Notice on the processing of personal data of website usersArticles 13 and 14 of Regulation 2016/679/EU (hereinafter also ‘GDPR’)
Why this notice. Ristorante Vintage di NAG&C di Alessio e Gaetano Agliano SNC (hereinafter also the ‘Company’ or ‘Owner’) is committed to respecting and protecting your privacy and wants you to feel safe both when you are simply browsing the website and when you decide to register by providing us with your personal data in order to take advantage of the services made available to its Users and/or Customers. On this page, the Company intends to provide some information on the processing of personal data relating to users visiting or consulting the website accessible by electronic means from the address ristorantevintage.it (the ‘Site’). This information is provided only for the Company’s website and not for any other websites that the user may consult through links (for which please refer to their respective privacy policies). The reproduction or use of pages, materials and information contained within the Site, by any means and in any medium, is not permitted without the prior written consent of Azienda. Copying and/or printing for personal and non-commercial use only is permitted (for enquiries and clarifications please contact Azienda at the contact details below). Other uses of the content, services and information on this site are not permitted.
With regard to the content offered and the information provided, the Company will endeavour to keep the contents of the Site reasonably up to date and reviewed, without offering any guarantee as to the adequacy, accuracy or completeness of the information provided and expressly disclaims any liability for any errors of omission in the information provided on the Site.
Origin – Navigation data. The Company informs you that the personal data provided by you and acquired at the time of your request for information and/or contact, site registration and use of services through smartphones or any other tool used to access the Internet, as well as the data necessary for the provision of such services, including navigation data and data used for the possible purchase of products and services offered by the Company, but also only the so-called ‘navigation’ data of the site by Users, will be processed in compliance with applicable regulations. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of the Internet. This is information that is not collected in order to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, make it possible to identify the navigating users. This category of data includes the ‘IP addresses’ or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the web server, the size of the file obtained in response, the numerical code indicating the status of the response given by the web server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check the correct functioning of the Company’s website. It should be noted that the aforementioned data could be used to ascertain responsibility in the event of computer crimes against the Azienda website or other sites connected or linked to it: except in this case, data on web contacts do not currently persist for more than a few days.
Origin – Data provided by the user. Company collects, stores and processes your personal data for the purpose of providing the products and services offered on the Site, or for legal obligations. In relation to some specific Services, Products, Promotions, etc. Company may also process your data for commercial purposes. In these cases, a specific, separate, optional and always revocable consent will be requested in the manner and at the addresses indicated below.
The optional, explicit and voluntary sending of e-mails to the addresses indicated in the relevant section of the Website, as well as the filling in of questionnaires (e.g. forms), communication via chat, push notification via APPs, social networks, call centres, etc., implies the subsequent acquisition of some of your personal data, including those collected through the use of Apps and related services, necessary to answer your requests. Please also note that when you use your mobile connection to access content and digital services offered directly by the Company or by our Partners, it may be necessary to transfer your personal data to such third parties. Please note that you may access the Site or connect to areas where you may be able to post information using blogs or message boards, communicate with others, e.g., from the Company page on Facebook, LinkedIn, YouTube, and other social networking sites, review products and offers, and post comments or content. Before interacting with these areas, please read the General Terms and Conditions of Use carefully, bearing in mind that, under certain circumstances, the information you post may be viewed by anyone with access to the Internet and any information you include in your postings may be read, collected, and used by third parties.
Purpose of processing and legal basis. Data are processed for the purposes: strictly related and necessary for registration to the website www.Azienda. it website, to the services and/or Apps developed or made available by Azienda, to the use of related information services, to the management of contact or information requests, to make purchases of products and services offered through the Azienda website; for ancillary activities related to the management of User/Customer requests and the sending of feedback that may include the transmission of promotional material for the completion of the purchase order of the products and services offered, including aspects relating to payment by credit card, the management of shipments, any exercise of the right of withdrawal provided for distance purchases, updating on the availability of products and services temporarily unavailable related to the fulfilment of obligations provided for by EU and national regulations, the protection of public order, the detection and prosecution of crimes; direct marketing, i.e. sending of advertising material, direct sales, market research or commercial communication of products and/or services offered by the Company; this activity may also concern products and services of Companies of the Company Group and be carried out by sending advertising/information/promotional material and/or invitations to participate in initiatives, events and offers aimed at rewarding users/customers, carried out by means of ‘traditional’ methods (e.g. paper mail and/or operator calls), or by means of ‘automated’ contact systems (e.g. SMS and/or MMS, telephone calls without operator intervention, e-mail, fax, interactive applications), pursuant to Article 130 c. 1 and 2 of Legislative Decree 196/03 as amended. The provision of data for the purposes referred to in points 1), 2) and 3), connected with a pre-contractual and/or contractual phase or functional to a request by the user or envisaged by a specific regulatory provision, is compulsory and, failing this, it will not be possible to receive the information and access any services requested; with regard to point 4) of this Information Notice, consent to the processing of data by the user/client is, on the other hand, free and optional and can always be revoked without any consequences on the usability of the products and services, except for the impossibility for the Company to keep users/clients updated on new initiatives or special promotions or benefits that may be available. The Company may send you commercial communications relating to products and/or services similar to those already provided, in accordance with Directive 2002/58/EU, using the email or paper addresses you have provided on these occasions, which you may oppose in the manner and at the addresses below.
