Privacy Policy

Data controller

Enoteca Ristorante il pozzo snc di Battistessa e Davoli, VAT number 01397650357, REA RE-182376, based at Viale Antonio Allegri, 7, 42121 Reggio Emilia (RE), Italy.

For any request about data processing: ilpozzo@gmail.com.

What data we process

Technical browsing data: collected automatically by the infrastructure hosting the site (Cloudflare) purely for operation and security — IP address, browser/device type, pages visited, date and time of access. We do not use it to identify visitors.

Booking form data: name, date, time, number of guests and any notes you type into the form on this site. This data is not saved on our servers: the form composes a message that you open and send yourself, from your own phone, on WhatsApp. From that point it is an ordinary WhatsApp message, governed by WhatsApp/Meta's own privacy notice, not ours.

Data you send us directly: if you contact us by email, phone or WhatsApp, we process the data you provide (name, contact details, message content) only to reply or handle your request/booking.

Statistical data (only with your consent): if you accept Google Analytics cookies from the site's banner, we collect aggregate data on pages visited, traffic source and device type. See the Cookie Policy for details.

Map data: on the Contact page the Google Maps embed does not load by itself, only if you press «Show the map». From then on Google may record data according to its own notice — see the Cookie Policy.

Why we process this data

To answer requests and manage bookings (performance of pre-contractual steps at your request).

To ensure the site's security and correct operation (controller's legitimate interest).

To understand and improve how the site is used, only if you consent to Google Analytics (consent, revocable at any time).

Who we share data with

We do not sell or share your data with third parties for commercial purposes. Data may pass through the following providers, each responsible for processing under its own notice:

• Cloudflare, Inc. — site hosting and security.
• Google LLC — Google Analytics (only if you consent) and Google Maps (only if you press «Show the map» on the Contact page).
• WhatsApp Ireland Ltd / Meta Platforms — only for the message you send yourself when booking on WhatsApp.

International data transfers

Google and Meta operate infrastructure outside the European Economic Area as well (notably in the United States). When their services are active (only if you press «Show the map» on the Contact page, only with your consent for Analytics, always for WhatsApp, which you choose to use), the transfer relies on the safeguards these providers adopt under the GDPR (European Commission standard contractual clauses and, where applicable, the EU-US Data Privacy Framework adequacy decision). See their respective notices for details.

How long we keep data

Technical browsing data is kept for the minimum time needed for service security. Google Analytics statistical data is kept for 14 months. We do not keep booking data on our servers. Data you send us directly (email, WhatsApp) stays in our inbox/chat until you or we delete it. For cookies, see the retention periods in the Cookie Policy.

Your rights

As a data subject you can ask us at any time for: access to your data, rectification, erasure, restriction of processing, portability and objection (GDPR arts. 15-22). To exercise them, write to ilpozzo@gmail.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) if you believe the processing breaches the regulation.

Minors

The site is not intended to knowingly collect data from minors under 16.

Changes to this notice

We may update this notice over time, for example if the services used by the site change. The date at the top of the page shows the last update.