This Privacy Policy describes how Ristorante Pizzeria Corte Antica I’ Ciampa di Ciampalini Filippo e Renato snc ("Ristorante I' Ciampa", "we", "us") collects, uses, stores, and protects personal data when users visit our official website or utilize our online table reservation and contact services, in full compliance with the European General Data Protection Regulation (EU 2016/679 - "GDPR").
1. Data Controller
The Data Controller responsible for processing your personal data is:
Ristorante Pizzeria Corte Antica I’ Ciampa di Ciampalini Filippo e Renato snc
Registered Address: Via Chiarenti, 46 - 50050 - Montaione (FI) - Toscana, Italia
VAT ID: 01234567890
Privacy & Contact Email: info@iciampa.com
Phone: +39 0571 69552
2. Categories of Personal Data Collected
- Technical & Navigation Data: Standard web access logs, IP address, browser type, operating system, timestamp, and requested URIs processed in aggregated, anonymous form for technical maintenance and security monitoring.
- Data Voluntarily Provided: Name, phone number, email address, requested reservation date/time, number of guests, and special notes submitted through contact forms, WhatsApp quick reservation feature, or direct email messages.
- Cookies & Local Storage: Technical essential storage for website functionality and anonymized performance tracking. For detailed insights, please refer to our Cookie Policy.
3. Legal Bases and Purposes of Processing
| Processing Purpose | Legal Basis (GDPR) | Requirement |
|---|---|---|
| Table Reservations & Inquiries: Processing table booking requests submitted via WhatsApp or email, and answering customer questions. | Execution of pre-contractual or contractual measures requested by the user (Art. 6.1.b GDPR). | Required to fulfill your request. |
| Legal & Accounting Obligations: Issuing receipts, invoices, and fulfilling mandatory statutory record-keeping. | Compliance with a legal obligation (Art. 6.1.c GDPR). | Mandatory by law. |
| Website Security: Protecting server infrastructure against cyberattacks, fraudulent activity, or technical disruptions. | Legitimate interest of the Data Controller (Art. 6.1.f GDPR). | Automated technical logging. |
4. Data Retention Period
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected:
- Reservation & Contact Data: Retained for the time needed to process your inquiry or reservation, and subsequently kept for up to 10 years when required under Italian tax and accounting regulations.
- Navigation Logs: Purged or anonymized within 7 days, unless required for legal proceedings regarding computer crimes.
5. Recipients & Data Transfers Outside the EEA
Your data will never be sold, rented, or commercialized. Data may be accessed by authorized staff and trusted technical partners (web hosting providers, IT services, Meta Platforms Ireland Ltd for WhatsApp, Google Ireland Ltd for Google Maps). Any data transfers outside the European Economic Area (EEA) adhere strictly to EU Standard Contractual Clauses (SCCs) or Commission Adequacy Decisions.
6. Rights of the Data Subject (Articles 15-22 GDPR)
Under EU law, you hold the following rights regarding your personal data:
- Right of Access (Art. 15): Obtain confirmation and copies of your processed data.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete information.
- Right to Erasure / Oblivion (Art. 17): Request deletion of data no longer required by law.
- Right to Restriction (Art. 18): Temporarily restrict data processing under specified conditions.
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interest.
To exercise any of your rights, contact us anytime at: info@iciampa.com.
7. Right to File a Complaint
If you believe the processing of your personal data violates GDPR regulations, you have the right to lodge a complaint with your national Data Protection Supervisory Authority (e.g. Garante per la Protezione dei Dati Personali in Italy - www.garanteprivacy.it).