Privacy Policy
Information notice on the processing of personal data pursuant to EU Regulation 2016/679 (GDPR).
In compliance with EU Regulation 2016/679 (European Regulation on the protection of personal data) we provide you with the appropriate information regarding the processing of the personal data provided. This notice is given pursuant to art. 13 of EU Regulation 2016/679 and is also inspired by Directive 2002/58/EC, as updated by Directive 2009/136/EC, on cookies.
Personal data that may be processed
«Personal data»: any information relating to an identified or identifiable natural person («data subject»); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
Navigation data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI/URL addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the user's operating system and computing environment.
Data provided by the data subject
The optional, explicit and voluntary sending of communications to the Owner's contact details (the telephone number and e-mail shown on the site) entails the acquisition of the sender's contact details, necessary to reply, as well as any personal data included in the communications.
Cookies
For more information on the cookies used by this website, see the Cookie Policy.
1. Data Controller
The DATA CONTROLLER, pursuant to artt. 4 and 24 of EU Reg. 2016/679, is Osteria dal Nano S.r.l., Corso Vercelli 48, 28100 Novara (NO), Italy. Contact details of the Controller: Tel. +39 0321 466560, e-mail gestione@osteriadalnano.it.
2. Data Protection Officer
A DATA PROTECTION OFFICER (DPO) pursuant to artt. 37–39 of EU Reg. 2016/679 has not been appointed.
3. Purposes, legal basis and retention periods
The personal data provided will be processed, in compliance with the lawfulness conditions under art. 6 of EU Reg. 2016/679, for the purposes indicated below. Processing will be carried out in automated and manual form, with methods and tools designed to ensure maximum security and confidentiality. The personal data collected will be kept for a period not exceeding the achievement of the purposes for which they are processed.
Purpose A) – Browsing the website. Legal basis: legitimate interest (art. 6 letter f). Activities strictly necessary for the functioning of the site and the provision of the browsing service. Retention: for the duration of the browsing session.
Purpose B) – Usage statistics (Google Analytics).Legal basis: consent (art. 6 par. 1 letter a). With the user's consent, statistical information on the use of the site is collected via Google Analytics 4 (Google Ireland Ltd.). Retention: according to the periods set in Google Analytics; consent may be withdrawn at any time via «Cookie preferences».
4. Recipients or categories of recipients of the data
The personal data provided may be shared with parties who will process the data as processors (art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Controller, for the purposes listed above. Specifically, the data may be shared with: the site's hosting and distribution provider; Google Ireland Ltd. for the Google Analytics statistics service; freelancers, firms or companies in the context of assistance and consultancy relationships; competent authorities to fulfil legal obligations, upon request.
5. Nature of the provision and refusal
With the exception of navigation data (necessary to allow browsing of the website), the provision of data is optional. The lack of consent to statistics (Purpose B) does not in any way affect the usability of the site.
6. Rights of the data subjects
You may exercise your rights as set out in artt. 15, 16, 17, 18, 19, 20, 21 of EU Regulation 2016/679, by contacting gestione@osteriadalnano.it or the premises of Osteria dal Nano S.r.l., Corso Vercelli 48, 28100 Novara (NO), Italy. You have the right, at any time, to ask the Data Controller for access to your personal data, their rectification, erasure, restriction of processing and data portability, as well as to object to processing and to withdraw any consent given. Without prejudice to any other administrative or judicial remedy, if you believe that the processing of data concerning you infringes EU Reg. 2016/679, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
7. Changes to this privacy notice
The Controller reserves the right to modify, update, add or remove parts of this privacy notice at its discretion and at any time. To facilitate such checks, the notice will contain the date of update.
Last updated: Novara, 14 July 2026