Privacy Policy
Data controller
The data controller is Trattoria Alle Piante, based at Via Guglielmo Marconi 1, 24027 Nembro (BG), Italy, VAT number IT03175200165. Contact: phone +39 035 510080, email trattoriallepiante@hotmail.it.
What data we process
This site does not collect data through contact or online booking forms: reservations are made only by phone or email, on the user's own initiative. We therefore process: (a) contact details you voluntarily provide by phone or email to arrange a booking or request information; (b) technical data automatically collected by the server (IP address, browser type, pages visited, date and time of the request), needed to operate and secure the site; (c) usage statistics via Umami (self-hosted), in aggregated and anonymous form, with no cookies and no identification of individual users.
Purpose and legal basis
We process your contact details to handle your request or booking (legal basis: performance of an agreement/request made on your own initiative, GDPR art. 6.1.b). Technical browsing data is processed to ensure the security and correct functioning of the site (legitimate interest, GDPR art. 6.1.f). Aggregated statistics via Umami help us understand how the site is used, without identifying individual visitors.
How we process and retain data
Data is processed using IT tools and adequate security measures. The site is hosted on a cloud virtual private server (VPS) located in Germany, within the European Union. Technical server logs are kept for a limited period (approximately 30 days) and then deleted or anonymised. Contact details shared by phone or email are not recorded or stored by this site.
Data sharing and transfers
Data is not shared with third parties or transferred outside the European Union. The technical infrastructure (website and content management system) is hosted on a cloud virtual private server (VPS) located in Germany, within the European Union, managed by the data controller.
Your rights
As a data subject you have the right to access, rectify, erase, restrict the processing of, port, and object to the processing of your data, under articles 15-22 of the GDPR. You can exercise these rights by calling us on +39 035 510080 or writing to trattoriallepiante@hotmail.it.
Complaint to the supervisory authority
If you believe the processing of your data breaches applicable law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Data Protection Officer
No Data Protection Officer (DPO) has been appointed, as this is not a legal requirement for a business of this size and with this type of data processing.
Notice drawn up on 2 July 2026, updated and finalised on 21 August 2026, updated on 26 August 2026 for the activation of Umami.
