Privacy Policy

This notice describes how personal data is processed for users who visit www.galileoristorazione.it and, in particular, for those who complete the contact form to request information or quotes relating to catering and banqueting services offered by Galileo Ristorazione.

Last updated: 30 October 2026

1. Data Controller

The Data Controller is:

• Business name: RISTORAZIONE GALILEO SERVIZIO CATERING & BANQUETING DI FIORIN MORENO
• Owner / legal representative: Fiorin Moreno
• Registered and operating office: Via San Marco, 14 — 35129 Padova (PD), Italy
• VAT number: 04058530280
• REA number: 359548
• Phone: +39 049 8089491
• Mobile: +39 320 0440132
• Email: info@galileoristorazione.it
• Certified email (PEC): moreno.fiorin@pec.cgn.it

2. Types of personal data processed

Through the website, the following data may be processed depending on how you interact with it:

2.1 Browsing data

The IT systems and software procedures used to operate the website automatically acquire some data whose transmission is implicit in the use of Internet communication protocols (e.g. IP address, browser type, operating system, date and time of the request). Such data is used exclusively for technical and security purposes.

2.2 Browsing statistics

Only with your consent, given through the cookie banner, the website uses Google Analytics 4 (installed via Google Tag Manager) to collect data about how the website is used: pages visited, visit duration, device and browser type, approximate geographic origin, pseudonymous online identifiers. Details are provided in the Cookie Policy.

2.3 Data provided via the contact form

By completing the form on the Contacts page, you may voluntarily provide the following information:

• Event type (private or corporate)
• Private event type (wedding, graduation party, birthday, other) and related specification, if provided
• Corporate event description, if applicable
• Indicative date of the event
• Venue of the event
• Indicative number of guests
• Desired service plan
• Desired setup/decorations
• Extra services requested (e.g. photographer, music, wedding planner, florist, favours, other) and related specification, if provided
• Full name
• Phone number
• Email address
• Request language (Italian or English)
• Consent to data processing, given via the mandatory checkbox at submission

Event details are optional. Full name, phone number, email address and consent to data processing are mandatory: without them the request cannot be submitted and we would not be able to get back to you about it.

3. Purposes of processing

Personal data collected via the contact form is processed exclusively for the following purposes:

• receiving and managing your information or quote request;
• contacting you by email or phone to respond to your request;
• providing further clarification about the requested services, where necessary.

Browsing statistics (section 2.2) are processed, only with your consent, to analyse website usage in aggregate form and improve its content and operation.

Data is not used for direct marketing, profiling, newsletters or other promotional activities, unless you provide separate specific consent.

4. Legal basis

Processing is based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR), given via the mandatory checkbox in the contact form and, for analytics cookies, via the cookie banner. Cookie consent is optional and can be withdrawn at any time from the “Cookie preferences” link in the footer;
• Legitimate interest / technical necessity (Art. 6(1)(f) GDPR) for website security and technical operation, where applicable.

5. Processing methods and retention

Data is processed using IT and telematic tools, with logic strictly related to the stated purposes and in compliance with GDPR security requirements.

Requests submitted via the form are stored in a database managed through the company's CMS (Payload) and are accessible only to authorised staff via login credentials.

Retention period: no automatic deletion deadline is set. Requests remain stored in the Controller's system until the data subject expressly asks for their deletion, using the channels listed in section 9. Once such a request is received, data is deleted or anonymised, unless otherwise required by law.

6. Location of processing and transfers

Personal data is processed exclusively on servers located within the European Union: the website hosting (Netsons), the CMS infrastructure (Vercel) and the database storing contact requests (MongoDB) are configured in European regions.

The only exception is Google Analytics, enabled only with your consent: the provider Google Ireland Limited may transfer browsing statistics to Google LLC in the United States. The transfer is based on the European Commission's adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework), to which Google LLC is certified. Apart from this case, data is not transferred to countries outside the European Economic Area (EEA).

7. Disclosure to third parties

Data collected via the form is not sold or disclosed to third parties for their own independent purposes.

Browsing statistics are processed by Google Ireland Limited as a processor on behalf of the Controller, for the Google Analytics service.

Data may be disclosed to public authorities only where required by law or by orders from competent authorities.

8. Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22(1) and (4) GDPR is carried out.

9. Data subject rights

As a data subject, you have the right to request from the Controller, where applicable:

• access to your personal data (Art. 15);
• rectification of inaccurate or incomplete data (Art. 16);
• erasure («right to be forgotten»), where applicable (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20), where applicable;
• objection to processing (Art. 21), where applicable;
• withdrawal of consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

To exercise your rights, you may send a request to:

• Email: info@galileoristorazione.it
• PEC: moreno.fiorin@pec.cgn.it
• Post: Via San Marco, 14 — 35129 Padova (PD), Italy

The Controller will respond within 30 days of receiving the request, subject to any extensions permitted by law.

10. Complaint to the supervisory authority

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):

• Website: www.garanteprivacy.it
• Email: protocollo@pec.gpdp.it

11. Cookies and similar technologies

The website uses technical cookies, necessary for it to work, and, only with your consent, Google Analytics 4 analytics cookies. The full list of cookies, their purposes, durations and instructions to change or withdraw your consent are provided in the Cookie Policy.

12. Security

The Controller implements appropriate technical and organisational measures to protect personal data, including:

• HTTPS encrypted connection;
• CMS access restricted to authenticated users;
• data stored on cloud infrastructure with protected credentials.

13. Minors

The website and contact form are intended for a general audience. Where a minor's data is provided by a parent or legal guardian in connection with an event request, processing occurs solely for the contact purposes stated in this notice.

14. Changes to this notice

The Controller reserves the right to amend this notice at any time. Changes will be published on this page with the date of last update. We recommend checking this page periodically.

15. Contact

For any questions about personal data processing or this notice, please contact the Controller using the details in section 1.