Your data, handled with care.
1. Data controller
The data controller is Donna Anna di Ferraioli Francesco, VAT no. 06223260651, with business address at Via Cavallotti 50, 27011 Belgioioso (PV), Italy, and Donna Anna operating premises at Via delle Vigne Nuove 460, 00139 Rome.
Contacts: telephone +39.331.1250254 · WhatsApp · email info@donnaannaroma.it · Certified email (PEC): francescoferraioli@legalmail.it.
2. Data we may process
The website contains no data collection forms and does not require registration. We may nevertheless receive personal data when you choose to contact us by email, telephone or WhatsApp, such as your name, contact details, message content, information about reservations or events, and any information you voluntarily provide.
The server hosting the website may also record technical data required for operation and security, such as IP address, request date and time, page visited, response status and browser information.
3. Purposes and legal bases
- Responding to requests and managing reservations or quotations, based on pre-contractual steps requested by the data subject and performance of the service.
- Managing administrative, accounting and legal obligations, based on a legal obligation.
- Protecting the website and preventing misuse, based on the controller’s legitimate interest in system security.
- Managing potential disputes, based on the legitimate interest in protecting legal rights.
We do not use data received through ordinary contact channels to send promotional communications without a valid legal basis.
4. Special categories of data
Information about allergies or intolerances may reveal health data. Provide it only when necessary for the service. It will be used solely to manage your request and shared only with staff who need to know it.
5. Cookies and similar technologies
This website does not install its own profiling or analytics cookies. The interactive Google Maps map does not load automatically: it activates only after you choose to load it. When it loads, Google may receive technical data such as your IP address and device information and may use its own cookies or technologies under its privacy notice.
Other links to external services such as TheFork, Just Eat and WhatsApp open only after you choose to follow them. From that point, processing is governed by each provider’s privacy notice.
6. Recipients and transfers
Data may be processed by authorised personnel and service providers supporting the business, including hosting and email providers and technical, administrative or legal advisers. When acting on our behalf, they are appointed processors under Article 28 GDPR.
If a provider processes data outside the European Economic Area, transfer takes place only where an adequacy decision or safeguards under Articles 44 et seq. GDPR are in place.
If you choose to contact us through WhatsApp, the messaging provider may also process data under its own privacy notice.
7. Retention periods
General enquiries are retained for the time needed to reply and for any subsequent requirements, normally no longer than 24 months. Data linked to contracts or tax documents is retained for statutory periods. Technical logs are retained for the period needed for security and service management.
8. Provision of data
Providing data by email, telephone or WhatsApp is optional, but without the necessary information we may be unable to respond, manage a reservation or prepare a quotation.
9. Your rights
Where Articles 15–22 GDPR apply, you may request access, rectification, erasure, restriction, portability, objection to processing and withdrawal of consent where processing is based on consent.
You may exercise your rights by writing to info@donnaannaroma.it or to the certified email address above. You also have the right to lodge a complaint with the Italian Data Protection Authority.
10. Children and updates
The website and services are not directed at children for the independent collection of data. If a request concerns a child, it must be submitted by a person with parental responsibility or another authorised person.
This notice may be updated to reflect legal, technical or organisational changes. The date shown above indicates the most recent version.