Privacy Policy
(Version of 06/29/2023)
Dear User,
on May 25, 2018, the General Data Protection Regulation No. 2016/679 (GDPR) became applicable.
We are committed to collecting and processing your data in compliance with the GDPR and therefore wish to inform you of the following.
This Privacy Policy refers to:
to this website
to the Facebook page DaGorini Ristorante
to the Instagram profile dagoriniristorante.
Data Controller.
The Data Controller is Alta Romagna s.r.l., 47021 Bagno di Romagna (FC), via Verdi 5, loc. San Piero in Bagno, P. IVA04321780407.
The Data Controller can be contacted by e-mail at info@dagorini.it.
Co-processing co-ownership with regard to the Facebook page and Instagram profile
Facebook and Instagram make Insights, i.e., aggregate statistics, created by certain events recorded by Facebook and Instagram servers when people interact with pages or profiles and their associated content, such as by liking or removing them or leaving a comment, available to page and profile administrators.
The categories of recorded events are determined solely by Facebook or Instagram and cannot be configured or changed by administrators of pages or profiles. Administrators also do not have access to users’ personal data but only to statistical data.
Insights are processed by the administrator for the purpose of deriving information about how people interact with the page or profile and associated content and determining the appropriateness of the content posted (legal basis: legitimate interest).
Regarding the Insights of the Facebook page and Instagram profile, the joint data controllers are:
Alta Romagna s.r.l., 47021 Bagno di Romagna (FC), via Verdi 5, loc. San Piero in Bagno, P. IVA04321780407; and
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
More information can be found in the Appendix on the data controller for Insights of the Facebook page at the following link
https://www.facebook.com/legal/terms/page_controller_addendum.
You can also view the Facebook and Instagram Privacy Policy at the following links:
https://www.facebook.com/privacy/policy?section_id=13-HowToContactMeta
https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer.
Categories of data collected
We collect and process data in accordance with the principle of minimization and therefore we ask you to provide only the data that are indispensable for the pursuit of the purposes of processing.
The data you voluntarily provide are those:
entered in the newsletter subscription form (first name, last name and email address);
entered in the Gift Dinner form (first name, email address, phone number, gift recipient names,…);
entered in the Book form (first name, last name, email address, phone number,…);
displayed when the user interacts with the Facebook page or Instagram profile (first name, last name, …) or voluntarily provided by the user through messages posted or sent privately.
We automatically collect your IP address and browsing data using cookies and similar technologies to analyze the use and effectiveness of our services, secure our website, improve your experience on our website, and provide additional services at your request.
In addition, the newsletter delivery platform allows the Data Controller to know the number of readers, message opens and clicks made, devices and operating systems used, and details of individual user activity.
For more information see our Cookie Policy.
Purpose and legal basis for processing
Data collected through the newsletter subscription form are processed in order to add the user to the mailing list and allow him/her to receive the newsletter (legal basis: consent).
Data collected through the Gift a Dinner form are processed in order to prepare, head and issue the gift voucher (legal basis: execution of a contract to which the data subject is a party or execution of pre-contractual measures taken at the request of the data subject).
Data collected through the Booking form are processed in order to check the availability of tables on the selected dates and times, make reservations, enter the user on the waiting list, and communicate with the user in connection with the reservation (legal basis: execution of a contract to which the data subject is a party or execution of pre-contractual measures taken at the request of the data subject). Data related to intolerances or allergies are processed in order to adapt the menu to the user’s needs (legal basis: consent).
Data provided through the facebook page and Instagram profile are processed in order to communicate with users, respond to requests, perform moderation of the page, conduct audience analysis of the page and profile, determine the appropriateness of published content, and prevent unlawful activities (legal basis: legitimate interest).
The data will be processed in order to comply with any legal obligations (including tax, accounting and administrative obligations), national and EU regulations and orders issued by judicial or administrative authorities (legal basis: fulfillment of a legal obligation to which the Data Controller is subject).
We may also process your data in order to assert or defend in court a right of the Controller and handle any claims or litigation (legal basis: legitimate interest).
