INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users consulting the website www. ristoranteroccoco.it pursuant to Article 13 Of Regulation (EU) 2016/679

Pursuant to Regulation (EU) 2016/679 (hereinafter "Regulation" and/or "GDPR"), this page describes the methods for processing the personal data of users who consult the website of the company Rococo' S.r.l., accessible electronically at:
https://www.ristoranterococo.com.
This information does not concern other sites, pages or services that can be reached through hypertext links that may be published on the site.

DATA CONTROLLER
Following consultation of the site, data relating to identified or identifiable natural persons may be processed. The data controller is the company Rococo' S.r.l. - Registered office: Piazza Ducale, 3 - 27029 Vigevano (PV) - P.IVA | C.F. 02565400187 - rococosrl@certopec.it .

CATEGORIES OF PERSONAL DATA PROCESSED
The Controller may process the following categories of personal data of Users: data communicated by the User: - CONTACTS: data voluntarily communicated by the User through instant messaging via WhatsApp and/or sending e-mail. The optional, explicit and voluntary sending of messages to the various addresses/contact channels of the Owner, implies the acquisition of the personal data indicated, necessary to process the request forwarded by the interested party, as well as all the personal data included in the communications; if necessary, specific information is published in the web pages prepared for the provision of different services and different purposes.

Navigation data: the computer systems and software procedures used to operate this site acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of the computers and terminals used by users, addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. These data, necessary for the use of web services, are also processed for the purpose of: obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or daily, geographical areas of origin, etc.); to control the proper functioning of the services offered; in the case of hypothetical computer crimes produced to the detriment of the site, in agreement with the judicial authority, such data could be used to ascertain responsibility.

Data collected through tracking (cookies): tracking is done through code executed within the websites both at the server and client level also with the support of code installed on your browser (e.g. cookies). Please refer to the specific "Cookie Policy" section regarding the purpose and management of tracking-related consents.

Content Sharing Data via Social Networks: the websites mentioned in the foreword may include plugins and/or buttons in order to enable content sharing on the Social Networks (Instagram and Facebook) you use.

PURPOSES AND LEGAL BASES OF THE PROCESSING OF PERSONAL DATA
The Data Controller processes Users' data mainly to enable them to access, navigate its site and to be able to respond to any requests voluntarily sent by the user. Any further processing is done only on the basis of legal obligations and on the basis of legitimate interest. For any other processing purposes, explicit consent provided by the User to the Data Controller is required. Specifically, the Controller collects and processes Users' personal data for the following purposes: (a) purposes strictly related and instrumental to administrative-accounting management; b) purposes related to the expected obligations of a legal and fiscal nature provided for by laws, regulations, EU regulations, as well as provisions issued by Authorities and Supervisory and Control Bodies; c) to allow the User to navigate the site; d) respond to User requests sent through the Site; e) allow Users to use the services on the Site; (f) to improve the presentation, features and functionality of the Site and Services; g) purposes related to the evaluation and selection of candidates, or to propose other types of job offers consistent with the professional profile of the interested party. In case of positive evaluation, the purpose will be to prepare the necessary documentation for the establishment of the employment or collaboration relationship; h) with prior consent, contact Users by e-mail, newsletter, mailing list, sms, messaging to send them commercial and promotional communications, special initiatives and discounts. The User is automatically included in a list of contacts to whom e-mail/messaging messages may be sent through the dedicated platforms. Each communication will specify how to object to the processing and stop receiving other communications. In these cases, the provision of data is optional, and failure to provide the data will result in the failure to send commercial communications; (i) with prior consent, profiling and profiling marketing based on the specific cookie disclosure.

For the purposes referred to in (a) to (g), the legal bases identified are Art. 6.1.b) of the GDPR for processing necessary for the execution of pre-contractual/contractual measures/execution of specific requests by the User - Art. 6.1.c) of the GDPR for processing necessary to fulfill legal obligations - Art. 6.1.f) of the GDPR for the pursuit of legitimate interest. For the purposes of (h) and (i) the Controller will process personal data of Users based on their consent - art.6.1.a) of the GDPR.

DATA RETENTION TIMES
Personal data processed by Rococo' S.r.l. will be kept for the time strictly necessary to achieve the purposes for which they were originally collected and, in any case, will no longer be processed following any revocation of the consent given. Where, on the other hand, the processing of personal data should take place in fulfillment of legal, fiscal or judicial obligations, the data may be retained up to a maximum of ten (10) years. With regard to any Cvs voluntarily sent, the Data Controller retains the Curricula for the time strictly necessary to fulfill the indicated purposes i.e. 12 months from the date of receipt; after this period they will be deleted/destroyed. Browsing data do not persist for more than seven days and are deleted immediately after their aggregation (except for any need to ascertain crimes by the Judicial Authority). In the event of a complaint, personal data are retained for the duration of the complaint itself and/or the out-of-court and/or judicial proceedings until the time limits for judicial protections and/or appeal actions are exhausted. Regarding cookies and other statistical/tracking/filtering systems, please refer to the information contained in the cookie policy for retention.

 PROVISION OF DATA
Apart from what is specified for navigation data, the user is free to provide his or her own personal data. If the conferment of personal data takes place at later stages, additions may be provided to the information previously given and new processing consents may be requested.

METHODS OF PROCESSING
The Data Controller has taken all necessary appropriate technical and organizational measures to ensure a high level of security in order to minimize the risks inherent in the confidentiality, availability and integrity of personal data collected and processed.

RECIPIENTS OF PERSONAL DATA - COMMUNICATION AND DISSEMINATION OF PERSONAL DATA
The personal data processed will be subject to communication to well-defined parties. On the basis of the roles and work tasks performed, internal and external personnel are entitled to the processing within the limits of their competence and in accordance with the instructions given to them by the Controller. The same data may be communicated to the legitimized subjects, appointed as Data Processors ex art.28 of the GDPR, such as but not limited to, subjects with functions of systems administration, hosting services and maintenance of the technological part of the site, managers of platforms for sending newsletters and messaging, consultants and subjects whose legal provisions or EU regulations recognize the right to access the data.

TRANSFER ABROAD OF PERSONAL DATA
For some of the purposes your Personal Data may be transferred outside the EU. In these cases, the Controller will take all appropriate contractual measures to ensure an adequate level of protection of Personal Data, including, among others, Standard Contractual Clauses approved by the European Commission. The web hosting service is located in the EU.

RIGHTS OF THE DATA SUBJECT
Users may, at any time, exercise their rights under Articles 15 et seq. of Regulation (EU) 2016/679. The aforementioned rights may be exercised by sending an appropriate request to the Data Controller through the contact channels indicated in this notice. With reference to Article 7 of GDPR 2016/679, the data subject may revoke the consent given at any time by notifying the Data Controller.

RIGHT TO COMPLAIN
Data subjects who believe that the processing of personal data relating to them carried out through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for in Article 77 of the Regulation itself, or to take appropriate legal action (Article 79 of the Regulation).

COOKIE POLICY
For the use of cookies, please refer to the appropriate section "Cookie Policy" where an appropriate disclosure is made.

LINKS TO THIRD PARTY SITES
Rococo' S.r.l. cannot under any circumstances be held responsible for processing carried out through or in relation to third party sites. Therefore, users are invited to pay the utmost attention in this regard, viewing the conditions of use and privacy and cookie policies published on the various sites/portals/social networks visited.

CHANGES AND UPDATES
This Policy is updated and applicable as of 03/04/2025. Any further changes will be communicated to Users by means and times deemed most appropriate by the Owner, in particular through posting on the Site.