1. Data controller
The data controller is ALFIO SRL, with registered office at Strada Gardesana Occidentale 7/a, 38074 Dro (TN), Italy, VAT number, Tax Code and Companies Register 01878420221.
Questions concerning personal data protection may be sent to:
2. Data processed
During normal browsing, the IT systems and hosting provider may collect technical data needed to deliver and protect the service, such as IP address, request date and time, requested page, response status, browser and operating system.
When a user contacts the restaurant by telephone or email, the restaurant may process the user’s name, contact details, the content of the request and any other information provided voluntarily.
The website does not include a contact form and does not directly collect reservation data. The booking button opens an external service; data entered there are processed under that provider’s privacy notice and, where applicable, shared with the restaurant to manage the reservation.
3. Purposes and legal bases
- Website operation, security, abuse prevention and technical troubleshooting: the controller’s legitimate interest.
- Responding to requests for information, reservations or availability: steps taken at the data subject’s request before entering into a contract.
- Managing contractual, administrative and accounting relationships: performance of a contract and compliance with legal obligations.
- Establishing, exercising or defending legal claims: legitimate interest.
4. Processing methods and recipients
Data are processed with technical and organisational measures appropriate to the stated purposes. They may be accessed by authorised personnel and service providers supporting hosting, IT maintenance, email, bookings and professional advice, appointed as processors where required.
Data may also be disclosed to public authorities where required by law. Personal data are not sold.
5. External links and services
The website contains links to the Plateform booking service, Google Maps, Facebook, Instagram and the Ristorante Pizzeria La Brace website. Once the user clicks a link, those providers independently determine the processing carried out on their websites.
The website does not currently embed maps, videos or social feeds and does not activate those services when the page is merely viewed.
6. Retention
Technical browsing data are retained only for the period needed for operation, security and troubleshooting, subject to longer periods required by law or necessary in the event of an incident.
Ordinary telephone or email enquiries may be retained for up to 24 months after the last contact. Contractual, administrative or tax-related records may be retained for the period required by applicable law, normally up to 10 years.
7. Data subject rights
Data subjects may request access, rectification, erasure, restriction of processing, data portability where applicable and object to processing based on legitimate interests. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
A complaint may also be lodged with the Italian Data Protection Authority.
8. Automated decisions, profiling and children
The website does not use automated decision-making or profiling.
The website is intended for the general public and is not designed to intentionally collect personal data from children.
9. Changes to this notice
This notice may be updated following legal, technical or organisational changes. The version published on the website states the date of the latest update.