Methods of processing
Data will be processed by manual/paper or computer/telematic means by the Data Controller or by authorized personnel (data processors) who will operate in accordance with this Privacy Policy.
Consequences of not providing personal data
The provision of your personal data is optional, however, in the absence of the data marked as “mandatory” in the forms on the site, it will not be possible to provide the requested service.
Comunicazione dei dati
I dati non sono soggetti a diffusione a destinatari indeterminati e potranno essere comunicati a persone fisiche o giuridiche di cui il Titolare si avvale per lo svolgimento di attività connesse con l’erogazione del servizio, come la società o il professionista che gestisce il sito web (limitatamente agli accessi tecnici per esigenze di manutenzione e gestione del web server) e società o professionisti che forniscono servizi amministrativi, contabili, fiscali, legali, di marketing o attività di consulenza, personale di sala e di cucina.
I dati inseriti nel form Prenota vengono, inoltre, trattati tramite il software CoverManager, la cui Privacy Policy è consultabile al seguente indirizzo: https://www.covermanager.com/privacy-policy
I dati potranno essere comunicati a Pubbliche Amministrazioni e istituti di credito nei casi in cui la comunicazione sia obbligatoria per legge o in forza di altre normative.
Eventuali trasferimenti di dati al di fuori dell’Unione Europea verranno effettuati a condizione che il destinatario rispetti le disposizioni del GDPR in base ad una decisione di adeguatezza o alla sottoscrizione di clausole contrattuali standard di protezione dei dati personali approvate dalla Commissione Europea.
Data retention
The data will be kept at the headquarters of the Data Controller and at the headquarters of the external provider for the time strictly necessary to achieve the above-mentioned purposes, and after this period the data will be deleted or transformed into anonymous form.
The data retention period is determined in consideration of the purposes of the processing and therefore:
the data collected in order to add the user to the mailing list and allow him to receive the newsletter will be kept for the entire period of subscription to the newsletter and until consent is revoked;
the data collected in order to conclude and execute the sales contract and carry out the activities instrumental to the same will be kept for the time necessary to carry out these activities, after which they may be kept for tax, accounting and administrative purposes;
data related to intolerances or allergies will be kept for the time necessary to provide the requested service;
data collected for the purpose of fulfilling legal obligations, community regulations or orders issued by judicial or administrative authorities will be kept for the time established by the specific laws or community regulations or orders to which the Data Controller is subject. Regarding processing for tax, accounting and administrative purposes, the law establishes the obligation to retain for ten years;
data collected for the purpose of preventing or prosecuting unlawful conduct and protecting our rights will be retained for the duration of the litigation and any legal proceedings and until the expiration of the statute of limitations and limitation periods.
Rights of the data subject
As a data subject, you are guaranteed all the rights set forth in Articles 15-22 of the GDPR, including:
- the right to obtain from the data controller confirmation as to whether or not personal data concerning you are being processed and to obtain access to such data (right of access);
- the right to obtain from the data controller the rectification of inaccurate personal data and the integration of incomplete personal data (right of rectification);
- the right to obtain from the data controller the erasure of data concerning you, upon the occurrence of one of the conditions set out in Article 17(1) of the GDPR and subject to the exceptions set out in paragraph 3 of the same article (right to be forgotten);
- the right to obtain from the data controller the restriction of processing upon the occurrence of one of the cases indicated in Article 18(1) of the GDPR;
- the right to receive from the data controller data concerning you in a structured, commonly used and machine-readable format, including for the purpose of transmitting such data to another data controller (right to personal data portability);
- The right to object to the processing of personal data concerning you and in particular the right to object to processing carried out for direct marketing purposes;
- The right to withdraw consent to processing, limited to cases where processing is based on your consent. However, processing based on consent and carried out prior to revocation of consent retains its lawfulness;
- the right to lodge a complaint with the Data Protection Authority, without prejudice to any other administrative and jurisdictional recourse.
You may, at any time, exercise your rights by contacting the Data Controller at the addresses