Casa Orterie
Privacy policy
Privacy Policy
Pursuant to EU Regulation 2016/679 (GDPR), {RAGIONE_SOCIALE} (VAT No. {PIVA}), with registered office at {SEDE_LEGALE}, as Data Controller, informs users on how personal data collected through this website are processed.
Data Controller
{RAGIONE_SOCIALE} — VAT {PIVA} — Certified email: {PEC}
Data collected
We collect only data necessary to the declared purposes: first name, last name, email, phone, food preferences and reservation details. For online purchases we collect billing data through our payment provider (Stripe), which processes card data independently as joint controller.
Purposes and legal basis
- Managing reservations and purchases (Art. 6.1.b GDPR — contract);
- Tax and accounting obligations (Art. 6.1.c GDPR — legal obligation);
- Sending commercial communications with prior consent (Art. 6.1.a GDPR);
- Technical cookies essential to site functioning (Art. 6.1.f GDPR).
Data retention
Data are retained for the time strictly necessary to the purposes, and in any case not longer than 10 years for tax obligations.
Rights of the data subject
You may exercise at any time the rights provided by articles 15-22 of the GDPR (access, rectification, erasure, restriction, portability, objection) by writing to {PEC}. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Cookies
For information about cookies please see our Cookie Policy.