Notice

Privacy Policy

This page explains what personal data the Palmento Spuligni website collects, why it collects it, where it goes and how long it is kept. It is written pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR).

Who processes the data

The data controller is Palmento Spuligni S.r.l., Via Giacomo Matteotti 1/5, 95019 Zafferana Etnea (CT), P.IVA 06238610874.
For any matter concerning personal data, write to info@palmentospuligni.it or call +39 095 770 7252.

What data we collect

The site asks for no registration and does not profile its visitors. Personal data comes only from two forms, which are filled in voluntarily.

Booking request form

first and last name, email address and telephone number;
type of request, date and number of people, where given;
the free text written in the message field;
confirmation that you have read this notice.

Form for downloading the PDF menu

The menu can be downloaded without filling in anything. Those who wish may leave a name and a telephone number, both optional, in which case consent to processing is requested; separately, you may agree to receive news about special evenings and menu changes.

Technical data

With every submission we record the date, time and originating IP address. These have two distinct uses, with different retention periods:

Proof of consent — the date, time and IP stay alongside the request, because they are what shows when a consent was obtained. They last as long as the request they belong to.
Anti-spam filter — separately, the IP address is noted in a temporary file that prevents repeated submissions in quick succession. That file deletes itself after one hour.

Why we process it

Answering requests for bookings, availability or quotations: the processing serves to carry out pre-contractual measures requested by the data subject (Art. 6.1.b GDPR).
Sending commercial communications about events, special evenings and new menus: only to those who have ticked the relevant box, on the basis of consent (Art. 6.1.a GDPR). Every message contains an immediate way to unsubscribe, and otherwise you need only write to us: withdrawal is possible at any time and costs nothing.
Keeping the site running and secure, including the anti-spam filter: the controller's legitimate interest in receiving genuine requests (Art. 6.1.f GDPR).

Where the data goes

Requests are saved in archive files on the server that hosts the site, in a folder that cannot be reached from the web, and at the same time sent by email to the restaurant's mailbox, where they remain until deleted, including the mail service's backup copies. There are no copies on external services other than those listed below, there is no third-party database, and the data is not sold, transferred or disclosed.

Who else can see it

The data is visible to the restaurant staff who handle bookings and events. On the technical side, the following suppliers are involved, acting either as processors or as independent controllers:

Hostinger International Ltd. — hosting of the site and of the mailbox;
Google Ireland Ltd. — the map embedded in the Contact page and the site's typefaces, both of which involve a connection to Google's servers;
BBPlanner — the room booking engine, which opens when you click "Book": from that point on, that service's own terms and privacy notice apply.

Some of these suppliers may process data outside the European Union; in that case the transfer takes place on the basis of the standard contractual clauses approved by the European Commission.

How long we keep it

Booking and quotation requests: 24 months from the last contact, after which they are deleted.
Contacts for commercial communications: until withdrawal of consent.
Date, time and IP attached to a request, which prove its consent: as long as the request itself, under the terms above.
Temporary files of the anti-spam filter: one hour, after which it is deleted automatically.

Your rights

You may ask at any time to access your data, to correct it, to erase it, to restrict its processing, to receive it in machine-readable form or to object to the processing. You may also withdraw a consent already given, without this making the processing carried out beforehand unlawful.

Simply write to info@palmentospuligni.it: we reply within one month. If our reply does not satisfy you, you may contact the Italian Data Protection Authority (www.garanteprivacy.it).

Providing your data

Filling in the forms is not compulsory. In the booking form, however, name, email, telephone and type of request are needed in order to reply: without them we cannot get back to you. In the menu form every field is optional and the PDF downloads either way.

Minors

The site is not directed at children under fourteen and does not knowingly collect their data.

Cookie

Cookies and similar technologies have a page of their own: Cookie Policy.

Changes

If the tools used by the site change, we update this notice and the date below.