1. Introduction

Welcome to SISUPONZU. This Privacy Policy explains how we collect and process personal data when you visit and use sisuponzu.com, contact us, interact with our website, or use any services available through the website.

We process personal data in accordance with applicable data protection laws, including Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.

This policy applies to the SISUPONZU website and does not necessarily apply to third-party websites or platforms that may be linked from our website.

2. Data Controller

The data controller responsible for processing your personal data is:

[LEGAL COMPANY / BUSINESS NAME]

Registered office:
[FULL LEGAL ADDRESS]

VAT / Tax ID: [VAT NUMBER / TAX ID]

Email: [PRIVACY EMAIL]

Phone: [PHONE NUMBER]

IMPORTANT: Replace every [PLACEHOLDER] before publishing.

For privacy-related questions or requests, you can contact us using the details above.

3. What Personal Data We Collect

Depending on how you interact with our website, we may collect different types of information.

Information You Provide

For example:

  • First and last name
  • Email address
  • Telephone number
  • Restaurant selection
  • Message or inquiry
  • Information included in contact forms
  • Information you provide when communicating with us

We only request information that is reasonably necessary for the relevant purpose.

Technical Information

When you visit our website, certain technical information may be collected automatically, such as:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Pages visited
  • Date and time of access
  • Referring website
  • Technical information relating to your interaction with the website

Some of this information may be collected through cookies or similar technologies.

4. How We Use Your Information

We may process your personal data for purposes including:

Contact & Customer Support

To:

  • Respond to your questions
  • Respond to contact forms
  • Communicate with you about your inquiry
  • Provide customer assistance

Restaurant Services

Where applicable, to:

  • Handle restaurant-related requests
  • Respond to takeaway inquiries
  • Communicate about services requested by you
  • Provide information about our restaurants

Website Operation

To:

  • Operate and maintain the website
  • Improve website performance
  • Detect technical problems
  • Protect the website from abuse or unauthorized activity

Legal Obligations

To comply with applicable legal, accounting, tax, regulatory, or law-enforcement requirements.

Marketing

If you have provided the appropriate consent, we may use your contact information to send promotional communications, news, offers, or updates from SISUPONZU. You can withdraw marketing consent at any time.

5. Legal Basis for Processing

Depending on the circumstances, we process personal data based on one or more of the following legal grounds under the GDPR:

  • Consent — where you have voluntarily provided consent for a specific purpose.
  • Contract or Pre-Contractual Measures — where processing is necessary to provide a service requested by you or take steps at your request before entering into an agreement.
  • Legal Obligation — where processing is necessary to comply with a legal requirement.
  • Legitimate Interests — where processing is necessary for our legitimate interests, provided those interests do not override your fundamental rights and freedoms.

6. Contact Forms

When you submit a form through our website, the information you provide may be used to respond to your request. Depending on the form, this may include:

  • Name
  • Email
  • Phone
  • Restaurant selection
  • Subject
  • Message

We do not use contact-form information for unrelated marketing purposes unless you have separately provided the necessary consent.

7. Cookies

Our website may use cookies and similar technologies. Cookies may be used for purposes such as:

  • Essential website functionality
  • Security
  • Remembering preferences
  • Website analytics
  • Performance monitoring
  • Marketing, where applicable and where legally required

Some cookies may be placed by third-party services integrated into our website. For more information, please see our Cookie Policy.

8. Third-Party Services

Our website may use third-party services to operate certain features. Depending on the final website configuration, these may include services such as:

  • Website hosting
  • Google Maps
  • Google Analytics
  • Contact-form services
  • Social media platforms
  • Embedded content
  • Payment or ordering platforms
  • Email services

These third parties may process certain information according to their own privacy policies. The final published Privacy Policy should list the actual third-party services installed on the website, rather than listing services that are not actually being used.

9. Social Media

SISUPONZU may provide links to social media pages, including Facebook and Instagram. When you visit an external social media platform, your interaction is governed by that platform’s own privacy policy and terms. SISUPONZU does not control how third-party social networks process your personal data.

10. Data Sharing

We may share personal data with trusted service providers where necessary to operate our website or provide requested services. These may include:

  • Hosting providers
  • Website maintenance providers
  • IT and security providers
  • Email providers
  • Analytics providers
  • Marketing providers
  • Payment providers
  • Professional advisers
  • Authorities where required by law

We do not sell your personal information.

Where third parties process personal data on our behalf, appropriate contractual and organizational safeguards should be implemented as required by applicable law.

11. International Data Transfers

Some third-party service providers may process personal data outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we will take appropriate measures required under applicable data protection law, including using an adequacy decision or appropriate safeguards where applicable.

12. How Long We Keep Your Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

  • Provide requested services
  • Respond to inquiries
  • Meet legal obligations
  • Resolve disputes
  • Enforce agreements
  • Maintain business records

Different categories of data may have different retention periods depending on the purpose and applicable legal requirements.

13. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, unauthorized disclosure, and other unlawful processing.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

14. Your GDPR Rights

Depending on the circumstances and applicable law, you may have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — request correction of inaccurate or incomplete information.
  • Erasure — request deletion of your personal data in certain circumstances.
  • Restriction — request restriction of processing in certain circumstances.
  • Objection — object to certain processing, including processing based on legitimate interests.
  • Data Portability — request your personal data in a structured, commonly used, machine-readable format where the right applies.
  • Withdraw Consent — where processing is based on consent, you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

15. How to Exercise Your Rights

To exercise your privacy rights, contact us at:

[PRIVACY EMAIL]

Subject: Privacy Request – SISUPONZU

We may need to verify your identity before completing certain requests. We will respond within the applicable legal timeframe.

16. Right to Lodge a Complaint

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority. For Italy, this is the Garante per la protezione dei dati personali.

17. Children’s Privacy

Our website is not specifically directed toward children. We do not knowingly collect personal data from children where such collection is not permitted by applicable law. If you believe that a child has provided personal information to us improperly, please contact us.

18. Links to Other Websites

Our website may contain links to third-party websites. Examples include Facebook, Instagram, Google Maps, ordering platforms, and other external services. We are not responsible for the privacy practices or content of third-party websites. We encourage users to review the privacy policies of those websites.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, technology, applicable legislation, or how we process personal data. When we update this policy, we will change the Last Updated date at the top of this page.

20. Contact Us

If you have questions about this Privacy Policy or how SISUPONZU processes personal data, contact:

[LEGAL COMPANY NAME]

📍 [ADDRESS]

📧 [PRIVACY EMAIL]

📞 [PHONE]

IMPORTANT: Replace every [PLACEHOLDER] before publishing.