This notice explains which personal data we process when you visit pizzeriaemivita.it, the purposes and legal bases of the processing and the rights you can exercise under Regulation (EU) 2016/679 ("GDPR") and the Italian Privacy Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018).

1. Data Controller

The Data Controller is Emivita S.r.l., registered office at Viale della Rimembranza, 46, 95044 Mineo (CT).

VAT number: P. IVA 06185860878

Business Register (REA): CT-366908

Share capital: € 55.000,00

Contact email: gestionesiti831@gmail.com

Certified email (PEC): EMIVITASRL@PEC.IT

2. Personal data we process

We only process the data strictly necessary for the purposes listed in section 3. In particular:

Browsing data: IP address (truncated/anonymised), browser and OS type, pages visited, request timestamp, referrer. Collected automatically through server logs and measurement tools.
Data you provide voluntarily: when you contact us by email, phone or WhatsApp, we process your name, the contact details you share and the content of your message.
Cookies and tracking tools: full details in the Cookie Policy.

3. Purposes of the processing

Delivering the website and ensuring its security (technical logs, abuse prevention).
Answering requests, reservations or assistance sent by email, phone, WhatsApp or contact form.
Measuring website usage in aggregate, anonymous form to improve performance (only with your consent).
Complying with legal, accounting and tax obligations related to our restaurant business.
Defending the Controller's rights in judicial proceedings.

4. Legal basis

Performance of pre-contractual measures at your request (Art. 6.1.b GDPR) for bookings and contact requests.
Legitimate interest of the Controller (Art. 6.1.f GDPR) for website security and defence of legal claims.
Free, specific, informed and withdrawable consent (Art. 6.1.a GDPR and Art. 122 Italian Privacy Code) for statistical measurement tools.
Legal obligation (Art. 6.1.c GDPR) for tax and accounting duties.

5. Recipients and external processors

Data is processed by authorised personnel of Emivita S.r.l. and may be disclosed to the following providers, appointed as Data Processors under Art. 28 GDPR:

Vercel Inc. (USA) — Website hosting, Web Analytics and Speed Insights. Transfer to the USA is governed by the EU Standard Contractual Clauses and Vercel's Data Processing Addendum.
Google Ireland Ltd. — Google Fonts (typography loading). The service may process the IP address to deliver the font.
OpenStreetMap Foundation (UK) — Map tiles served on the Contact page.
Meta Platforms Ireland Ltd. / Meta Platforms Inc. (USA) — WhatsApp Business for customer messaging (if you decide to write to us); social links and widgets (Facebook, Instagram).
TikTok Technology Ltd. (Ireland) — Link to our TikTok profile.
Iubenda S.r.l. (Italy) — Cookie solution provider and host of the full policy documents.
Email and telephony providers used to reply to your requests.

6. Transfers outside the EU

Some providers (Vercel, Meta) are based in the United States or may process data in third countries. In such cases the transfer relies on the Standard Contractual Clauses approved by the European Commission (Decision 2021/914) and on additional safeguards adopted by the providers (encryption in transit and at rest, organisational measures). You can request a copy of the safeguards by writing to gestionesiti831@gmail.com.

7. Retention periods

Server technical logs: up to 30 days, unless extended for security reasons.
Anonymous analytics metrics: up to 24 months in aggregate form.
Email/WhatsApp conversations: for the time needed to handle the request and in any case no longer than 24 months from the last contact.
Data kept for tax/accounting obligations: 10 years as required by Italian law.

8. Your rights

At any time you can exercise the rights set out in Articles 15–22 of the GDPR:

Access to your personal data (Art. 15).
Rectification of inaccurate data or completion of incomplete data (Art. 16).
Erasure of your data ("right to be forgotten", Art. 17).
Restriction of processing (Art. 18).
Data portability in a structured format (Art. 20).
Objection to processing based on legitimate interest (Art. 21).
Withdrawal of consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights write to gestionesiti831@gmail.com or via certified email (PEC) to EMIVITASRL@PEC.IT. We will reply within one month pursuant to Art. 12 GDPR.

9. Complaint to the Supervisory Authority

If you believe the processing breaches the GDPR you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU Member State where you usually reside, work or where the alleged infringement took place.

10. Minors

The website is not intended for children under 14 and we do not knowingly collect data from minors. If you believe a minor has provided us with personal data please contact us and we will delete it.

11. Changes to this policy

We may update this notice. The date of the last revision is shown at the top of the document. Please check it periodically. Material changes will be announced via the cookie banner or a notice on the home page.

Privacy Policy