Privacy policy

Osteria San Giovanni provides users of the Osteria San Giovanni website (hereinafter, the “Site”, accessible at https://www.osteriasangiovanni.it/) with the following information, in compliance with Article 13 of Regulation (EU) 2016/679 (or General Data Protection Regulation, hereinafter “G.D.P.R.”) and subsequent national implementing legislation (hereinafter jointly referred to with the G.D.P.R. as the “Applicable Privacy Legislation”). During navigation of the Site, information relating to users is collected, which constitutes personal data under the Applicable Privacy Legislation.

This privacy notice is provided exclusively for the above-mentioned Site and not for other websites that may be accessed through links present on it.

 

Data Controller

The data controller of personal data is Osteria San Giovanni, with registered office at Via Tommaso Nani, 8 – 23017 Morbegno (SO) (prenotazioni@osteriasangiovanni.it; tel.: 0342 601120).

 

Types of data processed

Below are specified the data that are processed by Osteria San Giovanni when the user uses the Site.

The user assumes responsibility for any personal data of third parties entered or published on the Site and guarantees that they have the right to communicate or disclose them — thereby releasing Osteria San Giovanni from any liability towards such third parties.

Personal data automatically collected when visiting the Site

  • Browsing data. Osteria San Giovanni automatically collects data about the device used by the user (PC, tablet, mobile phone, or other mobile device) and the connection, including, for example, IP address, date and time of access, information on hardware and software, information on device events, unique identifiers, and crash data.
  • Data on Site usage. Osteria San Giovanni collects information on how the user has used the Site, including, for example, pages of the Site or other content viewed, searches performed, and links to other sites and applications clicked by the user.

Personal data provided directly by the user

  • Optional data
  • Data provided through information requests via e-mail. If the user explicitly and voluntarily sends electronic mail to the addresses of Osteria San Giovanni indicated on the Site to request information, or uses the form available under “Book a table” in the “Book” section, Osteria San Giovanni acquires the e-mail address and any personal data of the user (and/or third parties) included in the body of the message, as well as — for the “Book a table” form — the first name, last name, e-mail address, phone number, and any personal data of the user (and/or third parties) included in the subject and message text.

 

Purposes of processing

Contribute to the functioning of the Site; provide the user with the services offered by Osteria San Giovanni through the Site; protect the vital interests of the user; comply with applicable law or pursue other needs of public interest

  • to operate, measure, improve, and maintain the security of the Site and the services provided through it;
  • to prevent, detect, and mitigate security breaches and potentially prohibited or illegal activities.

Pursue the legitimate interests of Osteria San Giovanni in a manner that does not override the fundamental rights and freedoms of the user

  • to identify and resolve problems encountered by the user when using the Site (for example, blocked or non-functioning pages).

These processing activities protect Osteria San Giovanni’s interest in keeping the Site functional and efficient. They also do not infringe the fundamental rights and freedoms of the user, as they are predictable and common in any website. Furthermore, these activities also benefit the user by allowing the Site to continue operating properly.

 

Methods of processing

The user’s personal data are processed using electronic or telematic tools exclusively for the purposes for which they were collected (see above) and are retained for a defined period according to the criteria indicated in this privacy policy (see below).

Personal data may be accessed and processed by personnel of Osteria San Giovanni, who have been duly instructed on the precautions required by the Applicable Privacy Legislation.

 

Data retention period

The specific retention periods for users’ personal data are documented in the record of processing activities of Osteria San Giovanni (implemented pursuant to Article 30 of the G.D.P.R.).

Users’ personal data are retained (in accordance with the criteria set out in Recital 39 and Article 5(1)(e) of the G.D.P.R.) for the period necessary to ensure that the Site functions and that Osteria San Giovanni provides users with the services offered through the Site. In any case, this period shall not exceed 10 years from collection.

Personal data may be retained for longer periods only if necessary for Osteria San Giovanni to comply with legal obligations or to defend a right in legal proceedings.

Upon expiry of these retention periods, user data are deleted or permanently anonymized.

 

Communication of data

Osteria San Giovanni may disclose the personal data processed only to the entities and for the purposes indicated below.

Combating unlawful acts and security violations

  • Osteria San Giovanni may disclose users’ personal data to third parties engaged in preventing, detecting, and mitigating potentially unlawful acts and security breaches.

Law enforcement, judicial proceedings, and legally authorized cases

  • Osteria San Giovanni may disclose users’ personal data to Judicial Authorities, Public Authorities, or authorized third parties where required by law. More generally, this may occur when necessary to comply with legal obligations or verified requests related to a criminal investigation or alleged unlawful activity, or to respond to claims concerning the rights, property, or safety of Osteria San Giovanni, its employees, or its users.

 

Rights of data subjects

  • obtain confirmation as to whether Osteria San Giovanni processes their personal data;
  • access their personal data and learn their origin, purposes of processing, retention period, and information regarding third parties to whom the data are disclosed;
  • revoke consent at any time, where consent constitutes the legal basis for processing;
  • update or rectify their personal data held by Osteria San Giovanni so that they are always accurate and correct;
  • exercise the so-called right to be forgotten, meaning that their personal data collected by Osteria San Giovanni are erased from databases and/or backup archives;
  • restrict the processing of their personal data by Osteria San Giovanni;
  • object to processing for data processed for reasons of public interest or legitimate interests of Osteria San Giovanni;
  • be informed, within a reasonable time, of any rectification, erasure, or restriction of processing carried out by Osteria San Giovanni, as well as any revocation of such measures and the reasons for it.

The user may exercise these rights by sending a written request without formalities to Osteria San Giovanni by e-mail to prenotazioni@osteriasangiovanni.it.

Upon receipt of such e-mail, Osteria San Giovanni will respond within one month. This period may be extended by two months — with prior notice to the user — depending on the complexity and number of requests.

Osteria San Giovanni reminds the user that, if the response is not considered satisfactory, they may lodge a complaint with the Italian Data Protection Authority (http://www.garanteprivacy.it/) in accordance with the Applicable Privacy Legislation.

 

Changes to the privacy policy

Osteria San Giovanni reserves the right to amend this privacy policy at any time, providing notice to users on this page of the Site.

Users are therefore invited to consult this page frequently, referring to the last update date indicated at the bottom. Unless otherwise specified, in the event of changes, the previous privacy policy will continue to apply to personal data collected up to that point.

Last updated: February 2026

Cookie policy