1. Data Controller
This policy applies to all users who visit the Pizzeria Giotto website and use the online booking services.
PIZZERIA GIOTTO S.R.L.
Registered office: PIAZZA DI SANTA MARIA NOVELLA 24/R - 50123 - FLORENCE (FI), Italy
REA: 685131
PEC: pizzeriagiotto@pec.it
Email: info@pizzeriagiotto.it
Pizzeria Giotto S.r.l. is the Data Controller (art. 4(7) GDPR) for all personal data collected through this website, including browsing data, cookies, and booking data.
2. Data Collected and Purposes
The following table describes the personal data collected through the website, the purposes, and the legal basis of processing.
| Category | Specific data | Purpose | Legal basis |
|---|---|---|---|
| Browsing data | IP address, browser User-Agent, request timestamps, visited pages | Website technical management, usage statistics, system security | Legitimate interest — art. 6(1)(f) GDPR |
| Booking data (via Mesalys widget) | First name, last name, email, phone, date, time, party size, notes | Booking management, email/phone confirmation, service organization | Contract execution (booking) — art. 6(1)(b) GDPR |
| Contact data | Email, message sent via contact form | Responding to information requests, customer support | Explicit consent — art. 6(1)(a) GDPR |
Data we do NOT collect
- ✓Payment data (bookings are free and do not require credit card)
- ✓Biometric or health data (unless voluntarily communicated in the Notes field for allergies)
- ✓Real-time geographic location
- ✓Login credentials (the website does not require registration)
3. Cookies and Tracking Technologies
This section serves as a Cookie Policy pursuant to the Privacy Authority's provision of June 10, 2021.
Technical Cookies (always active — no consent required)
Technical cookies are necessary for the website to function and cannot be disabled through our tools. You can block them from your browser, but some features may not be available.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| orejime-consents | HTTP Cookie | Stores expressed cookie preferences (Orejime). Necessary to not re-display the banner on each visit. | 365 days |
Analytics Cookies (require explicit consent)
Analytics cookies are installed ONLY if you accept the "Traffic Analysis" category in the cookie banner. If you decline, none of these cookies are set.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| _ga | Cookie | Google Analytics 4 — identifies unique users (anonymized) | 2 years |
| _gid | Cookie | Google Analytics 4 — distinguishes distinct sessions | 24 hours |
| _ga_YHZD2WSW8S | Cookie | Google Analytics 4 — session state for GA4 property | 2 years |
Manage your preferences
You can change your choices at any time by clicking the 🍪 Cookie button at the bottom right. Revocation is immediate: analytics cookies are automatically deleted and GA4 is no longer loaded.
4. Analytics and Marketing
No analytics or marketing tools are activated without your consent. If you declined analytics cookies, this section does not apply to you.
Google Analytics 4
Pizzeria Giotto uses Google Analytics 4 to measure the usage of its website in an aggregated and anonymous manner. Tracked events concern navigation (visited pages, dwell time), booking widget functionality, and completed bookings. This tracking only occurs with your explicit consent.
Eventi tracciati: Tracked events: page views, external link clicks, booking widget opening, date/time/party size selection, booking completion.
Provider: Google LLC (USA). Extra-EU transfer guarantee: EU-U.S. Data Privacy Framework + Standard Contractual Clauses.
If you decline analytics cookies in the banner, no data is transmitted to Google.
5. Data Retention
| Category | Period | Reason |
|---|---|---|
| Booking data (personal info, time, notes) | 12 months from booking date | Service management, booking history for regular customers, tax and accounting obligations |
| Browsing logs (IP, User-Agent, timestamp) | 90 days | Legitimate interest in system security and abuse prevention |
| Consent cookie (orejime-consents) | 365 days | Necessary to remember cookie choice and not re-display the banner |
| Analytics data (if consent given) | 14 months (Google Analytics standard retention) | Google Analytics policy. Expires automatically or you can reset it by revoking consent. |
6. Data Subject Rights
As a data subject, you can exercise the following rights with respect to Pizzeria Giotto S.r.l. (arts. 15-22 GDPR):
Access
Obtain confirmation and copy of data processed by Pizzeria Giotto.
Rectification
Correct inaccurate or incomplete data in our possession.
Erasure
Request deletion of data, except for legal retention obligations (e.g., tax).
Restriction
Obtain restriction of processing pending verification or dispute.
Portability
Receive your data in a structured, commonly used, machine-readable format.
Objection
Object to processing based on legitimate interest, except for overriding legitimate grounds.
How to exercise rights
Send your request to pizzeriagiotto@pec.it or info@pizzeriagiotto.it. We will respond within 30 days (art. 12 GDPR), with possible extension of 60 days in complex cases.
Right to lodge a complaint
You can lodge a complaint with the Data Protection Authority:
www.garanteprivacy.it →7. Security Measures
- •All communications occur exclusively via HTTPS/TLS 1.2+ (encryption in transit).
- •The Mesalys booking widget uses encrypted connections to transmit data to the management system.
- •Access to booking data is limited to authorized pizzeria staff.
- •We perform periodic backups of data with cryptographic protection.
- •In case of a data breach with risk to the rights and freedoms of data subjects, Pizzeria Giotto will notify the Authority within 72 hours (art. 33 GDPR) and, if necessary, directly inform the data subjects (art. 34 GDPR).
8. Policy Updates
This policy may be updated to reflect regulatory, technical, or operational changes. The current version is always available on this website.
For any questions: pizzeriagiotto@pec.it or info@pizzeriagiotto.it