Privacy Policy

Privacy Notice pursuant to Article 13 of EU Regulation 2016/679

This page describes the methods of processing personal data carried out to provide services following consultation of the website [https://www.spaghettiandco.it/](https://www.spaghettiandco.it/).

Respect for the privacy of our Users and Visitors (and in general of Data Subjects) is a priority for us.

Data Controller

The Data Controller, including for browsing data collected as a result of visiting the website [https://www.spaghettiandco.it/](https://www.spaghettiandco.it/), is **MG Villaroel srls**, headquartered in Catania, Via Crociferi 70, VAT No. 05960780871 (hereinafter referred to as “Spaghetti & CO”).

Spaghetti & CO, in its capacity as data controller under the applicable Italian personal data protection legislation (“National Law”) and EU Regulation 679/2016 – General Data Protection Regulation (“GDPR”) (hereinafter collectively referred to as the “Applicable Law”), recognizes the importance of protecting personal data and considers its protection one of the main objectives of its activity.

Before providing any personal data while browsing the website, we invite you to carefully read this privacy policy (“Privacy Policy”), as it contains important information regarding the protection of personal data and the security measures adopted to guarantee confidentiality in full compliance with the applicable law.

We inform you that the processing of your personal data will be carried out in compliance with the principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity, and confidentiality.

Subject of Processing

The Controller processes personal data (identification data such as name, surname, phone number, email, etc.) provided by Data Subjects.

The processing of your data is necessary as it allows you to access the content and/or functionalities of the website or to manage table reservations and/or the purchase of a “Cooking Class.” To this end, we are committed to processing your personal data lawfully and consistently, in accordance with the principles and legal obligations set out in the current Data Protection Regulations.

Purposes and Legal Bases of Processing

Personal data of Data Subjects are processed by Spaghetti & CO for the following purposes:

a) Responding to User requests for table reservations and/or a “Cooking Class.”
Data will be processed in order to respond to requests that Users/Customers may send through the contact details available on the Site. For this purpose, it is necessary that Users/Customers provide their contact information (name, surname, telephone, etc.); otherwise, it will not be possible to respond. The legal basis for this processing is the need to perform pre-contractual and contractual measures taken at the User’s request and to comply with related legal obligations.

Types of Processing

Processing activities are defined in Article 4(2) of EU Reg. 2016/679, including collection, recording, organization, storage, consultation, processing, modification, selection, retrieval, comparison, use, interconnection, blocking, communication, erasure, and destruction of data.

“Personal Data” means any information relating to an identified or identifiable natural person, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more elements characteristic of their physical, physiological, psychological, economic, cultural, or social identity.

Navigation Data

The website’s IT systems collect certain personal data, the transmission of which is implicit in the use of Internet communication protocols. These data are not collected to be associated with you but, by their very nature, could, through processing and association with data held by third parties, allow your identification.

Such data include IP addresses or domain names of the devices used to connect to the Site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used in submitting the request to the server, the size of the response file, the numerical code indicating the status of the server’s response (success, error, etc.), and other parameters related to your operating system and IT environment.

These data are used to obtain anonymous statistical information on the use of the Site, to check its correct functioning, to enable the correct provision of requested functionalities, for security reasons, and for determining responsibility in the event of possible cybercrimes. They are subsequently deleted.

Users who have doubts about which Data are mandatory are encouraged to contact the Controller at: info@spaghettiandco.it

Cookies

Cookies are pieces of information stored in your browser when visiting a website or using a social network on your computer, smartphone, or tablet.

Each cookie contains various data such as the name of the server it comes from, a numerical identifier, etc.

Cookies may remain in the system for the duration of a session (i.e., until the browser is closed) or for longer periods and may contain a unique identifier.

For more details on cookies, please read our Cookie Policy.

Methods of Processing

Personal data of Data Subjects may be processed both on paper and electronically.

Profiling

Spaghetti & CO does not carry out any automated profiling of personal data, nor does it use, directly or indirectly, automated tools that generate such classifications.

Data Retention

Spaghetti & CO will process personal data for the time strictly necessary to fulfill the above purposes and for as long as necessary to protect legitimate interests in case of disputes.

Recipients

Your Personal Data may be shared, for the purposes stated above, with:

  • entities acting on behalf of the Controller and providing services necessary for the correct functioning of the Spaghetti & CO Website, typically acting as Data Processors;
  • persons authorized by Spaghetti & CO to process Personal Data, who are bound by confidentiality obligations or legal duties of confidentiality (e.g., employees and collaborators of Spaghetti & CO);
  • authorities, including judicial authorities, in the exercise of their functions, when required by Applicable Law.

Data Location and Transfers

Data are processed at the operational offices of the Controller and in any other place where the parties involved in the processing are located. For further information, please contact the Controller.

Some of your Personal Data may be transferred to Recipients located outside the European Economic Area. Spaghetti & CO ensures that both electronic and paper-based processing of your Personal Data by such Recipients is carried out in compliance with the Applicable Law.

Data transfers outside the EU are based on adequacy decisions or on Standard Contractual Clauses approved by the European Commission.

Data Subjects’ Rights

Users may exercise certain rights regarding the Data processed by the Controller.

In particular, the User has the right to:

  • Withdraw consent at any time.
  • Object to processing of their Data when it is based on grounds other than consent.
  • Access their Data and obtain information on processing, as well as a copy of the Data processed.
  • Verify and request rectification of their Data.
  • Obtain restriction of processing under certain conditions.
  • Request erasure of their Personal Data under certain conditions.
  • Receive their Data or have them transferred to another controller in a structured, commonly used, machine-readable format, where technically feasible.
  • Lodge a complaint with the competent Data Protection Authority (http://www.garanteprivacy.it) or pursue legal action.

These rights may be exercised against Spaghetti & CO, in its capacity as Data Controller, by writing to: info@spaghettiandco.it