Last updated:
Who controls your data
The data controller is FGM GROUP S.R.L., Italian VAT and tax number 02371920519, registered office at Via Piero Calamandrei 137, 52100 Arezzo (AR), Italy. Il Cantuccio restaurant is at Via Madonna del Prato 76, 52100 Arezzo (AR), Italy. Privacy requests: fgm.group.srl@pec.it; general restaurant enquiries: risto.ilcantuccio@gmail.com.
Information you share when contacting us
When you email risto.ilcantuccio@gmail.com or call us, we may process your name, contact details, enquiry and any other information you choose to share in order to respond. Providing these data is optional, but without a way to reach you and the information needed, we may be unable to answer. Please avoid sending sensitive information, such as health data, unless strictly necessary.
The site does not collect data through online forms and the restaurant does not accept reservations: tables are allocated on arrival. We do not send newsletters or marketing messages based on these enquiries.
Why and for how long
We use these data to answer your questions and manage your relationship with the restaurant. The legal basis is taking pre-contractual steps at your request or performing a contract, where relevant (Article 6(1)(b) GDPR), or our legitimate interest in answering general enquiries (Article 6(1)(f)). Legal obligations rely on Article 6(1)(c).
We keep messages as long as necessary to handle them and, where applicable, for periods required by law or needed to establish, exercise or defend a right. Authorised staff, the email provider and recipients required by law may access them. We do not make solely automated decisions.
How to exercise your rights
You may request access, rectification, erasure, restriction and, where applicable, portability, or object to processing based on legitimate interests. Write to fgm.group.srl@pec.it with your request; we may need to verify your identity to protect your data. We normally reply within one month, subject to extensions allowed under Article 12 GDPR for complex requests.
You can lodge a complaint with the Italian Data Protection Authority if you believe your data has been processed unlawfully. For browsing data, providers and transfers, see the full privacy policy; for browser technologies, see the cookie policy.