Methods, processing logic, storage times and security measures. Processing is also carried out with the aid of electronic or automated means and is performed by the Company and/or by third parties that the Company may use to store, manage and transmit the data. The data processing will be carried out with the logic of organisation and elaboration of your personal data, also related to the logs originated from the access and use of the services made available via web, of the products and services used related to the above mentioned purposes and, in any case, in such a way as to guarantee the security and confidentiality of the data. The personal data processed will be retained for the periods of time prescribed by the legislation applicable at the time. Again with regard to data security, in the sections of the website set up for particular services, where personal data is requested from the user navigator, the data is encrypted using a security technology called Secure Sockets Layer, abbreviated to SSL. SSL technology encrypts the information before it is exchanged via the Internet between the user’s computer and the Company’s central systems, making it incomprehensible to unauthorised parties and thus guaranteeing the confidentiality of the information transmitted. In addition, transactions carried out using electronic payment instruments are carried out directly using the Payment Service Provider (PSP) platform and the Company only retains the minimum set of information necessary to manage any disputes. Precisely with reference to the aspects of personal data protection, the user/customer is invited, in accordance with article 33 of the GDPR, to notify Azienda of any circumstances or events that could give rise to a potential ‘personal data breach’ in order to allow for an immediate assessment and the adoption of any actions to counter such an event by sending a communication to privacy@Azienda.it or contacting Customer Service. The measures adopted by the Company do not exempt the Customer from paying the necessary attention to the use, where required, of passwords/PINs of adequate complexity, which he/she must update periodically, especially in the event that he/she has been hacked/known by third parties, as well as carefully guarding them and making them inaccessible to third parties, in order to avoid improper and unauthorised use.
Cookies. A cookie is a short string of text that is sent to your browser and possibly saved on your computer (or alternatively on your smartphone/tablet or whatever other device you use to access the Internet); this generally occurs every time you visit a website. The Company uses cookies for various purposes in order to provide you with a fast and secure digital experience, for example, by allowing you to maintain a connection to the secure area while browsing through the pages of the site. Cookies stored on your terminal device cannot be used to retrieve any data from your hard disk, transmit computer viruses or identify and use your e-mail address. Each cookie is unique to the browser and device you use to access the Website or use the Company App. Generally, the purpose of cookies is to improve the operation of the Website and your experience when using it, although cookies may be used to send you advertising messages (as set out below). For more information on what cookies are and how they work, you can consult the ‘All about cookies’ website http://www.allaboutcookies.org.
Areas of communication and data transfer. In order to achieve the purposes set out above, Azienda may communicate and have your personal data processed, in Italy and abroad, to third parties with whom we have dealings, where these third parties provide services at our request. We will only provide these third parties with the information necessary to perform the requested services taking all measures to protect your personal data. Data may be transferred outside the European Economic Area if this is necessary for the management of your contractual relationship. In this case, recipients of the data will be subject to protection and security obligations equivalent to those guaranteed by the Controller. In the case of the use of services offered directly by Partners, we will only provide the data strictly necessary for their performance. In any case, only the data necessary for the pursuit of the intended purposes will be disclosed and the guarantees applicable to data transfers to third countries will be applied where required. We may also disclose personal data to our commercial service providers, for marketing purposes, who are appointed as external data processors for this purpose. In addition, personal data may be disclosed to the competent public bodies and authorities for the purposes of fulfilling legal obligations or to ascertain responsibility in the event of computer crimes to the detriment of the website, as well as disclosed to, or allocated to, third parties (in their capacity as data processors or, in the case of providers of electronic communication services, as independent data controllers), who provide IT and telematic services (e.g. hosting services, website management and development services) and which the Company uses to perform tasks and activities of a technical and organisational nature that are also instrumental to the operation of the website. The subjects belonging to the above categories operate as separate Data Controllers or as Data Processors appointed for this purpose by the Company. Personal data may also be disclosed to employees/consultants of the Company who are specifically instructed and appointed as Data Processors.
The categories of recipients to whom the data may be disclosed are available by contacting Azienda at the addresses listed below.
Rights of the persons concerned. You may at any time exercise the rights granted to you by law, including the right to access your personal data, obtaining evidence of the purposes pursued by the Data Controller, the categories of data involved, the recipients to whom the data may be communicated, the applicable storage period, the existence of automated decision-making processes; to obtain without delay the rectification of inaccurate personal data concerning you to obtain, in the cases provided for, the deletion of your data; to obtain the limitation of the processing or to object to the same, when possible; to request the portability of the data that you have provided to Azienda, i.e. to receive them in a structured, commonly used and machine-readable format, also for the purpose of transmitting such data to another data controller, within the limits and constraints provided for by art. 20 of the GDPR; Furthermore, you may lodge a complaint with the Data Protection Authority pursuant to Article 77 of the GDPR. For the processing referred to in point 4) of the purposes, the Customer may always revoke consent and exercise the right to object to direct marketing (in ‘traditional’ and ‘automated’ form). The opposition, in the absence of any indication to the contrary, will refer to both traditional and automated communications.
Data Controller. The Data Controller, pursuant to Art. 4 of the GDPR, is NAG&C di Alessio e Gaetano Agliano SNC – P.IVA: 02602340818 – CF: 02602340818. The above-mentioned rights may be exercised upon request by the Data Subject in the manner made known by the Customer Service or on the Company’s website or by using the following references: Alessio Agliano. The use of the Website, including those intended for tablets and/or smartphones, by the Client and/or the User implies full knowledge and acceptance of the content and any indications included in this information notice published by the Company at the time the site is accessed. The Company informs you that this policy may be modified without prior notice and therefore recommends that you read it periodically.
The Data Controller. NAG&C di Alessio e Gaetano Agliano SNC
This privacy policy was updated on 20/09/2024