)
P.IVA 01744070515
Tel. +39 0575 897049
Cell. +39 331 9798674
E-mail: info@perbacco-ristorante.it
Since the Owner is established / resident in the Italian territory, no representative has been appointed.

2. Contact details of the data protection officer

The Data Controller has not appointed a data protection officer.

3. Processing methods and INFORMATION ON THE USE OF COOKIES

3.1 Cookies and environmental data

What are cookies?

Cookies are small text files that are saved by a site on the computer (or tablet, or smartphone) of those who visit it; access the web server to store information on the client (the browser) to be reused during the same visit to the site (session cookies) or later (persistent cookies). Thanks to cookies, the site remembers the actions and preferences of the user (e.g. login, language, display settings) so it is not necessary to re-enter them during navigation or during subsequent visits to the site.
Grazie ai cookie il sito ricorda le azioni e preferenze dell’utente (es. login, lingua, impostazioni di visualizzazione) in modo non sia necessario reinserirle durante la navigazione o durante visite successive al sito.

Types of cookies

According to the different purposes of use, cookies can be divided into: • technical cookies: they allow the proper functioning of some sections of the site. They are divided into session cookies (they are destroyed when the browser is closed) and persistent cookies (they are not destroyed when the browser is closed, but persist up to a certain established time limit). According to current legislation, direct consent from the user is not required in case of use of cookies of this type; therefore, the presentation of short information (banner) is not required on the first visit to any page of the site. • profiling cookies: used to track the user's navigation and create profiles on his tastes and habits, both by the visited site ("first party") and by other services ("third party")

Third party cookies

The management of the information collected by "third party" cookies is governed by the relevant information to which you are kindly requested to refer. To ensure greater transparency and convenience, the web addresses of the various information and methods for managing cookies are shown below. Google+ (information): http://www.google.it/intl/it/ policies / technologies / cookies /
Google+ (configuration): http://www.google.it/intl/it/policies/technologies/managing/
Facebook (information): https: //www.facebook. com / help / cookies
Vimeo (information): https://vimeo.com/cookie_policy

Google Analytics
This site also contains certain components transmitted by Google Analytics, a web traffic analysis service provided by Google, Inc. ("Google"). Also in this case these are third-party cookies collected and managed anonymously to monitor and improve the performance of the host site (performance cookies).

Google Analytics uses "cookies" to anonymously collect and analyze information on site usage behavior (including the user's IP address). This information is collected by Google Analytics, which processes it in order to draw up reports on the activities on the website itself. This site does not use (and does not allow third parties to use) the Google analysis tool to monitor or collect personal identification information. Google does not associate the IP address with any other data held by Google nor does it try to connect an IP address with the identity of a user. Google may also communicate this information to third parties where this is required by law or where such third parties process the aforementioned information on behalf of Google.

For more information, please refer to the link below:
https://www.google.it/policies/privacy/partners/

The user can selectively disable the action of Google Analytics by installing the opt-out component provided by Google on their browser. To disable the action of Google Analytics, please refer to the link below:
https://tools.google.com/dlpage/gaoptout

User management of cookies

The user can decide whether or not to accept cookies using the settings on their browser

The complete navigation of the site is possible even after the total disabling of cookies.

The setting can be defined specifically for the different websites and web applications. Furthermore, the most popular browsers allow you to define different settings even for the various types of cookies.

Example: in Firefox, through the Tools -> Options -> Privacy menu, it is possible to access a control panel where it is possible to define whether or not to accept the different types of cookies and / or proceed with their removal.

Information relating to the various browsers can be accessed through the following links:
Firefox
Chrome
Internet Explorer
Safari
Opera

Browsing without the use of technical and profiling cookies is also possible without changing the settings relating to them, by activating the so-called incognito browsing present in all major browsers.

3.2 Data provided voluntarily by the interested party

The data optionally and freely provided by the interested party by sending e-mails to the addresses on the site may be acquired for the purposes indicated from time to time.
In particular, in addition to the email address necessary to reply to the sender, any other personal data contained in the relative communication will be processed.
These data collected in this way will be stored and processed exclusively for the purpose of preserving correspondence and will not be used for other purposes.

4. Purpose of the processing and legal basis of the processing

In relation to the technical cookies referred to in point 3.1 and the navigation data, the processing of the personal data of the interested party is carried out in order to allow the correct use of the website; its use is necessary for browsing the website www.perbacco-ristorante.it. In this case, the legitimate interest of the Data Controller constitutes the legal basis of the processing. In relation to non-technical cookies, the processing of personal data carried out through them allows us to offer a personalized browsing experience through profiling. In the latter case, the consent of the interested party, expressed in accordance with current legislation, constitutes the legal basis.
In relation to the data provided voluntarily by e-mail, the processing of personal data carried out allows us to respond to the requests of the interested parties. The legitimate interest of the Data Controller to respond to the interested parties constitutes the legal basis of the processing.

5. Automated decision making and profiling

If you have given your consent to the processing of personal data for profiling purposes using cookies, they may be subject to an automated decision-making process, using a specific algorithm that will decide which communications are best suited to your profile or which they could be of greater interest to you.
The processing carried out in this way has, as an example, the sending of highly profiled commercial communications. In any case, you have the right to obtain human intervention in the decision-making process by the Data Controller, to express your opinion, to obtain an explanation of the decision made and to contest the decision itself.

6. Methods of expressing consent

Consent to the processing of personal data using non-technical cookies can be expressed:
By clicking on a specific box presented in a banner or checkbox.

