Privacy Policy
Data Controller
The Data Controller for the personal data collected through the website www.laburrasca.it is Gea Di Alban Mangjolli E C. Sas, VAT No. 07493420488, with registered office at Via Del Ponte All’Asse 19, 50144 Florence (FI), Italy.
For any request regarding privacy or the processing of personal data, you can contact the Data Controller at info@laburrasca.it.
Personal Data Processed and Purposes
Through the website, personal data voluntarily provided by users may be collected, for example through contact and reservation forms, such as name, email address, phone number, messages and information relating to the reservation.
This data is used to manage user requests, reservations, communications with the restaurant and provide the requested services.
During browsing, technical data may also be collected, such as information about the device, browser, IP address and use of the website. Any use of statistical or marketing cookies takes place in accordance with the preferences expressed by the user through the cookie banner.
For more information about the cookies used, please refer to the Cookie Policy.
Legal Basis for Processing
The data provided through contact and reservation forms is processed in order to respond to user requests and manage reservations and the requested services, pursuant to Article 6(1)(b) of the GDPR.
Where necessary, certain data may be processed to comply with legal obligations, pursuant to Article 6(1)(c) of the GDPR.
Technical data necessary for the security and proper functioning of the website may be processed on the basis of the Data Controller’s legitimate interest, pursuant to Article 6(1)(f) of the GDPR.
Non-essential statistical or marketing cookies and tools are used only with the user’s prior consent, pursuant to Article 6(1)(a) of the GDPR.
Provision of personal data
Providing the information marked as mandatory in the contact and reservation forms is necessary to process the request or reservation. If this information is not provided, we will not be able to complete the requested service.
Data Retention
Personal data provided through contact and reservation forms is retained for the time necessary to manage the request or reservation and, subsequently, for a maximum period of 24 months, unless a longer retention period is required to comply with legal obligations or for the establishment, exercise or defence of legal claims.
Any administrative, tax or accounting data arising from the relationship with the customer is retained for the periods required by applicable law.
With regard to cookies and similar technologies, the applicable retention periods are specified in the Cookie Policy.
Recipients of Data and External Services
Personal data may be processed by service providers that supply the technical and organisational services necessary for the operation of the website and the management of user requests, such as hosting providers, email services, website maintenance services and tools used to manage contact and reservation forms.
The website also uses third-party services, including Google Maps and, with the user’s prior consent, statistical analytics and marketing tools. These services may process technical data relating to browsing, such as IP address, device information and website usage data.
For users in the European Economic Area, Google services are generally provided by Google Ireland Limited. Google Policies
Where applicable, service providers that process personal data on behalf of the Data Controller operate under agreements that comply with applicable data protection laws.
Transfers of Data to Third Countries
Some service providers used by the website may also process personal data outside the European Economic Area.
In such cases, the transfer of data takes place in accordance with Articles 44 et seq. of the GDPR, on the basis of an adequacy decision by the European Commission or through other safeguards provided for under applicable law.
Data Subject Rights
Where provided for under the GDPR, users may exercise the right to access their personal data, request rectification or erasure, restrict processing, data portability and object to processing, as well as withdraw consent previously given, without affecting the lawfulness of processing carried out before the withdrawal.
Requests may be sent to info@laburrasca.it.
The user also has the right to lodge a complaint with the Italian Data Protection Authority, in accordance with the procedures provided for by applicable law.
Privacy Policy Updates
This Privacy Policy may be updated over time, including in the event of changes to the services used by the website or to applicable law.
Users are encouraged to review this page periodically to check for any updates.
Last updated: 28 September 2026.
