Privacy Policy

This privacy policy describes how Osteria del Gusto Fiorentino collects, uses, and protects your personal data when you use our online platform or interact with our services. We are committed to protecting your privacy and processing your data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Data Controller

The data controller responsible for your personal data is:
Osteria del Gusto Fiorentino
15, Via del Corso, Florence, Tuscany, 50122, Italy

Information We Collect

We may collect various types of personal data from you, depending on how you interact with our site and services. This may include:

• Contact Information: Name, email address, phone number, postal address, provided when you make a reservation, place an order, sign up for a newsletter, or contact us.
• Reservation and Order Details: Information related to your bookings, table preferences, dietary requirements, order history for takeaway or catering services.
• Payment Information: If you make payments through our online platform (e.g., for deposits, catering, online orders), payment card details or other payment account information may be collected by our third-party payment processors. We do not store your full payment card details on our servers.
• Communication Data: Records of your communications with us, including emails and messages sent through contact forms or booking systems on our site.
• Usage Data: Information about how you use our site, including your IP address, browser type, operating system, referral sources, pages viewed, and the dates/times of your visits. This data is collected automatically as you navigate the site.
• Marketing Preferences: Your preferences regarding receiving marketing communications from us.

How We Collect Your Information

We collect information in the following ways:

• Directly from You: When you provide it to us through online forms, reservation requests, order placements, or direct communication.
• Automatically: As you interact with our site, through cookies and similar tracking technologies that collect usage data and device information.

Purpose and Legal Basis for Processing

We process your personal data for the following purposes and relying on the specified legal bases:

• To Provide Services: To process your reservations, fulfil your orders (takeaway, catering), manage private dining events, and provide the services you request. (Legal Basis: Performance of a contract).
• To Communicate with You: To respond to your inquiries, send confirmations, updates about your bookings or orders, and communicate about our services. (Legal Basis: Performance of a contract or Legitimate Interests in responding to customer queries).
• For Marketing: To send you promotional materials, news, and offers about Osteria del Gusto Fiorentino, where you have given your consent or where permitted by law based on our legitimate interests (e.g., existing customers). You can opt-out of marketing communications at any time. (Legal Basis: Consent or Legitimate Interests).
• To Improve Our Site and Services: To understand how our online platform is used, analyze trends, and improve the user experience, features, and service offerings. (Legal Basis: Legitimate Interests in improving our business).
• To Manage Our Business Operations: Including accounting, administration, and internal reporting. (Legal Basis: Legal Obligations or Legitimate Interests).
• For Security and Fraud Prevention: To protect our site, services, and users from fraudulent or malicious activity. (Legal Basis: Legitimate Interests in ensuring security and Legal Obligations).
• To Comply with Legal Obligations: To meet requirements under applicable laws and regulations. (Legal Basis: Legal Obligation).

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention period will depend on the type of data and the purpose of processing. For example, data related to orders and reservations will be kept for a period required by tax and accounting laws. Marketing consent records are kept until you withdraw consent.

Data Sharing

We may share your personal data with third parties in the following circumstances:

• Service Providers: We may share data with trusted third-party service providers who perform functions on our behalf, such as website hosting, payment processing (e.g., for online orders or deposits), online reservation systems, email communication services, and analytics providers. These providers are contractually bound to process data only according to our instructions and applicable data protection laws.
• Legal Requirements: We may disclose your data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data.
• With Your Consent: We may share your data with other parties when we have your explicit consent.

We do not sell your personal data to third parties.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. However, please be aware that no security system is impenetrable, and we cannot guarantee the absolute security of your data transmitted over the internet.

Your Data Protection Rights

Under GDPR and other relevant laws, you have several rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data under certain conditions.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions, particularly where we process data based on legitimate interests or for direct marketing.
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller under certain conditions.
• Right to Withdraw Consent: If we rely on your consent to process your data, you have the right to withdraw that consent at any time. This withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or where an alleged infringement of data protection law has occurred.

To exercise any of these rights, please contact us using the contact details provided below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your data (or to exercise any of your other rights).

Cookies and Similar Technologies

Our site may use cookies and similar tracking technologies to collect information about your browsing behaviour, analyze site traffic, and provide certain functionalities. You can manage your cookie preferences through your browser settings or potentially through a consent banner on our site.

Children's Privacy

Our site and services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently received personal data from a child under 16, we will delete it in accordance with applicable law.

Links to Other Websites

Our site may contain links to third-party websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Any changes will be posted on this page. We encourage you to review this policy periodically.

Contact Us

If you have any questions or concerns about this privacy policy or our data practices, you may contact us at:

Osteria del Gusto Fiorentino
15, Via del Corso, Florence, Tuscany, 50122, Italy