1. Introduction
This information describes in detail how the personal data of users who access or use the website is collected, used, stored and protected. The aim is to ensure maximum transparency regarding processing activities carried out in compliance with the Regulation (EU) 2016/679 (GDPR) and other applicable regulations.
2. Data controller
The subject that determines the purposes and methods of processing personal data is TANAs.r.l., based in Viale Spartaco Lavagnini 20, 50129 Florence. For any request relating to the protection of personal data you can contact the Data Controller at email booking@trattoria-latana.com.
3. Types of processed data
Identification data, contact data, technical navigation data, information on the device used, data generated by the interaction with the site and information collected through cookies or similar technologies can be collected. In certain cases, the name, surname, telephone number and email address provided directly by the data subject may be collected.
4. Collection mode
The data can be acquired directly by the user through the compilation of electronic modules or automatically during navigation through technical systems necessary for the operation of the site and the integrated services.
5. Nature of bestowal
Where specified, the provision of data is a necessary requirement for the provision of certain services. Any failure to communicate the requested information may prevent the correct execution of the activities requested by the user.
6. Purpose of treatment
Personal data are processed to allow the management of the site, the provision of the requested services, the response to communications and requests, the fulfillment of regulatory obligations, the prevention of abuse and fraudulent activity, the protection of the rights of the Owner and the integration with third-party services.
7. Legal basis
The processing is carried out on the basis of the consent of the data subject, the execution of contractual or pre-contractual obligations, the fulfillment of legal obligations, the pursuit of legitimate interests of the Data Controller or of other legal bases provided for by the applicable legislation.
8. Safety measures
The Data Controller adopts appropriate technical and organizational measures in order to ensure a level of safety proportional to the risks associated with the processing. These measures aim to prevent unauthorized access, accidental loss, alteration, undue disclosure or unlawful use of data.
9. Subjects authorized for treatment
Data may be processed by duly authorized and educated internal personnel, as well as by external entities operating on behalf of the Data Controller as processors or service providers.
10. Transfer of data
If necessary, personal data may be transferred to countries other than that of residence of the data subject. These transfers will be carried out in compliance with the guarantees provided by the GDPR and the applicable regulations.
11. Data retention
The personal data are stored for the time necessary for the pursuit of the purposes that have justified the collection, except for periods of longer storage required by law obligations, defensive requirements or valid consent.
12. Facebook account and third party services
The site can allow connection with external services, including Facebook accounts. In the event of user authorization, profile data, account identifiers, email addresses and further information made available by the user may be collected.
13. Built-in content
Some sections of the site can display content hosted by third parties, including maps, fonts and multimedia tools. Such subjects may collect technical data relating to user interaction with embedded content.
14. Cookies and tracking tools
The site uses technical cookies and other tracking tools to allow the operation of the features offered, improve user experience, collect statistics and manage integrated services.
15. Rights of interested parties
The data subject may exercise the rights provided for in Articles 15 and below of the GDPR, including access, rectification, cancellation, restriction of processing, opposition, portability of data and revocation of consent.
16. Right of opposition
If the processing is based on the legitimate interest or public interest, the data subject may object for reasons related to his/her particular situation, except for the prevalence of legitimate reasons born of the Data Controller.
17. Right of complaint
Without prejudice to the right of the person concerned to lodge a complaint with the competent supervisory authority or to direct the competent judicial authorities.
18. Users resident in Switzerland
The rights and guarantees provided by the Federal Data Protection Act apply to users subject to Swiss law.
19. US residents
Users residing in the United States shall, where relevant, apply the provisions laid down by state privacy laws, including the safeguards relating to access, correction and deletion of personal information.
20. Defense in judgment
Personal data may be used to ascertain, exercise or defend a right in court or in the activities prepared for a possible procedure.
21. System and maintenance logs
Technical information relating to the use of the site can be recorded for operational and security needs, including IP addresses, access recordings and system events.
22. Additional information
Additional information may be provided for specific services or treatments that supplement this information and govern particular aspects of the treatment.
23. Information updates
The Data Controller reserves the right to modify or supplement this document at any time. Up-to-date versions will be made available through the channels considered appropriate.
24. Definitions
Personal data means any information relating to an identified or identifiable natural person. By processing you mean any operation on your personal data. Cookies and tracking tools mean the technologies used to collect information about the use of the site.
This section has been reviewed to simplify its formulation, while maintaining its legal and informative meaning, and to make it in accordance with the principles of transparency and responsibility provided by European data protection legislation.
For more details, please consult the page at the link below.
