Privacy Policy

Trattoria della Nonna respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our online platform or interact with our services.

Information We Collect

We may collect various types of information when you visit our site or use our services:

• **Personal Identification Information:** This may include your name, email address, phone number, and postal address, particularly when you make reservations, place orders for takeaway or delivery, inquire about event catering, or contact us through online forms.
• **Payment Information:** Details required to process payments for services, although actual payment processing is often handled by third-party services, and we do not store full payment card details on our systems.
• **Technical Data:** Information about your device and internet connection, such as your IP address, browser type and version, operating system, and time zone settings.
• **Usage Data:** Information about how you use our site, including pages visited, services viewed, time spent on pages, and navigation paths.
• **Marketing and Communications Data:** Your preferences in receiving marketing communications from us.

How We Collect Your Data

We collect data through various methods:

• **Direct Interactions:** You provide data when you fill in forms on our site, make bookings or orders, subscribe to newsletters (if offered), enter competitions or promotions, or correspond with us.
• **Automated Technologies or Interactions:** As you interact with our site, we may automatically collect Technical and Usage Data through cookies, server logs, and other similar technologies.
• **Third Parties:** We may receive personal data about you from third parties, such as booking platforms, payment service providers, or analytics providers, in compliance with data protection laws.

How We Use Your Data

We use your personal data for the following purposes:

• **To Provide and Manage Services:** To process your reservations, handle your orders, manage payments, and provide the services you request.
• **To Communicate with You:** To respond to your inquiries, send you service updates, or provide information related to your bookings or orders.
• **To Improve Our Site and Services:** To understand how our site is used, analyze trends, and develop new features and services.
• **For Marketing Purposes:** To send you promotional communications about our services or special offers that may be of interest to you, based on your preferences and consent where required.
• **For Business Operations:** Including data analysis, testing, system maintenance, support, reporting, and hosting data.
• **To Comply with Legal Obligations:** To meet our legal or regulatory requirements.

Legal Basis for Processing Personal Data

We will only process your personal data when we have a lawful basis for doing so. This includes:

• **Performance of a Contract:** Where processing is necessary for the performance of a contract to which you are a party (e.g., processing your booking or order).
• **Legitimate Interests:** Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., improving our services, preventing fraud, network security).
• **Consent:** Where you have given explicit consent for a specific processing purpose (e.g., for receiving marketing communications). You have the right to withdraw consent at any time.
• **Legal Obligation:** Where processing is necessary for compliance with a legal obligation to which Trattoria della Nonna is subject.

Data Sharing and Disclosure

We may share your personal data with third parties in limited circumstances:

• **Service Providers:** We share data with trusted third parties who provide services on our behalf, such as payment processors, booking platforms, delivery partners, IT support, and hosting providers. These third parties are required to process your data securely and in accordance with the law.
• **Legal Requirements:** We may disclose your data if required to do so by law, regulation, legal process, or governmental request.
• **Business Transfers:** In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the new entity.

We do not sell or rent your personal data to third parties for their marketing purposes.

Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. Access to your personal data is limited to employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, as well as applicable legal requirements.

Your Data Protection Rights

Under data protection laws, you have several rights regarding your personal data:

• **The right to access:** You have the right to request copies of your personal data.
• **The right to rectification:** You have the right to request that we correct any information you believe is inaccurate or incomplete.
• **The right to erasure:** You have the right to request that we erase your personal data, under certain conditions.
• **The right to restrict processing:** You have the right to request that we restrict the processing of your personal data, under certain conditions.
• **The right to object to processing:** You have the right to object to our processing of your personal data, under certain conditions.
• **The right to data portability:** You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you wish to exercise any of these rights, please contact us in writing using the address provided below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data or to exercise any of your other rights. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

Cookies

Our site may use cookies and similar tracking technologies to enhance your experience, analyze site traffic, and provide personalized content. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our site may become inaccessible or not function properly.

Children's Privacy

Our online platform and services are not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will take steps to remove that information.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or our data processing practices, please contact us in writing at:

Trattoria della Nonna
112 Via del Corso
Rome, Lazio, 00186
Italy

Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority in Italy if you believe your rights have been infringed. The supervisory authority in Italy is the Garante per la protezione dei dati personali.