Privacy Policy

Last updated: 26 June 2026. This Privacy Policy describes how Bacchrituo Srl processes personal data under GDPR and Italian Legislative Decree 196/2003 as amended by D.Lgs. 101/2018.

1. Data Controller

Bacchrituo Srl, Via dell'Indipendenza 42, 40121 Bologna, Italy. Email: [email protected]. Phone: +39 051 234 8765. Legal Representative: Marco Ritucci.

2. Data Collected

Name, email, phone, business address, project details, IP address, browser data, cookie identifiers.

3. Legal Basis (GDPR Art. 6)

• Contract (Art. 6(1)(b)): Restaurant design services delivery.
• Legitimate interests (Art. 6(1)(f)): Security and analytics.
• Consent (Art. 6(1)(a)): Non-essential cookies and marketing.
• Legal obligation (Art. 6(1)(c)): Italian tax and accounting law.

4. Retention

Enquiries: 24 months. Invoices: 10 years per Italian civil code. Analytics: 14 months anonymised.

5. Processors

Aruba S.p.A. (hosting, Italy), Google Ireland Limited (analytics, when consented).

6. International Transfers

EU processing primary. US transfers under SCCs with consent for analytics.

7. Your Rights

Access, rectification, erasure, restriction, portability, objection. Contact [email protected]. Supervisory authority: Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Roma, Italy.

8. Security

TLS encryption, access controls, staff training on data protection.