L’ANTICA FONTE S.R.L. with registered office at VIA VALDRACCA 25 – 50052 – CERTALDO (FI), VAT and Tax Code 02331580486 (hereinafter, the “Company” or “Controller”), as Data Controller, provides below the information regarding the processing of personal data of users (hereinafter, “Data Subjects”) who consult and/or use the services offered by the Company, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter, “GDPR”).

1. Data Controller

The Data Controller is L’ANTICA FONTE S.R.L., with registered office at VIA VALDRACCA 25 – 50052 – CERTALDO (FI). For any request regarding the processing of personal data, you can contact the Controller by email at info@ristoranteanticafonte.it or by phone at +39 0571 652225 or +39 334 8648259.

2. Types of Data Processed

L’ANTICA FONTE S.R.L. processes the following personal data:

• Browsing data: Data automatically collected by the system when accessing the website (IP addresses, domain names, data relating to the use of cookies, etc.);
• Data voluntarily provided by users: Name, surname, email address, telephone number, and other personal data provided through contact forms, newsletter subscriptions, reservations, information requests, or other interactions with the Company.

3. Purpose of Processing and Legal Basis

Users’ personal data are processed for the following purposes:

• Management of user requests: To respond to requests for information, quotes, reservations, or other communications sent by users via the website or other contact channels. Legal basis: performance of pre-contractual and contractual measures (Art. 6, para. 1, letter b) GDPR).
• Sending promotional communications and newsletters: For sending commercial and promotional communications regarding the services offered by the Company, subject to the explicit consent of the Data Subject. Legal basis: consent of the Data Subject (Art. 6, para. 1, letter a) GDPR).
• Compliance with legal obligations: To comply with obligations under current tax and accounting regulations. Legal basis: compliance with legal obligations (Art. 6, para. 1, letter c) GDPR).
• Protection of the Controller’s rights: To manage any disputes and prevent fraud. Legal basis: legitimate interest of the Controller (Art. 6, para. 1, letter f) GDPR).

4. Processing Methods

The processing of personal data is carried out using manual, IT, and telematic tools, with logic strictly related to the purposes indicated and, in any case, in such a way as to guarantee the security and confidentiality of the data.

5. Nature of Data Provision

The provision of personal data is optional, but failure to provide such data may make it impossible to obtain what is requested (e.g., response to information requests, sending newsletters).

6. Data Retention

Personal data will be retained for the time strictly necessary to achieve the purposes for which they were collected and, in any case, no longer than the terms provided by current legislation:

• Contact data for commercial communication purposes: until the Data Subject withdraws consent.
• Data for contractual purposes: for the entire duration of the contractual relationship and for 10 years after its termination for accounting and legal purposes.
• Browsing data: retained for the time necessary to manage the security of the site and, in any case, for no longer than 12 months.

7. Data Recipients

Users’ personal data may be disclosed to:

• Subjects in charge of the technical management of the website and the Company’s IT systems;
• Tax and legal consultants for compliance with legal obligations;
• Competent bodies and authorities, in case of compliance with legal obligations or orders from authorities.

Personal data will not be disclosed under any circumstances.

8. Rights of Data Subjects

Data Subjects have the right to obtain from the Controller, in the cases provided for, access to their personal data, rectification, erasure, restriction of processing, and data portability. Data Subjects may object to processing at any time for direct marketing purposes.

To exercise their rights, Data Subjects may contact the Controller by email at info@ristoranteanticafonte.it.

9. Complaint to the Supervisory Authority

Data Subjects who believe that the processing of their personal data is carried out in violation of the GDPR have the right to lodge a complaint with the Data Protection Authority, pursuant to Art. 77 of the GDPR.

10. Changes to the Privacy Policy

L’ANTICA FONTE S.R.L. reserves the right to modify or update this privacy policy, also in consideration of regulatory changes or updates to the services offered. Changes will be communicated through the Company’s website. We invite users to periodically consult this section to stay updated.