This page describes how to manage the site in relation to the processing of personal data of users who consult our website. This notice is provided pursuant to article 13 of the European Regulation no. 2016/679 (GDPR) to those who interact with Il Pastaio S.r.l website services, accessible electronically at:

We inform you that terms and conditions on this site can be subject to modifications, in order to be up-to-date with the current regulation. We kindly recommend that you review this Privacy Policy periodically to be aware of such modifications.

1) Type of processed data

The processed data are navigation data and data provided voluntarily by the user, as below defined.

Navigation data

When the user visit our website, their presence on the website is anonymous.
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with the data subject, but given their very nature, may identify users through processing and associations with data held by third parties. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses ​​of requested resources, time of request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment. These data are used only to obtain anonymous statistical information on site usage and to check its correct functioning and are deleted immediately after processing.

Data provided voluntarily by the user

The personal data provided by the users who voluntarily interact with our website, providing their personal data to obtain certain services (requests of commercial information, registrations to newsletter, purchase of products, etc.), are used only for the purpose of performing the service requested.

When the data subject sends a optional, explicit and voluntary email to the email addresses listed on this site, the controller acquires the email address of the data subject and any other personal data included in the email in order to respond to the requests. These data will be transferred third parties only if necessary to respond to the users/visitors’ requests.

2) Purpose of data processing

The data processing is managed only to fulfill the following purposes:

3) Modality of data processing

The data processing may consist, besides in data collection, in registration, organization, retention, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, stop, communication, deletion and destruction, in accordance with GDPR article 4 no. 2. The data may be processed either on paper and with the use of electronic and telematic instruments, according to the modalities and with suitable means to ensure the security and confidentiality of data. Particularly, all the technical and organising measures suitable for the data protection will be adopted, for the purpose of fulfilling the legal requirements and protecting the rights of the data subjects.

The data are processed through automatic systems for a period strictly necessary to fulfil the purposes for which the data have been collected and, in any case, in accordance with legal requirements. Below the table containing the main duration periods for data retention.

Job candidatesMaximum 24 monthsart 5(e) of Reg EU 2016/679
Employees and contractors10 years from the termination  of employment relationshipart. 43 of Dpr 600/73; art. 2946 civil code on the ordinary law; Chapter III of Title I of Legislative decree 81/08 and s.m.i.
Customers and suppliers5-10 yearsart. 2948 civil code that provides the prescription for a period of 5 years for periodic payments; art. 2220 civil code that provides the accounting records retention; art. 22 of D.P.R 29 September 1973, n. 600.
Customer prospectIn accordance with legal requirements for the type of activity and, in any case, until revocation of consent or the assertion of the right to object


General Provision of 15/05/13; art. 21 Reg. EU 2016/679.
Data processed for marketing purposesIn accordance with legal requirements for the type of activity and, in any case, until revocation of consent or the assertion of the right to objectGeneral Provision of 15/05/13; art. 21 Reg. EU 2016/679.
Video surveillance footage24 hoursGeneral Provision of Privacy Authority; art. 21 Reg. 2016/679
CookiesMaximum 6-12 monthsGeneral Provision of Privacy Authority 19/03/2015; art. 21 Reg. EU 2016/679
LOG system adminsMaximum 6 monthsGeneral Provision of Privacy Authority 27/11/2008 and; art. 21 Reg. EU n. 2016/679
Navigation dataLast 10 websites visitedGeneral Provision of Privacy Authority /law; art. 21 Reg. UE 2016/679

4) Data communication and trasmission 

Your data will not be transmitted and will be processed by the employees of the company who are well-trained and authorized to process your data. Data may be communicated to external subjects including the responsible people appointed according to article 28 of GDPR. Particularly, the data may be communicated to the following subject categories listed below by way of example, but not limited to: payment service providers, financial service providers, credit card companies, Italian and foreign suppliers, transport companies.

The list of the people responsible for data processing is available at the headquarters of Il Pastaio S.r.l.

For all the purposes listed in this notice, your data may be transmitted abroad, within or outside the European Union, in accordance with the requirements of the current regulation, after verifying that the country guarantees a suitable level of protection pursuant to GDPR.

5) Rights of data subject

With respect to the abovementioned data, in compliance with art. 7 of Privacy Code and art. 15, 16, 17, 18, 20 and 21 of GDPR, you have the right to request:

6) Consent revocation  

Your consent to the data processing may be revoked at any time. The legitimacy of the processing of your personal data up to the time of revocation or other processing set by other legal basis different from your consent remains unaffected.

7) Controller of data processing and person responsible

The controller of data processing is the company Il Pastaio S.r.l, via delle Moie 56/c, 25050, Rodengo Saiano (BS).

The list of the people responsible for data processing is available at the headquarters of Il Pastaio S.r.l.