1. Data controller

The data controller is Kiki S.n.c. di Catellazi Eva & C., registered office at Via Galileo Galilei 1, 23032 Bormio (SO), Italia, VAT/Tax code 01044120143. Legal representative: Fabio Meli.

Email: melifabio1985@gmail.com
PEC (certified email): kiki.snc@pec.it
Phone: +39 349 4129205

2. Data we collect

We only process data strictly necessary for the purposes set out below:

Contact data (name, phone, email) you voluntarily provide to book a table, request information or organise an event.
Browsing data automatically collected by web servers (IP address, user-agent, visited pages) in anonymised form for technical and statistical purposes only.

The site does not profile users, does not use marketing cookies nor advertising tracking technologies.

3. Purposes and legal basis

Reservation and contact request management — legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
Accounting and tax compliance if receipts or invoices are issued — legal basis: legal obligation (art. 6.1.c GDPR).
IT security and aggregate website statistics — legal basis: controller's legitimate interest (art. 6.1.f GDPR).

4. Processing and retention

Reservation and contact data: kept as long as needed to handle your request and, unless otherwise consented, deleted within 12 months.
Accounting data: 10 years as required by tax law.
Technical site logs: up to 6 months unless an investigation requires longer retention.

5. Recipients and transfers

Data may be processed on our behalf and under our instructions by technical providers (processors under art. 28 GDPR), in particular the hosting provider Vercel Inc. and the CMS Sanity.io. They may perform transfers outside the EU covered by Standard Contractual Clauses of the European Commission (art. 46 GDPR).

We do not sell or rent data to third parties for marketing purposes.

6. Your rights

You can exercise the following rights at any time (arts. 15-22 GDPR):

access to your data;
rectification of inaccurate data;
erasure (right to be forgotten);
restriction of processing;
objection to processing;
data portability;
withdrawal of consent (if given), without affecting prior processing.

To exercise these rights write to melifabio1985@gmail.com or via PEC kiki.snc@pec.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

7. Cookies

The site only uses technical cookies and, with consent, anonymised analytics cookies. See details in the Cookie policy.

8. Changes

We may update this policy to reflect regulatory or service changes. The last update date is at the bottom of this page.