Privacy notice

Data controller

Servo per Amikeco S.A.S. di Alessandro Petricci & C. — Piazza VII Maggio 3/A, 06026 Pietralunga (PG), Italy. Tax code and VAT no. 03683290542.

Email: localefoodandrooms@gmail.com — Tel. +39 075 928 0614 — Mobile/WhatsApp +39 333 235 9304.

The controller has not appointed a Data Protection Officer (DPO), as it is not required to under Art. 37 GDPR.

Which data we process

• Browsing data: IP address, date and time of the request, page visited, browser and operating system. They are collected automatically by the servers hosting the website to keep it running and secure.
• Contact form data: name, email, phone (optional), subject and message.
• Booking form data: name, email, phone, type of service (table or room), date, time, number of guests, number of nights and any notes.
• Data you send us by email, phone or WhatsApp.
• Data collected through cookies and similar technologies, described in the Cookie Policy.
• Cookie consent register: a random identifier, the choice you made, date and time, the version of our notices, language and page, your truncated IP address (without its last part) and browser type.
• Please do not include special categories of data (e.g. health data) in your notes unless strictly necessary: if you tell us about food allergies or intolerances, we will use this information only to prepare your service, on the basis of your explicit consent (Art. 9.2.a GDPR).

Purposes and legal bases

• Answering your requests for information — pre-contractual measures taken at your request (Art. 6.1.b GDPR).
• Handling table and room booking requests and your stay, including an automatic email confirming we received your request — performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
• Complying with legal obligations, such as tax and accounting rules or reporting guest details to the police as required by Art. 109 of the Italian Public Security Act (TULPS) — legal obligation (Art. 6.1.c GDPR).
• Keeping the website secure and preventing abuse and spam (technical logs, anti-spam fields, rate limiting) — legitimate interest of the controller (Art. 6.1.f GDPR).
• Keeping proof of your cookie choices (consent or refusal), as required by Art. 7.1 GDPR — legal obligation and accountability principle (Articles 6.1.c and 5.2 GDPR).
• Producing aggregate statistics on website use with Google Analytics 4 — only with your consent (Art. 6.1.a GDPR and Art. 122 of the Italian Privacy Code), which you can withdraw at any time.
• We do not carry out profiling or take decisions based solely on automated processing. We do not send newsletters or promotional messages.

Whether you must provide your data

Fields marked as required in the forms are needed to answer your request or handle your booking; without them we cannot follow up. Consent to statistics cookies is optional, and refusing it does not limit your use of the website in any way.

How we process data and keep it secure

Data are processed electronically and, where necessary, on paper, by authorised and trained staff, with appropriate technical and organisational measures: encrypted HTTPS connection, protected access, data minimisation and regular deletion.

Who receives the data

• Hostinger International Ltd. (Cyprus), provider of the website hosting and of the service that forwards form messages, as data processor.
• Google Ireland Limited, for the mailbox we use to handle correspondence and — only with your consent — for Google Tag Manager and Google Analytics 4; for Google Maps only if you choose to load the map.
• WhatsApp Ireland Limited, if you choose to contact us via WhatsApp, as an independent controller under its own privacy notice.
• Advisers and professionals (e.g. our accountant) bound by confidentiality, and public authorities where required by law.
• Your data are never published or sold to third parties.

Transfers outside the European Union

Some providers (in particular the Google group) may process data in the United States. These transfers rely on the European Commission's adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, to which Google LLC is certified, and/or on the Standard Contractual Clauses approved by the Commission.

How long we keep data

• Information requests: as long as needed to reply, and in any case no longer than 12 months after the last contact.
• Bookings: for the duration of the relationship; data needed for tax and accounting purposes are kept for 10 years as required by law.
• Server logs: only as long as needed for security, normally no longer than 30 days, unless needed to investigate offences.
• Google Analytics 4 statistics: 2 months, according to the default retention setting; Google Analytics 4 does not log or store IP addresses.
• Cookie preferences in your browser: 6 months, after which we will ask for your consent again. Consent register on our server: 12 months, then deleted automatically.

Your rights

At any time you can request access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest (Articles 15-22 GDPR). You can withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal: for cookies, just use the “Cookie preferences” button that is always available on the website.

To exercise your rights write to localefoodandrooms@gmail.com: we will reply without undue delay and in any case within 30 days.

Complaints to the supervisory authority

If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) — Piazza Venezia 11, 00187 Rome — protocollo@pec.gpdp.it — garanteprivacy.it — or with the authority of the EU country where you live or work.

Children

The website forms are not intended for children under 14. Bookings must be made by an adult.

Changes to this notice

We may update this notice to reflect changes in the law or in the website. The date of the latest update is shown at the bottom of the page.