This Privacy Policy describes how the personal data of users visiting the website www.ristorantegallonero.it is processed.

Data Controller

NOVA Snc di Rocco Capraro e Rocco Tomasiello
Via del Porrione, 65-67
53100 siena (SI)
P. IVA IT01483960520
Email: [email protected]

Types of data processed

While browsing the website, technical data and information relating to website usage may be processed, including:

• IP address;
• date and time of the request;
• requested page;
• browser and device type;
• operating system;
• technical connection data;
• statistical information about browsing activity;
• data voluntarily provided by the user.

Data voluntarily provided by users

Voluntarily sending communications by email, contact forms or other tools available on the website involves processing the data necessary to respond to the request. Such data may include, for example, first name, surname, email address, telephone number and the content of the communication.

Registration and website access

Where registration or login features are available, the data provided by users is processed to enable account creation and management and access to restricted features. Access may also be provided through external services, such as WordPress.com, where such options are available.

WhatsApp Business

If users choose to contact the editorial team or the Data Controller through WhatsApp, the data shared through this service is processed exclusively to manage the communication and respond to the request. The use of WhatsApp is also subject to the terms and privacy policy of the relevant provider.

Website security and protection

Cloudflare

The website uses Cloudflare to improve security, prevent attacks, limit automated or malicious traffic and optimise content delivery. As part of these activities, IP addresses, technical request information and data relating to devices and connections may be processed.

Google reCAPTCHA

Google reCAPTCHA may be used in certain sections of the website to distinguish genuine users from automated access and prevent spam and abuse.

Analytics and measurement

Google Analytics 4

The website uses Google Analytics 4 to obtain statistical information about website usage and understand how users interact with pages and content. The measurement ID used is: G-2MP65FQKKX. The data collected may include technical device information, pages viewed, browsing duration and behaviour, traffic sources and events relating to website usage.

Jetpack / WordPress.com Stats

The website may use services provided by Jetpack and WordPress.com to obtain aggregated statistics relating to visits and content viewed.

Content from external platforms

YouTube

The website may embed videos and other content from YouTube. When such content is loaded, certain information may be transmitted to Google. The website may also use YouTube Data API and YouTube OAuth authentication systems to access and manage content connected to the platform.

Marketing and Meta Pixel

The website uses Meta Pixel, provided by Meta Platforms, to measure interactions with the website and evaluate the effectiveness of activities carried out on Meta services. Meta Pixel activation is linked to the preferences expressed by users through the consent management system.

Fonts and external resources

The website may use graphic and typographic resources such as Google Fonts and Font Awesome. Loading resources provided by third parties may involve transmitting the IP address and other technical information necessary to deliver the resource.

Purposes of data processing

Personal data may be processed to:

• ensure website operation and security;
• provide requested content and services;
• respond to user communications;
• manage accounts and authentication, where applicable;
• analyse website usage and performance;
• prevent fraud, spam and unauthorised access;
• comply with legal obligations;
• carry out measurement and marketing activities, where applicable.

Legal basis for processing

Depending on the purpose, processing may be based on the performance of a service requested by the user, compliance with legal obligations, the Data Controller’s legitimate interest in ensuring the security and proper functioning of the website, or the data subject’s consent where required.

Data retention

Personal data is retained for the period necessary to fulfil the purposes for which it was collected and, where applicable, for the periods required by relevant legislation. Retention periods for data collected by third-party services may be determined by the respective providers.

Data disclosure and transfers

Data may be processed by technical service providers used for website delivery, security, hosting, measurement and operation. Some providers may also process data outside the European Economic Area, subject to the safeguards required by applicable legislation.

Data subject rights

Where provided for by applicable legislation, data subjects may exercise their rights of access, rectification, erasure, restriction of processing, objection and data portability, and may withdraw previously given consent. Requests may be sent to: [email protected] or to the certified email (PEC) address: . Data subjects may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Cookies

For more information about the use of cookies and similar technologies, please refer to our Cookie Policy.

Changes to this Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in legislation, technology or the services used by the website.

Last updated: ottobre 2026.