Privacy Policy
General data protection regulation
Dear user,
according to art. 13 of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and the free circulation of such data, the undersigned company Bistrot Portofino SRL, as the data controller that derive from the interaction with web services accessible electronically from the address portofinobistrot.com, wishes to inform you about the processing of your personal data and invites you to authorize the processing of your data for the purposes described by expressing your consent voluntarily and freely to the processing of personal data.
The information is provided only for the website of the owner and not for other websites that may be consulted by the user through links.
1 – Data Controller
Bistrot Portofino SRL – Calata Marconi 10, 16034 Portofino (GE) IT E-mail: portofinobistrot@gmail.com
2 – Processing methods
Your data will be processed at the registered office in verb form and / or written, with electronic tools and / or on paper, in the ways and within the limits necessary to pursue the purposes indicated, in compliance with the principles set forth in art. 5 par.1 of EU 2016/679 Regulation, namely:
-
Lawfulness, correctness and transparency;
-
Purpose limitation
-
Minimization of collected data;
-
Data accuracy;
-
Limitation of conservation;
-
Integrity and confidentiality;
-
Responsibility of the Owner.
The treatments carried out concern the following data and purposes:
• Navigation data. The computer systems and software procedures that manage this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information is not collected to be associated with identified interested parties, but could by their nature, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site, for the registration of accesses to the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than seven days.
• Personal data provided voluntarily by the user (eg name, surname, email address) aimed at satisfying a specific request by the user using the services provided by the website.
Il conferimento dei dati è facoltativo e volontario, ma necessario per rispondere alla richiesta e consentire all’utente di usufruire del servizio. L’utente è libero di fornire i dati personali contenuti nei moduli di richiesta per domandare l’invio della newsletter con cadenza mensile o almeno ogni 15 giorni, di materiale informativo o di altre comunicazioni di carattere tecnico e/o commerciale (es. nuovi prodotti o servizi, partecipazione a fiere).
The provision is optional and voluntary, but necessary to respond to the request and for the user to receive the service.
The user is free to provide personal data contained in the request forms to request that the newsletter be sent monthly or at least every 15 days, informative material or other communications of a technical and / or commercial nature (eg new products or services, participation in trade fairs).
Their failure or incomplete conferment can make it impossible to obtain what has been requested. Personal data are processed for the time strictly necessary to achieve the purposes for which they were collected or in any case as long as consent exists.
The treatment will be carried out exclusively by employees in charge and authorized within the scope of their respective functions and in accordance with the instructions received from the Owner, always and only for the purposes set out above, to ensure data security and the confidentiality and protection of his rights .
These data are not transferred to countries outside the EU or international organizations. The data may be comunicated, as far as they are responsible for carrying out tasks on behalf of the Data Controller, to external subjects, Data Processors, public and private, physical and / or legal persons.
Data processing does not include automated decision making including profiling.
Personal data (e.g. first name, last name, bank details) required for the preparation and execution of sales contracts, including the related technical, operational, administrative and accounting activities necessary for and connected with the performance of the business relationship, as well as for compliance with contractual obligations and legal obligations under applicable tax legislation.
The provision of personal data is mandatory for the performance of the contract and compliance with legal obligations. Failure to provide such data will make it impossible to provide the service and to properly comply with applicable tax and administrative regulations.
The data will be processed exclusively by employees who have been duly appointed and authorised within the scope of their respective duties and in accordance with the instructions received from the Data Controller, solely for the purposes indicated above, while ensuring data security, confidentiality and the protection of your rights.
The data may be disclosed, to the extent necessary for the performance of activities carried out on behalf of the Data Controller, to public and private entities outside the Data Controller’s organisation, including suppliers, collaborators, lawyers, accountants, employment consultants, other professional advisers, credit institutions, public authorities and competent offices that are legally entitled to request such data.
The data will not be transferred to countries outside the European Union or to international organisations.
The data will be retained for the entire duration of the relationship and, in any event, for no longer than is necessary to achieve the purposes for which they are processed.
The accounting and administrative records required for tax purposes (accounting records) will be retained by law (Italian Civil Code) for at least 10 years from the date of the last entry, or until the conclusion of any tax assessments by the competent authorities relating to the relevant tax period under review (Article 22(2) of Presidential Decree No. 600/1973).
The processing of your data does not involve automated decision-making, including profiling.
3 – Rights of the interested party
The Regulation confers on it, as an interested party, the exercise of specific rights, listed in articles. from 15 to 22.
You can therefore ask the data controller:
-
access to personal data (Article 15): obtain confirmation of the existence or otherwise of a personal data processing and access to it;
-
data rectification (Article 16): obtaining the correction of inaccurate data and the integration of incomplete data;
-
the deletion of data – “oblivion” (Article 17);
-
the limitation of processing (Article 18);
-
the portability of data (Article 20): receive the data provided to the holder and be able to transmit them without hindrance to another holder;
-
to oppose the treatment (Article 21);
-
not to be subjected to a decision based solely on automated processing that produces legal effects or a a affects his person (Article 22).
Furthermore, the rights of:
-
propose a complaint to the Data Protection Authority;
-
revoke your consent at any time, without prejudice to the lawfulness of the processing carried out up to that point (Article 7, paragraph 3). The right of revocation can not concern the cases in which the processing is necessary to fulfill a legal obligation to which the data controller is subject.
You can exercise the above rights at any time and free of charge, by contacting the data controller Bistrot Portofino SRL to the e-mail addresses portofinobistrot@gmail.com.
In case of violation of personal data deemed appropriate to present a high risk for his rights and his liberties, he will be advised without undue delay, according to the art. 34 of the Rules.