7. Source from which the personal data originate

Only the data provided by the interested party will be processed in accordance with this information, collected through the website or by sending an email from the interested party.
Data from sources accessible to the public will not be processed.

8. Recipients and any categories of recipients of personal data

The recipients of the personal data of the interested party may be:
Communication companies that carry out commercial communication and profiling activities on behalf of the Data Controller and those that offer management services of online platforms, if the relative consent, which hold the qualification of data processors;
Companies that offer information society services, including, in particular, those that offer hosting services;
Companies that carry out statistical surveys and market, if the relative consent has been expressed;

9. Categories of data

The personal data of the interested party will be processed.

10. Transfer of data

The Data Controller intends to transfer personal data to a third country or to an international organization. These subjects could be represented, by way of example, by:
The communications companies that carry out communication activities on behalf of the Data Controller;
The companies that offer information society services, including, in particular, those that offer hosting services;
The companies that manage the site on behalf of the Data Controller;
Service providers of the communication company.
The transfer of personal data to such subjects, if established in a third country or an international organization, is carried out in the presence of an adequacy decision of the European Commission, which has verified how the third country, the territory or one or more specific sectors within the third country, or the international organization in question guarantee a adequate level of protection of your rights. In any case, the Data Controller - if he deems it appropriate in any case - reserves the right to conclude specific separate agreements that oblige these subjects to adopt adequate security measures, including organizational ones, aimed at offering appropriate guarantees regarding their rights. Google Inc., in particular, is contractually bound to ensure appropriate protection of the rights of the data subject. The data may thus be transferred to the following countries: Italy, United States of America. To obtain a copy of such data or the place where it was made available, simply send the relevant request to the address: info@perbacco-ristorante.it

11. Retention period of personal data

The personal data processed and stored in order to allow correct use of the website are processed and stored for a period not exceeding 12 months starting from the date of the individual collection. The Data Controller reserves the right, in any case, to request the interested party to renew his consent to the processing and / or to verify the consents already expressed.

12. Optional nature of consent and consequences of non-consent

In relation to personal data processed through technical cookies in order to allow correct use of the website, the communication of personal data is not a contractual obligation, but is based on the legitimate interest of the Data Controller, as without this processing the fully functional website could not be made available.
Consent is to be considered optional in relation to non-technical cookies. In the latter case, failure to communicate such data will only make it impossible to provide a personalized service.
In relation to the data provided voluntarily via email, consent is to be considered optional. However, failure to communicate such data will make it impossible to respond to the interested parties.

13. Rights of the interested party

13.1 Right to object

The interested party has the right to object, at any time for reasons connected to his particular situation, to the processing of personal data concerning him, pursuant to article 6, paragraph 1, letters e) or f) of the GDPR, including the profiling on the basis of these provisions. The Data Controller refrains from further processing personal data unless he demonstrates the existence of compelling legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense. of a right in court.

13.2 Other rights

The Data Controller also intends to inform the data subject of the existence of the following rights:
Data subject's right of access: the data subject has the right to obtain from the Data Controller confirmation that a processing of personal data concerning him and in this case, to obtain access to personal data and specific information, in accordance with art. 15 of the GDPR;
Right of rectification: the interested party has the right to obtain from the Data Controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration, in accordance with art. 16 of the GDPR;
Right to cancel data, including the right to withdraw consent: the interested party has the right to obtain from the Data Controller the cancellation of personal data concerning him without undue delay and the Data Controller is obliged to delete personal data without undue delay, or to withdraw your consent, if the reasons defined by art. 17 of the GDPR. As regards the right of revocation, the interested party also has the right to revoke the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
Right to limitation of treatment: the interested party has the right to obtain from the Data Controller the limitation of the processing when the hypotheses defined by art. 18 of the GDPR;
- Right to data portability: the interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to the Data Controller and has the right to transmit such data to another holder without impediments by the holder in the cases and under the conditions specified by art. 20 of the GDPR.

14. Exercise of rights

The requests for exercising the rights indicated in this information, including, in particular, the right to cancellation and the right to revoke the consent given, must be addressed directly to the Owner at the email address info@perbacco-ristorante.it Alternatively, you can exercise your rights by sending the relevant communication by registered letter with return receipt to the address: Ristorante Perbacco di Marco Bracciali Via della Ghiacciaia, 3/1 52020 Loc. Pieve a Presciano – Pergine Valdarno (AR)

15. Accessibility of the information

The information is accessible at www.perbacco-ristorante.it/privacypolicy as well as from the owner. If expressly requested by the interested party, the information can also be provided orally, provided that the identity of the interested party is proven, by means of a telephone request addressed to the addresses of the Data Controller.

16. Privacy and newsletter

If the interested party has given his consent by means of a flag to receive commercial communications, the processing of his data may be carried out to send direct marketing communications, newsletters, sending advertising material, carrying out market research, by means of traditional contact systems and automated computer systems, including commercial or promotional communications by email or SMS; the consent of the interested party, expressed in accordance with this information, constitutes the legal basis. In this case, the communication of personal data is not a contractual obligation. The interested party has the right to provide personal data; in case of failure to communicate such data, however, it will not be possible to carry out any marketing activities. The personal data processed in this way are kept for a period not exceeding 24 months starting from the date of the individual collection.

17. Changes

The Data Controller may make changes to this Privacy Notice, also in order to implement changes in national and / or community legislation, to adapt to technological innovations or for other reasons. Any new versions of this Privacy Notice will be posted on the Site. The User is therefore invited to periodically check the Privacy Notice.

The document was updated on 25/05/2018 to comply with the relevant regulatory provisions.