Last updated: 06/11/2025
1. Data Controller
The Data Controller for personal data processing is:
Pizzeria del Bernino S.r.l.s.
Via Senese, 87 – 53036 Poggibonsi (SI) – Italy
Email: lapizzeriadelbernino@pec.it
Phone: +39 339 816 1552
Website: https://ciccioandfriends.com
2. Types of Data Collected
This website may collect the following types of personal data, either independently or through third parties:
- Browsing data: IP addresses, domain names of users’ devices, URI/URL addresses of requested resources, request time, request method, response size, status code, and other technical parameters relating to the user’s operating system and IT environment.
- Data voluntarily provided by the user: Name, surname, phone number, email address, and any other personal information shared through contact forms, email, or messaging platforms such as WhatsApp.
- Technical cookies: Required for the secure and functional operation of the website.
Note: This website does not use profiling cookies or tracking tools for marketing or retargeting purposes.
3. Purpose of Processing
Personal data are processed for the following purposes:
- Enabling navigation and use of the website;
- Managing information or booking requests sent via forms, email or WhatsApp;
- Providing user support;
- Ensuring website security and preventing fraudulent activity.
4. Legal Basis for Processing
Data processing is carried out based on:
- Performance of pre-contractual or contractual measures (Art. 6(1)(b) GDPR) — e.g. handling bookings or information requests;
- Legal obligation (Art. 6(1)(c) GDPR) — to comply with regulatory requirements;
- Legitimate interest (Art. 6(1)(f) GDPR) — for correct functioning, security, and maintenance of the website.
5. Data Processing Methods & Security
Processing is carried out using IT and telematic tools, strictly aligned with the stated purposes, and with appropriate technical and organisational security measures to ensure data confidentiality and integrity.
The website is hosted by vHosting.com, acting as a Data Processor in accordance with Art. 28 GDPR.
Data are stored on servers located within the European Union.
6. Third-Party Services
6.1. Google Maps (Google Ireland Ltd.)
Used to display interactive maps showing the pizzeria’s location.
Data collected: IP address, usage data, technical cookies.
Location of processing: Ireland – Privacy Policy
6.2. Google Fonts (Google Ireland Ltd.)
Fonts are loaded locally from the website’s server to avoid any data transfer to Google.
Location of processing: Ireland – Privacy Policy
7. Use of WhatsApp Business
To simplify table bookings or takeaway orders, the site includes a WhatsApp Business button that starts a direct chat with the Data Controller.
Data processed: User’s phone number, message content, booking or enquiry details, communication metadata.
Purpose: To manage bookings or respond to requests.
Legal basis: Performance of pre-contractual or contractual measures (Art. 6(1)(b) GDPR).
Retention: Data are retained only for as long as necessary to manage the request, and in any case no longer than 12 months unless required by law.
Data are processed on the Data Controller’s device and via servers operated by Meta Platforms Ireland Ltd., which may process metadata outside the EEA in accordance with Meta’s Standard Contractual Clauses.
By clicking the WhatsApp button, the user agrees to communicate voluntarily via this platform and assumes responsibility for the information shared.
For more details, see WhatsApp’s Privacy Policy.
8. Data Retention
Personal data are kept only for the time strictly necessary to achieve the purposes for which they were collected, or for the period required by law.
After this time, data will be deleted or anonymised.
9. User Rights
At any time, users may exercise their rights under Articles 15–22 of the GDPR, including:
- Request confirmation of whether personal data is being processed and access to it;
- Request correction or deletion of personal data;
- Request restriction of or object to processing;
- Request data portability;
- Withdraw any previously given consent.
Requests may be sent to: lapizzeriadelbernino@pec.it
10. Data Transfers Outside the EEA
Apart from WhatsApp Business (as outlined above), no data are transferred outside the European Economic Area.
11. Changes to this Privacy Policy
The Data Controller reserves the right to amend this Privacy Policy at any time. Updates will be published on this page, with the latest revision date clearly indicated.
12. Complaints
Users who believe their data has been processed in breach of GDPR may lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it
FAQ – Data Processing via WhatsApp
1️⃣ What happens when I click the WhatsApp button?
A direct chat opens with our WhatsApp Business number. You can message us freely to book a table or place a takeaway order.
2️⃣ What data is processed?
Only the information you choose to share — such as your message, phone number, or booking details.
3️⃣ Why do you use WhatsApp?
It’s a fast, direct channel that helps us manage bookings and improve customer communication.
4️⃣ Can I request the chat to be deleted?
Yes — you can ask us to delete the conversation by writing to our PEC address or simply delete the chat from your own device.
5️⃣ Will my data be used for advertising?
No. We only use WhatsApp to respond to your messages and manage your bookings.
