Privacy and cookies

This notice explains how Spaccio Pasta processes the personal data of website visitors and of customers who contact us, in compliance with EU Regulation 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003).

1. Data controller

The data controller is Just Eat s.r.l., VAT number 12020811001, located at Via Emanuele Filiberto 182/186, 00185 Roma. For any privacy request you can write to gruppi@spacciopasta.it or call +39 06 77250390.

2. What data we process

• Browsing data: IP address, browser type, pages visited, date and time. They are collected automatically by the server hosting the site to make it work and keep it secure.
• Data you give us: name, phone number, email and message content when you call or write to us, for example to organise an event.
• Booking data: if you book a table from the Book page, your details are entered into the Superbe booking service, which processes them according to its own privacy notice.

The website has no registration forms and does not collect payment data.

3. Why we process them and on what legal basis

• Running the website and keeping it secure: the controller's legitimate interest (Art. 6.1.f GDPR).
• Answering your requests and handling bookings and events: performance of pre-contractual measures or a contract (Art. 6.1.b GDPR).
• Complying with legal obligations, such as tax rules: legal obligation (Art. 6.1.c GDPR).
• Showing third-party content (Google map, Instagram posts): your consent, where required (Art. 6.1.a GDPR).

4. Cookies

The website uses these technical cookies of its own, which do not require consent:

• sp_lang: remembers the language you chose (12 months).
• spadmin: admin panel session, for authorised staff only (until the browser is closed).
• sp_consent: remembers your cookie choices (6 months, then we ask you again).

Some pages show content from external services, which may set their own cookies, including profiling cookies: the Google Maps map (Contact page), Instagram posts (home page) and the Superbe booking form (Book page). For these cookies, the privacy notices of the respective providers apply: Google, Meta Platforms (Instagram) and Superbe. You can block or delete them in your browser settings.

Only if you accept them in the banner, the website also uses these third-party tools, which set their own cookies. You can change your choice at any time from the "Cookie preferences" link at the bottom of every page.

• Google Tag Manager (Google Ireland Ltd): manages the loading of the statistics and advertising tools listed here, respecting the choices made in the banner.
• Statistics – Google Analytics 4 (Google Ireland Ltd): counts visits and bookings in aggregate form, to understand how to improve the site. Cookies _ga and _ga_*, up to 14 months.
• Marketing – Google Ads (Google Ireland Ltd): measures how many bookings come from our Google ads and may show you our ads. Up to 13 months.

Legal basis: your consent (Art. 6.1.a GDPR). If you refuse, the website still works normally.

5. Who we share data with

Data may be processed by the website hosting provider, the Superbe booking service and advisers who assist us (for example our accountant), as data processors or independent controllers. We do not sell or pass on your data to third parties for marketing purposes.

Google and Meta may transfer data outside the European Union, in particular to the United States, on the basis of the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

6. How long we keep data

• Browsing data: for as long as the server logs keep them, normally no longer than 12 months.
• Requests and emails: for as long as needed to handle them, and then for no more than 24 months.
• Data linked to invoices or legal obligations: 10 years, as required by tax law.

7. Your rights

You can ask at any time to access, correct or erase your data, restrict or object to its processing, receive it in a readable format (portability) and withdraw any consent given, without affecting processing already carried out (Arts. 15-22 GDPR). Write to gruppi@spacciopasta.it: we will reply within 30 days.

If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Changes

This notice may be updated. Last updated: 01/11/2026.