Privacy Policy according to Legislative Decree 196/03 and EU Regulation No. 679/2016

Pursuant to Article 13 of Legislative Decree 196/03 and following the entry into force of EU Regulation No. 679/2016 in accordance with Article 13 of the aforementioned European Regulation, we wish to inform you of the following:

Purpose of Data Processing

Your personal data, freely provided and acquired by us in connection with the activities conducted by:

Lacamapaal S.r.l.
Via Tagliamento, 25 – 00198, Rome (RM)
VAT Number: 06853291000
Tax Code: 06853291000

will be processed lawfully and fairly for the following purposes:

Name and surname, email, phone number, other

The data processed are updated, relevant, complete, and not excessive in relation to the purposes for which they are collected and subsequently processed.

Data Processing Methods

The data will be processed, respecting the necessary security and confidentiality, through the following methods: data collection from the data subject, collection and registration for specific, explicit, and legitimate purposes, used in further processing operations in terms compatible with these purposes, processing carried out with the help of electronic and automated tools (data collection via telematics, directly from the data subject).

Legal Basis for Processing

The legal basis for processing your personal data is based on the registration on the web portal www.ristorantemelarancio.it.

Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in processing the data arise from the need to comply with and honor the contractual obligations entered into between the parties. According to Article 6, the lawfulness of the processing is based on the explicit consent given by the data subject, documented in writing.

Mandatory or Optional Nature of Providing Data and Consequences of Refusal:
Providing your data is mandatory for the Data Controller to provide the requested services. In case of refusal, it will be impossible to complete the registration process, and the System Owner will not be able to fulfill the contractual obligations.

Disclosure of Data to Third Parties

Your personal data will be processed by the Data Controller, the Data Processors appointed by him, and the authorized data processing personnel. Your personal data will not be disclosed.

Data Retention Period

Your personal data will be retained for 10 years from the termination of the service provision/supply of the product in the electronic archives owned by Lacamapaal S.r.l.

Intention of the Data Controller Regarding Personal Data

The Data Controller will not transfer your personal data to a third country or an international organization.

Data Controller and Data Processor

The Data Controller is Lacamapaal S.r.l.
Contact details of the Data Controller: email [email protected]

The data subject may exercise the rights reserved to him/her at any time, as stipulated in Article 7, the full text of which is provided below: Article 7 of Legislative Decree 196/2003 and Article 15 of EU Regulation 679/2016 – Right of access to personal data and other rights – “The data subject has the right to obtain confirmation as to whether or not personal data concerning him/her exists, even if not yet recorded, and their communication in intelligible form. The data subject has the right to be informed of: the origin of the personal data; the purposes and methods of the processing; the logic applied in case of processing carried out with the aid of electronic instruments; the identification details of the data controller, the data processors, and the representative designated pursuant to Article 5, paragraph 2; the entities or categories of entities to whom or which the personal data may be communicated or who or which may become aware of it as designated representative(s) in the territory of the State, data processor(s), or person(s) in charge of the processing. The data subject has the right to obtain: the updating, rectification, or, when interested, integration of the data; the deletion, anonymization, or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they were collected or subsequently processed; certification that the operations as per letters a) and b) have been notified, as also related to their contents, to those to whom the data were communicated or disseminated, except where this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. The data subject has the right to object, in whole or in part: on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; to the processing of personal data concerning him/her for the purpose of sending advertising materials or direct selling or for the performance of market or commercial communication surveys.” In particular, the data subject can request access to personal data, rectification or deletion of the same, or limitation of processing that concerns him/her, or oppose their processing, as well as the right to data portability. The data subject has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal and has the right to lodge a complaint with a supervisory authority. The exercise of the rights can be done by writing to the email address [email protected].