Privacy Policy & Cookies

This notice describes how personal data is processed for users who visit www.galileoristorazione.it and, in particular, for those who complete the contact form to request information or quotes relating to catering and banqueting services offered by Galileo Ristorazione.

Last updated: 1 September 2026

1. Data Controller

The Data Controller is:

• Business name: RISTORAZIONE GALILEO SERVIZIO CATERING & BANQUETING DI FIORIN MORENO
• Owner / legal representative: Fiorin Moreno
• Registered and operating office: Via San Marco, 14 — 35129 Padova (PD), Italy
• VAT number: 04058530280
• REA number: 359548
• Phone: +39 049 8089491
• Mobile: +39 320 0440132
• Email: info@galileoristorazione.it
• Certified email (PEC): moreno.fiorin@pec.cgn.it

2. Types of personal data processed

Through the website, the following data may be processed depending on how you interact with it:

2.1 Browsing data

The IT systems and software procedures used to operate the website automatically acquire some data whose transmission is implicit in the use of Internet communication protocols (e.g. IP address, browser type, operating system, date and time of the request). Such data is used exclusively for technical and security purposes.

2.2 Data provided via the contact form

By completing the form on the Contacts page, you may voluntarily provide the following information:

• Event type (private or corporate)
• Private event type (wedding, graduation party, birthday, other) and related specification, if provided
• Corporate event description, if applicable
• Indicative date of the event
• Venue of the event
• Indicative number of guests
• Desired service plan
• Desired setup/decorations
• Extra services requested (e.g. photographer, music, wedding planner, florist, favours, other) and related specification, if provided
• Full name
• Phone number
• Email address
• Request language (Italian or English)
• Consent to data processing, given via the mandatory checkbox at submission

Event details are optional. Full name, phone number, email address and consent to data processing are mandatory: without them the request cannot be submitted and we would not be able to get back to you about it.

3. Purposes of processing

Personal data collected via the contact form is processed exclusively for the following purposes:

• receiving and managing your information or quote request;
• contacting you by email or phone to respond to your request;
• providing further clarification about the requested services, where necessary.

Data is not used for direct marketing, profiling, newsletters or other promotional activities, unless you provide separate specific consent.

4. Legal basis

Processing is based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR), given via the mandatory checkbox in the contact form;
• Legitimate interest / technical necessity (Art. 6(1)(f) GDPR) for website security and technical operation, where applicable.

5. Processing methods and retention

Data is processed using IT and telematic tools, with logic strictly related to the stated purposes and in compliance with GDPR security requirements.

Requests submitted via the form are stored in a database managed through the company's CMS (Payload) and are accessible only to authorised staff via login credentials.

Retention period: no automatic deletion deadline is set. Requests remain stored in the Controller's system until the data subject expressly asks for their deletion, using the channels listed in section 9. Once such a request is received, data is deleted or anonymised, unless otherwise required by law.

6. Location of processing and transfers

Personal data is processed exclusively on servers located within the European Union: both the hosting infrastructure for the website and CMS (Vercel) and the database storing contact requests (MongoDB) are configured in European regions.

The Controller confirms that data is not transferred to countries outside the European Economic Area (EEA).

7. Disclosure to third parties

Data collected via the form is not sold or disclosed to third parties for their own independent purposes.

Data may be disclosed to public authorities only where required by law or by orders from competent authorities.

8. Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22(1) and (4) GDPR is carried out.

9. Data subject rights

As a data subject, you have the right to request from the Controller, where applicable:

• access to your personal data (Art. 15);
• rectification of inaccurate or incomplete data (Art. 16);
• erasure («right to be forgotten»), where applicable (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20), where applicable;
• objection to processing (Art. 21), where applicable;
• withdrawal of consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

To exercise your rights, you may send a request to:

• Email: info@galileoristorazione.it
• PEC: moreno.fiorin@pec.cgn.it
• Post: Via San Marco, 14 — 35129 Padova (PD), Italy

The Controller will respond within 30 days of receiving the request, subject to any extensions permitted by law.

10. Complaint to the supervisory authority

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):

• Website: www.garanteprivacy.it
• Email: protocollo@pec.gpdp.it

11. Cookies and similar technologies

The website uses technical cookies and technologies strictly necessary for operation and security only. No profiling or marketing cookies are used.

11.1 What cookies are

Cookies are small text files that websites send to the user's browser, where they are stored and sent back to the same websites on subsequent visits.

11.2 Technical cookies used

The website may use the following categories of technical cookies:

• Session / hosting service cookies — necessary for proper delivery of the website and to ensure stability and security (e.g. cookies set by Vercel for load balancing and infrastructure management).
• CMS admin panel cookies — used exclusively by authorised operators to access the back-office; not set during normal public browsing.

11.3 Third-party cookies

The website does not install third-party profiling cookies. However, some pages embed third-party content or resources that may set or read technical cookies or process browsing data under their own policies:

• Google Fonts — website typography
• Google Maps — embedded map on the Contacts page

11.4 Managing cookies

You can manage cookie preferences through your browser settings. Disabling technical cookies may affect proper functioning of some parts of the website.

As no profiling cookies are used, no consent banner for non-technical cookies is provided.

12. Security

The Controller implements appropriate technical and organisational measures to protect personal data, including:

• HTTPS encrypted connection;
• CMS access restricted to authenticated users;
• data stored on cloud infrastructure with protected credentials.

13. Minors

The website and contact form are intended for a general audience. Where a minor's data is provided by a parent or legal guardian in connection with an event request, processing occurs solely for the contact purposes stated in this notice.

14. Changes to this notice

The Controller reserves the right to amend this notice at any time. Changes will be published on this page with the date of last update. We recommend checking this page periodically.

15. Contact

For any questions about personal data processing or this notice, please contact the Controller using the details in section 1.