Customer Privacy Policy
Pursuant to Art. 13 of Legislative Decree 196/2003, European Regulation 2016/679 (hereinafter GDPR) and Legislative Decree. 101/2018, in relation to the personal data that the company “Ristorante La Foresta – Ferri Alessandro S.r.l.” will come into the availability of in order to perform its services, the specific information of the data processing is communicated below.
Data controller and data protection officer
The Data Controller is Ristorante La Foresta Ferri Alessandro S.r.l. with headquarters in Rocca di Papa (Rm), Via dei Laghi Km 12 in the person of the legal representative. The Holder can be contacted at info@ristorantelaforesta.com or by phone [+39] 06 94749392. The company has not appointed a data protection officer.
Purpose of data processing
Processing is aimed at the proper and complete performance of services related and connected with the catering service requested by the customer. Your data will be processed for the purpose of:
- Make estimates and provide information about the services requested;
- Make a reservation for one of the services performed;
- Fulfilling the obligations required in taxation and accounting;
- Comply with obligations under current regulations;
- Fulfill the purpose of the service you agreed upon.
Method of treatment
Personal data may be processed either physically through documentation kept on file that is accessible only to those responsible for it, or digitally on the company’s local devices and cloud areas located in Europe that can be accessed by the only designated personnel.
Legal basis for processing
La Foresta Restaurant Ferri Alessandro S.r.l. processes your personal data lawfully, where the processing:
- Is necessary for the performance of the mandate, of a contract to which you are a party
- is necessary for the execution of pre-contractual measures such as, but not limited to, requests for information and quotations;
- Is necessary to fulfill a legal obligation incumbent on the restaurant;
- Is based on express consent (such as but not limited to: sending promotional messages, sending newsletters related to events promoted by the restaurant)
Consequences of non-disclosure of personal data
With regard to the personal data provided, failure to disclose personal data prevents the structuring of a business response and its delivery to the recipient customer, prevents the booking of services, and finally prevents the finalization of the contractual relationship in the case of booking events (where a more significant agreement needs to be formalized).
Data retention
Your personal data, subject to processing for the above-mentioned purposes, will be retained for the period of 10 years from the date of registration, that is, for the duration of the performance of the requested service and thereafter, for as long as necessary in which the company is subject to retention obligations for tax or other purposes, provided for, by legal regulations.
Disclosure of data
Your personal data may be disclosed to:
- consultants and accountants or other lawyers who provide functional services for the above purposes;
- Banking and insurance institutions performing related activities for the above purposes;
- Subjects who process data in fulfillment of specific legal obligations;
- Subjects who may intervene in the provision of services inherent in the requested service;
- judicial or administrative authorities, for the fulfillment of legal obligations.
Data Profiling and Dissemination
Your personal data are not subject to disclosure to unauthorized third parties, nor to any fully automated decision-making process, including profiling.
Rights of the data subject
Your rights under the GDPR include those of:
- to request access to your personal data and information relating to them; rectification of inaccurate data or supplementation of incomplete data; deletion of personal data relating to you (upon the occurrence of one of the conditions indicated in Article 17(1) of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); limitation of the processing of your personal data (upon the occurrence of one of the cases indicated in Article 18(1) of the GDPR);
- request and obtain – in cases where data processing is carried out by automated means – your personal data in a structured, readable format, including for the purpose of communicating such data to another data controller (so-called right to personal data portability);
- Object at any time to the processing of your personal data in the event of special situations concerning you;
- revoke consent at any time, limited to cases where processing is based on your consent for the specified purposes and involves personal data provided. Processing based on consent and carried out prior to the revocation of consent retains, however, its lawfulness.