Privacy policy
Last updated: 21 October 2026
This notice explains how we process the personal data of people who visit orbacanocia.it or contact us, under Regulation (EU) 2016/679 (GDPR).
1. Data controller
Madreperla S.r.l., registered office at Via Giuseppe Sirtori 3, 20129 Milano (MI), Italy, VAT no. IT09888440964, operator of the Orba Canocia restaurant, Via Bologna 1027/1029, 44124 San Martino (FE), Italy.
Email: info.orbacanocia@gmail.com · Phone: +39 0532 712544
2. What data we process
- Browsing data. The site is hosted and protected by Cloudflare, which automatically logs some technical data (IP address, browser type, date and time of the visit) for security and operational purposes. We do not use this data to identify you.
- Data you give us. If you call, email or message us on social media, we use the details you provide (name, phone, email, party size, any allergies or intolerances) only to reply and manage your booking.
- Online booking. The "Book online" button opens Plateform, the platform we use to manage bookings. We use the details you enter (name, phone, email, party size, any notes) to manage your booking; Plateform's own privacy notice also applies to the platform itself.
- Promotional messages. Only if you give us your consent (for example by ticking the relevant box when booking) we use your email address and phone number to send you news about events, special evenings and offers by email or WhatsApp. Consent is optional: you can book without giving it.
- Google Maps. The map is loaded only if you click "Show the map". From then on Google may collect data (such as your IP address) and set cookies under its own policy.
- Instagram and Facebook. Links to our profiles are plain links: no data is sent to these networks until you open them.
The site has no contact forms and uses no analytics or profiling tools.
3. Purposes and legal basis
- Replying to your requests and managing bookings: pre-contractual measures or performance of a contract (Art. 6(1)(b) GDPR).
- Allergy and intolerance information you choose to share: only to serve you safely, with your explicit consent (Art. 9(2)(a) GDPR).
- Promotional messages by email or WhatsApp: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- Security and proper functioning of the site: legitimate interest (Art. 6(1)(f) GDPR).
- Tax and legal obligations: legal obligation (Art. 6(1)(c) GDPR).
4. How long we keep it
Contact and booking data are kept for as long as needed to handle your request and no longer than 12 months. Data used for promotional messages is kept until you withdraw your consent and no longer than 24 months from your last consent. Browsing data is kept by the hosting provider for the technically necessary time. Tax records are kept for 10 years as required by law.
5. Who may receive it
Data may be processed by providers that help us run the website, email and bookings (e.g. Cloudflare, Google, Plateform and, for WhatsApp messages, WhatsApp/Meta), appointed as processors where required. We never sell your data.
Some providers are based in the United States; in these cases transfers rely on the EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses.
6. Your rights
You may at any time request access, rectification, erasure, restriction, portability, object to processing or withdraw your consent (Arts. 15–22 GDPR) by writing to info.orbacanocia@gmail.com. To stop promotional messages you can also use the unsubscribe link in every email or reply "STOP" to our WhatsApp message. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
7. Changes
We may update this notice; the date above shows the latest version. For cookies, see our cookie policy.