About us

LA PASTA BUONA S.R.L., located at VIA MICHELE DA CARCANO, 11 in COMO, and LA PASTA TAVERNA S.R.L., located at VIA 5 GIORNATE, 44 in COMO, hereinafter referred to collectively as: “LA PASTA RISTORANTI” within this document, take care of the online privacy of their users. This document, drawn up in accordance with Article 13 of EU Regulation 679/2016 (hereinafter also referred to as the “Regulation”), Italian harmonization legislation, and the measures adopted by the Italian Data Protection Authority (hereinafter collectively referred to as the “Privacy Legislation”), aims to explain how the personal data of users is managed when using this website. In accordance with the Regulation, the processing carried out by LA PASTA RISTORANTI will be based on the principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity, and confidentiality.

Data Controller

The data controller for the processing carried out through the website is LA PASTA RISTORANTI (also referred to simply as “the Data Controller”). For any information regarding the processing of personal data by the Data Controller, please write to the following address: info@lapastacomo.it

Personal Data Processed

We inform you that the Data Controller will process personal data that may consist of an identifier such as your name, surname, identification number, online identifier, or one or more elements characteristic of your identity, suitable for identifying or making identifiable the data subject (hereinafter referred to as “Personal Data”). The Personal Data processed through the Website are as follows: a) Navigation data The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the Site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and/or abuse, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site or third parties. b) Cookies Definitions, characteristics, and application of the legislation Cookies are small text files that the sites visited by the user send and record on their computer or mobile device, to be then retransmitted to the same sites on the next visit. Cookies enable a website to remember the user’s actions and preferences (such as login details, language selection, font size, other display settings, etc.) so that they do not need to be re-entered when the user returns to the site or navigates from one page to another. Cookies are therefore used to perform computer authentication, session monitoring, and storage of information regarding the activities of users who access a site, and may also contain a unique identification code that allows the user’s navigation within the site to be tracked for statistical or advertising purposes. While browsing a site, the user may also receive cookies from sites or web servers other than the one being visited (so-called “third-party” cookies). Some operations could not be performed without the use of cookies, which in certain cases are therefore technically necessary for the functioning of the site itself. There are various types of cookies, depending on their characteristics and functions, and these may remain on the user’s computer for different periods of time: so-called session cookies, which are automatically deleted when the browser is closed; so-called persistent cookies, which remain on the user’s device until a pre-set expiry date. Under current Italian law, the user’s express consent is not always required for the use of cookies. In particular, “technical cookies” do not require such consent, i.e. those used for the sole purpose of transmitting a communication over an electronic communications network, or to the extent strictly necessary to provide a service explicitly requested by the user. In other words, these are cookies that are essential for the functioning of the website or necessary to perform activities requested by the user.

Processing Methods, Purposes, and Legal Basis

Personal data is processed in compliance with the Privacy Policy using automated tools for the time strictly necessary to achieve the purposes of allowing you to browse our website and for any additional services requested. Specific security measures pursuant to Article 32 of the GDPR are observed to prevent data loss, illicit or incorrect use, and unauthorized access. The Data Controller reserves the right to use the data collected to ascertain responsibility in the event of computer crimes against the Site and to comply with legal obligations. The legal basis for the processing of Personal Data for the purposes described is Article 6 (1) (f) of the Regulation, as the processing is necessary to allow you to browse and use the related services. If the user requests specific services, specific information will be provided and consent to processing will be requested. Without prejudice to the above provisions regarding navigation data, the user is free to provide personal data contained in electronic forms and in other sections of this Site or indicated when contacting the Data Controller for the use of additional services, requests for information, and other communications.

Communication and Dissemination of Data

Your Personal Data may be shared with: entities that typically act as data processors, such as the website operator (collectively, “Recipients”). The updated list of data processors is available upon request by writing to the Data Controller at the contact details provided; subjects, entities or authorities to whom it is mandatory to communicate your personal data pursuant to legal provisions or orders from the authorities; persons authorised by the Data Controller to process Personal Data to perform activities strictly related to the provision of services, who have committed themselves to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees of LA PASTA RISTORANTI).

Transfer of Personal Data

The Personal Data processed will be stored for the time strictly necessary to achieve the purposes set out above. In any case, as the processing is carried out for the provision of services, the Data Controller will process the Personal Data for as long as permitted by Italian law to protect its interests (Art. 2946 of the Italian Civil Code and subsequent amendments). Further information on the data retention period and the criteria used to determine this period are provided in the specific information notices relating to the services requested and may in any case be requested by writing to the Data Controller at the addresses indicated.

Conservazione Dei Dati

The Personal Data processed will be stored for the time strictly necessary to achieve the purposes set out above. In any case, as the processing is carried out for the provision of services, the Data Controller will process the Personal Data for the time permitted by Italian law to protect its interests (Art. 2946 of the Italian Civil Code and subsequent amendments). Further information on the data retention period and the criteria used to determine this period are provided in the specific information notices relating to the services requested and may in any case be requested by writing to the Data Controller at the addresses indicated.

Rights of the data subject

In relation to the processing of your data, you may exercise the rights provided for in Articles 15 to 22 of the GDPR, consisting of the right to request access to personal data, rectification, integration or deletion of the same, limitation of processing or opposition to processing and, where applicable, the right to portability by sending a communication addressed to info@lapastacomo.it

PASTA RISTORANTI also reminds you that you can always exercise your right to lodge a complaint with the Data Protection Authority by visiting the page www.garanteprivacy.it