In accordance with the aforementioned legislation, the processing of data will be based on the principles of fairness, lawfulness, and transparency, as well as the protection of your privacy and your rights.
Ristorante Il Giardinetto, operated by LA GARDATA S.r.l.—with its registered office at Piazza Garibaldi 10, 23826 Mandello del Lario (LC); Tax ID/VAT no. 03463810139; R.E.A. (Economic and Administrative Index) no. LC317468—acting as the Data Controller, informs you, pursuant to Articles 13 and 14 of the GDPR (Regulation 2016/679), that your data will be processed in the manner and for the purposes described below:
The Data Controller processes personal, identifying, and non-sensitive data (specifically: first name, surname, tax code, VAT number—if applicable—, email address, and telephone/mobile phone number; hereinafter referred to as “personal data” or simply “data”) that have been provided to them.
Personal data will be processed solely for the purpose of internal management of table reservations. No sensitive data will be collected.
Your personal data may also be transferred, solely for the purposes stated above, to the following countries:
- EU countries.
The processing of your data is based on your consent and is also carried out for the following purposes:
Providing the Mandatory Data is necessary for Ristorante Il Giardinetto to process the user's request and to fulfill related legal, administrative, accounting, and tax obligations. Failure to provide such data will make it impossible to establish and/or proceed with the relationship.
- to enable the sending of newsletters and/or communications via mailing lists, as well as the distribution of circulars, the organization of events, and the provision of any other services requested;
- to fulfill pre-contractual, contractual, and tax obligations (such as VAT registration, etc.) arising from existing relationships;
- to comply with obligations established by law, regulations, EU legislation, or orders from an authority;
- to exercise the rights of the Data Controller, for example, the right to legal defense in court.
The processing of personal data is carried out by means of the operations indicated in Art. 4 of the GDPR 2016/679 and Art. 4, point 2) of the GDPR—namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data. Consequently, personal data are subject to both paper-based and electronic and/or automated processing.
The data may be made accessible for the purposes referred to in Articles 2.A) and 2.B) to:
- employees and collaborators of the company LA GARDATA S.r.l. — of which the Data Controller is a member — in their capacity as persons authorized to process data, internal data processors, and/or system administrators;
- the company LA GARDATA S.r.l. — of which the Data Controller is a member — (for example, for activities such as supporting the feasibility study for a client’s project, providing technical project management, or storing personal data, etc.).
Without express consent (Art. 6, letters b) and c) of the GDPR), the Data Controller may still disclose data for the purposes referred to in Art. 2.A) to supervisory bodies, judicial authorities, and any other entities to whom such disclosure is required by law for the fulfillment of said purposes. Your data will not be disseminated.
Personal data will be managed and stored on servers located at the premises of the Data Controller and/or the Data Processor.
The data will not be transferred outside the European Union. It is understood, however, that the Data Controller reserves the right to change the server location should the need arise. In such an event, the Data Controller guarantees that any data transfer will be carried out in compliance with legal requirements.
Please be advised that, in light of the purposes of the processing described above, the provision of data is mandatory; failure to provide such data, or providing incomplete or inaccurate data, may result in the inability to complete the registration process, which is required in order to place orders.
As a data subject, you are granted the rights set forth in Article 15 of the GDPR, specifically the right to:
obtain confirmation as to whether or not personal data concerning you exist—even if not yet recorded—and to have such data communicated to you in an intelligible form;
obtain information regarding:
- the origin of the personal data;
- the purposes and methods of the processing;
- the logic applied in the event that processing is carried out using electronic tools;
- the identification details of the data controller, the data processors, and the representative designated pursuant to Article 3, paragraph 1, of the GDPR (Regulation 2016/679);
- the entities or categories of entities to whom the personal data may be communicated, or who may become aware of such data in their capacity as designated representatives within the territory of the State, as data processors, or as persons in charge of processing;
obtain:
the updating, rectification, or, where necessary, the supplementation of the data;
the erasure, anonymization, or blocking of data processed in violation of the law, including data whose retention is not necessary for the purposes for which they were collected or subsequently processed;
confirmation that the operations referred to in the points above—including their content—have been brought to the attention of those to whom the data were communicated or disseminated, unless this proves impossible or involves a disproportionate effort compared to the right being protected;
object, in whole or in part:
on legitimate grounds, to the processing of personal data, if such data are not relevant to the purpose for which they were collected. ...to the processing of personal data for the purpose of sending advertising material via automated calling systems (without human intervention), email, and/or traditional marketing methods, such as telephone calls and/or postal mail. Please note that the data subject’s right to object—as described in point (b) above—regarding direct marketing via automated means also extends to traditional marketing methods. In any case, the data subject retains the right to exercise their right to object, either in whole or in part. The data subject may choose to receive communications only via traditional methods, only via automated means, or not to receive any such communications at all.
Where applicable, you have the rights set forth in Articles 16–21 of the GDPR (right to rectification, right to erasure/“right to be forgotten,” right to restriction of processing, right to data portability, and right to object), as well as the right to lodge a complaint with the relevant Data Protection Authority.
You may exercise your rights at any time by sending a document via:
- registered mail with return receipt to LA GARDATA S.r.l., located at Piazza Garibaldi 10, 23826 Mandello del Lario (LC), or by email to info@ristoranteilgiardinetto.it
Personal data is retained for the entire duration of the relationship with Ristorante Il Giardinetto, as well as in the event of a withdrawal of consent and/or any other form of termination of the relationship.
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and, in any case, for no longer than 10 years following the termination of the relationship.
The Data Controller is Ristorante Il Giardinetto/LA GARDATA S.r.l.
An updated list of data processors and persons in charge of data processing is kept at the Data Controller’s registered office.
Should you have any doubts or concerns regarding the use of cookies, you can always take action to prevent them from being set or read—for example, by adjusting the privacy settings in your browser to block certain types of cookies.
Since each browser—and often different versions of the same browser—can differ significantly from one another, if you prefer to manage settings independently via your browser’s preferences, you can find detailed instructions on the necessary steps in your browser’s help documentation. For an overview of how to do this in the most common browsers, you can visit www.cookiepedia.co.uk.
Advertising companies also allow you to opt out of receiving targeted ads, if you wish. This does not prevent cookies from being set, but it stops these companies from using and collecting certain data.
For more information and options to opt out, please visit www.youronlinechoices.eu/.
The Data Controller, pursuant to the law, is Ristorante Il Giardinetto/LA GARDATA S.r.l., located at Piazza Garibaldi 10, 23826 Mandello del Lario (LC), VAT no. 03463810139, Tel. +39 0341 23826, info@ristoranteilgiardinetto.it
