Privacy Policy

1. Data controller

The data controller is Giacomo Pochini · email info@foodpok.it.

2. What data I process

• Browsing data: IP address, browser, device and pages visited, which the server records automatically in technical logs for security and to operate the site.
• Data you send me: name, email, phone number, event details (occasion, date, time, guests, place) and any notes, when you use the booking form, email, phone or WhatsApp.
• Cookie choices: a random consent ID, the options you chose, the date, language, page, truncated IP address and browser, kept as proof of consent.
• Statistical data, only if you accept statistics cookies: see the Cookie Policy.

3. Purposes and legal bases

• Replying to your requests and preparing a tailored proposal: steps taken at your request prior to a contract (Art. 6(1)(b) GDPR).
• Sending you an automatic confirmation that your request has been received: same legal basis.
• Keeping proof of your cookie choices: legal obligation (Art. 6(1)(c) and Art. 7(1) GDPR).
• Site security and prevention of abuse (for example spam through the forms): legitimate interest (Art. 6(1)(f) GDPR).
• Statistics on how the site is used: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. How long I keep the data

• Requests and correspondence: for as long as needed to handle the request and any resulting relationship, and in any case no longer than 24 months after the last contact, unless a longer period is required by law (e.g. tax records).
• Consent register: 12 months, then automatically deleted.
• Server technical logs: for the period set by the hosting provider, normally a few weeks.

5. Who processes the data

The data are processed by me and by providers acting as data processors: Hostinger International Ltd. (hosting and email, servers in the EU) and, only with your consent, Google Ireland Ltd. (statistics). If you choose to write to me on WhatsApp, your data are also processed by WhatsApp Ireland Ltd. according to its own policy. Data are never sold or disclosed to third parties for marketing.

6. Transfers outside the EU

Google may process data in the United States: the transfer is covered by the EU–US Data Privacy Framework adequacy decision and by the Standard Contractual Clauses.

7. Your rights

You can ask me at any time for access to, rectification or erasure of your data, restriction of processing, portability, and you can object to processing (Articles 15–22 GDPR). You can withdraw consent without affecting the lawfulness of processing carried out before withdrawal. Just write to info@foodpok.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the supervisory authority of your country.

8. Providing data

Providing data through the form is optional, but without the required fields I cannot reply to your request. No automated decision-making or profiling takes place.