Information notice under art. 13 GDPR

Privacy policy

This notice describes the processing connected with browsing the site, contact requests and table bookings.

Last updated: 10 November 2026

Data controller

The data controller is Plaga srls, VAT number 05336680755, registered office at Piazza Umberto I, n. 8, 73044 Galatone (LE), recipient code (SDI) BA6ET11. PLAGA operates from Piazza Umberto I, 73044 Galatone (LE), Italy.

For data protection requests: [email protected] or [email protected] (PEC) or 351 572 1939.

Data processed, purposes and legal bases

Browsing data

The systems that make the site available may record technical data such as IP address, date and time, page requested, response status, browser and operating system. This data is used to deliver and protect the site, diagnose faults and prevent abuse.

Legal basis: the controller’s legitimate interest in the security and correct operation of the service, art. 6(1)(f) GDPR.

Data submitted voluntarily

When a user writes on WhatsApp, calls or sends an e-mail, the data communicated is processed to reply, provide information and handle a table booking or an enquiry about products from the Dispensa, within the resulting pre-contractual or contractual relationship. The site contains no contact forms and does not automatically send order details to the restaurant.

Legal basis: pre-contractual measures or contract, art. 6(1)(b) GDPR; compliance with legal obligations, (c); legitimate interest in managing and protecting the relationship, (f), where applicable.

Contacts and external services

Services activated by the user

Google Maps, Instagram, WhatsApp and the award pages on Restaurant Guru and Tripadvisor are not embedded in the page. The connection to the relevant provider occurs only after the user clicks, thereby visiting a separate service subject to its own notice. WhatsApp and e-mail messages are actually sent only through a further action in the application chosen by the user.

When the link is clicked, the browser discloses to the destination site the IP address and only the originating domain, not the page. From that moment the data are processed by the service provider as an independent controller under its own notice: PLAGA receives no data from these services and is not responsible for them. The full list of links is in the cookie policy.

The digital menu is hosted by digitavolo.com, an external service not operated by PLAGA. The link opens when the visitor selects the menu. From the moment it opens, the provider may receive technical connection data and operates under its own notice.

Resources loaded automatically

Unlike the links above, some technical resources needed to render the pages are requested from third parties the moment the site is opened, without any user action: typefaces from fonts.googleapis.com and fonts.gstatic.com (Google), animation libraries from cdnjs.cloudflare.com (Cloudflare) and cdn.jsdelivr.net. These requests involve disclosing the IP address and technical connection data to those providers, which operate under their own notices. They set no cookies and are not used for statistics or profiling.

Legal basis: the controller’s legitimate interest in the typographic rendering and correct operation of the site, art. 6(1)(f) GDPR.

Recipients and transfers

Authorised staff, consultants and technical or hosting providers acting on the controller’s behalf may access the data within the limits of their respective functions. Data may also be disclosed where required by law or by a competent authority.

The site sends no data to analytics, advertising or social services. Transfers connected with the hosting provider, with the providers of the technical resources listed above or with external services chosen by the user must comply with arts. 44 ff. GDPR, on the basis of an adequacy decision or appropriate safeguards where necessary.

Retention

Technical data is kept for as long as strictly necessary to deliver, secure and diagnose the service, save for the need to establish abuse or for legal obligations.

Request data is kept for as long as necessary to reply and manage the relationship; data relating to bookings, contracts and administrative documents follows the periods laid down by law.

Rights of the data subject

Where applicable, the data subject may request access, rectification, erasure, restriction, portability and object to processing under arts. 15–22 GDPR. Requests may be sent to the controller’s contacts given above.

It is also possible to lodge a complaint with the Italian Data Protection Authority or with the supervisory authority of the EEA State where you live or work, or where you believe the infringement occurred.

Cookies and updates

For details of the technologies used see the cookie policy. This notice may be updated when services, purposes or legal obligations change; the date at the top identifies the current version.

BACK TO SITE