Privacy Policy

This privacy notice describes how the personal data of users browsing the website davidederamo.it (hereinafter, the “Site”) is processed, pursuant to Art. 13 of Regulation (EU) 2016/679 (“GDPR”).

1. Data Controller

The Data Controller is For-Mati Srls, with registered office at Viale Giuseppe Mazzini 88, 00195 Rome (RM), Italy, VAT no. 17964521003, REA RM-1752542.

For any request regarding the processing of your personal data, you can contact the Data Controller at the certified email (PEC) address formatisrls1@legalmail.it.

2. Types of data collected

Through the Site we collect the following categories of personal data:

• Data provided voluntarily through the “Request a Consultation” form: first name, last name, email address, phone number, city, professional situation, how you came to know about the Site, the content of your message, and any consent given to receive marketing communications.
• Data provided through the WhatsApp widget: name (optional) and message text. This data is transmitted directly to WhatsApp (Meta Platforms, Inc.) via your device and is not stored or processed by us through the Site.
• Browsing data automatically collected through technical cookies and, subject to your consent, through third-party cookies (Meta Pixel and Google Analytics 4). For more details, see our Cookie Policy.

3. Purposes of processing and legal basis

• Handling consultation requests. Data provided through the form is processed to respond to your request and evaluate a possible collaboration. Legal basis: performance of pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR).
• Sending promotional communications. Only if you have given specific consent via the dedicated checkbox in the form, your data may be used to send you communications about opportunities, news, and advice related to the restaurant industry. Legal basis: consent of the data subject (Art. 6(1)(a) GDPR), revocable at any time.
• Personalized advertising and remarketing. Subject to consent given via the cookie banner, we use Meta Pixel to show you relevant ads on Meta platforms and measure their effectiveness. Legal basis: consent (Art. 6(1)(a) GDPR).
• Statistical analysis of Site traffic. Subject to consent given via the cookie banner, we use Google Analytics 4 to understand how the Site is used and to improve its content and features. Legal basis: consent (Art. 6(1)(a) GDPR).
• Compliance with legal obligations. For example, retention of tax and accounting documentation. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Nature of data provision

Providing the data marked with an asterisk (*) in the form is necessary in order to respond to your request: without it, we will not be able to get back to you. Consent for marketing communications is instead optional and does not in any way affect the handling of your consultation request.

5. Processing methods

Data is processed using IT and telematic tools, with logic strictly related to the purposes indicated above, adopting technical and organizational measures suitable to prevent loss, unlawful or incorrect use, and unauthorized access to the data.

6. Recipients and data transfer

Your data may be shared with:

• Meta Platforms, Inc., limited to data collected via profiling cookies (only with consent) and messages sent via WhatsApp;
• Google Ireland Limited (Google Analytics 4), limited to browsing data collected in statistical form, only with consent;
• consultants and professionals (e.g., the accountant) for the Data Controller’s administrative, accounting, and tax obligations.

Some of these parties (in particular Meta Platforms, Inc. and Google) are based in the United States. In such cases, data transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission or another adequacy mechanism provided for by the GDPR.

7. Retention period

Data collected through the contact form is retained for the time necessary to handle your request and, if a collaboration begins, for the duration of the professional relationship and for the subsequent period required by law (for example, retention of tax documentation). Data processed on the basis of consent for marketing purposes is retained until such consent is revoked.

8. Rights of the data subject

At any time, you have the right to:

• obtain confirmation of the existence of processing of data concerning you, and access your data (right of access, Art. 15 GDPR);
• obtain the rectification of inaccurate data or the completion of incomplete data (Art. 16 GDPR);
• obtain the erasure of your data, in the cases provided for by law (Art. 17 GDPR);
• obtain restriction of processing (Art. 18 GDPR);
• receive your data in a structured, readable format (right to data portability, Art. 20 GDPR);
• object at any time to the processing (Art. 21 GDPR);
• withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, you can write to the certified email (PEC) formatisrls1@legalmail.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), if you believe that the processing of your data violates the applicable regulations.

9. Changes to this notice

The Data Controller reserves the right to modify or update this notice, in whole or in part, including due to changes in applicable regulations. Any changes will be published on this page.