Privacy policy
Last updated: August 2026
This notice describes the methods of processing the personal data of users who consult and use the Bar Ristorante Pizzeria Caffè Le Logge website , in compliance with Regulation (EU) 2016/679 (“GDPR”) and applicable national legislation on the protection of personal data.
1. Data controller
The Data Controller is:
Bar Restaurant Pizzeria Café Le Logge
Piazza Giacomo Matteotti, 32
50022 Greve in Chianti (FI) – Italy
VAT number: IT01754140489
Email: info@pizzeriacaffelelogge.it
Telephone: +39 055 853038
For any requests regarding the protection of personal data, you can contact the Data Controller using the contact details above.
2. Types of data processed
While browsing the site, the following categories of data may be processed.
Browsing data
The computer systems and software procedures used to operate the site may acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols.
These may include:
IP address;
browser type;
operating system;
device type;
date and time of the request;
pages visited;
URI/URL addresses of the requested resources;
technical information relating to navigation;
data relating to the operation and security of the site.
Data provided voluntarily by the user
The voluntary sending of communications via email, telephone, WhatsApp, or other channels indicated on the site entails the acquisition of the data necessary to manage and respond to the request.
They can be treated, for example:
name and surname;
e-mail address;
telephone number;
information relating to booking requests;
date, time and number of people relating to the reservation;
content of communications sent;
any additional information voluntarily provided by the user.
Users are advised not to provide unnecessary information, particularly data belonging to special categories pursuant to Article 9 of the GDPR, unless strictly necessary.
Data collected through statistical tools
With the user’s prior consent, the site may collect information relating to navigation through statistical analysis tools such as Google Analytics 4 .
Such information may concern, for example:
pages visited;
duration of the visit;
interactions with pages;
approximate origin of the visit;
device type;
browser used;
events and actions performed on the site;
technical information relating to the browsing session.
This data is used to understand how users interact with the site and improve its content, structure, and performance.
3. Purposes and legal bases of the processing
Site operation and security
The necessary technical and navigation data are processed to allow the site to function correctly, ensure its security, and prevent abuse or anomalies.
Legal basis: legitimate interest of the Data Controller, pursuant to art. 6, paragraph 1, letter f) of the GDPR.
Responding to user requests
The data communicated via email, telephone, WhatsApp, or other channels are used to respond to user requests.
Legal basis: Implementation of measures taken at the request of the data subject, pursuant to Art. 6, paragraph 1, letter b) of the GDPR.
Booking Management
The data provided by the user is used to manage booking requests and information relating to the services offered.
Legal basis: execution of pre-contractual or contractual measures requested by the data subject, pursuant to Art. 6, paragraph 1, letter b) GDPR.
Statistical analysis of the site
With your consent, we use analytics tools to understand how the site is used, measure its performance, and improve the browsing experience.
Legal basis: consent of the data subject, pursuant to Art. 6, paragraph 1, letter a) of the GDPR.
Consent can be revoked at any time through the cookie preference management system on the site.
Fulfillment of legal obligations
Data may be processed when necessary to fulfill obligations established by law, regulations, or requests from competent authorities.
Legal basis: Art. 6, paragraph 1, letter c) GDPR.
Protection of the Owner’s rights
When necessary, the data may be processed to ascertain, exercise, or defend a right of the Data Controller.
Legal basis: legitimate interest of the Data Controller, pursuant to art. 6, paragraph 1, letter f) of the GDPR.
4. Google Analytics 4
With the user’s consent, the site uses Google Analytics 4 , a web analytics service provided by Google.
Google Analytics allows the Owner to obtain statistical information relating to the use of the site.
The service may process information relating to your device, browser, interactions on the site, pages visited, and other technical data relating to browsing.
Google Analytics is used only after the user has given their consent to the relevant category of cookies or tracking tools.
The user can refuse or withdraw consent at any time through the cookie preferences management panel.
The processing carried out by Google in the context of its services is also governed by Google’s terms and conditions and privacy policy.
5. Google Tag Manager
The site uses Google Tag Manager , a service provided by Google that allows you to centrally manage scripts, tags, and tools integrated into the site.
Google Tag Manager is used as the technical tag management system.
Its configuration must ensure that tools that require user consent, such as Google Analytics 4, are not activated before consent has been given.
Google Tag Manager is not used independently by the Data Controller to create personal user profiles, but it may allow the activation of other tools described in this policy and in the Cookie Policy.
6. Nature of the data provision
Providing data via email, telephone, or WhatsApp is optional.
Failure to provide the necessary information may, however, make it impossible to respond to the user’s request or correctly manage a reservation.
Consent to the use of Google Analytics 4 and other unnecessary tools is optional.
Refusal of consent does not prevent normal navigation of the site and the use of its essential features.
7. Methods of processing
The processing is carried out using computerized, electronic, and, where necessary, paper-based tools.
The Data Controller adopts technical and organizational measures appropriate to the risk in order to protect personal data from loss, destruction, unauthorized access, disclosure, modification, or unlawful use.
8. Retention period
The data is retained exclusively for the period necessary to achieve the purposes for which it was collected.
In particular:
technical data and security logs are retained for the period necessary to ensure the security and functioning of the site;
information requests are kept for the time necessary to manage the communication;
booking data is retained for the period necessary to manage it;
data subject to administrative, fiscal, or legal obligations are retained for the terms established by law;
Google Analytics data is stored according to the settings configured in the relevant service;
In the event of disputes, the data may be retained for the time necessary to protect the Data Controller’s rights.
9. Data recipients
Personal data may be processed by parties who provide services to the Data Controller, including:
hosting and IT infrastructure providers;
email service providers;
statistical and analysis service providers;
Google, in relation to the Google Analytics 4 and Google Tag Manager services;
technicians and professionals responsible for managing and maintaining the site;
administrative, tax or legal consultants;
communications service providers;
public authorities, when required by law.
10. Rights of the interested party
The interested party may exercise, where applicable, the rights provided for in Articles 15-22 of the GDPR, including:
right of access;
right of rectification;
right to erasure;
right to restriction of processing;
right to object;
right to data portability;
right to withdraw consent at any time;
right not to be subjected, in the cases provided for, to decisions based solely on automated processing.
The withdrawal of consent does not affect the lawfulness of the processing carried out before the withdrawal.
Requests can be sent to:
11. Complaint to the Supervisory Authority
Any interested party who believes that the processing of their personal data violates applicable law may lodge a complaint with the Italian Data Protection Authority , without prejudice to any other administrative or judicial remedy.
12. Changes to the Privacy Policy
The Data Controller reserves the right to modify or update this policy in the event of changes in the services offered, the tools used, or the applicable legislation.
The updated version will be published on the website with an indication of the relevant update date.
