Last updated: 15 September 2026
Privacy and Cookie Policy
This policy explains how Spizzi Bologna S.r.l. processes personal data when users visit https://spizzi.pages.dev or contact the restaurant.
1. Data controller
Spizzi Bologna S.r.l.Via del Gusto 18, 40121 Bologna (BO), Italia
VAT number 00000000000
privacy@spizzi.example
+39 051 000 0000
2. Data processed
Technical services used to operate and protect the website may process IP address, request date and time, pages visited, browser, operating system and security information. If you contact the restaurant by email or phone, the information you voluntarily provide is used to answer your request.
3. Purposes and legal bases
- Website operation and security: technical necessity and legitimate interest.
- Replying to email or telephone enquiries: pre-contractual steps and legitimate interest.
- Legal obligations and protection of rights: legal obligation or legitimate interest.
4. Recipients and transfers
Data may be processed by authorised restaurant staff and technical providers needed for hosting, security and email. The website uses Cloudflare for hosting, security and traffic protection. Some providers may process data outside the European Economic Area using GDPR safeguards. Personal data is not sold.
5. Retention
Technical logs are retained under provider settings for the period needed to secure the website. Direct enquiries are retained for the time needed to reply and manage legal obligations or disputes.
6. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction, objection and data portability. Write to privacy@spizzi.example. You may also lodge a complaint with the Italian Data Protection Authority.
7. External services and links
Links to maps, social networks and ordering platforms open external services that process data under their own policies. The website does not embed maps, social feeds, videos, analytics or advertising pixels.
Cookie Policy
The website uses only cookies or technical tools necessary for operation, security and traffic protection. It does not use profiling cookies, Google Analytics, Google Tag Manager, advertising pixels or session-replay tools.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| __cf_bm | Cloudflare | Automated-traffic protection | About 30 minutes |
| cf_clearance | Cloudflare | Security checks when required | Variable |
| Signed technical session | Spizzi | Secure session handling | Maximum 8 hours |
These tools do not require prior consent. You may manage or delete cookies in your browser; disabling them may limit technical or security functions. If non-technical tools are added, this policy and the consent mechanism will be updated before they are enabled.