Privacy Policy
Last updated: 24 April 2026
This notice is provided pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) to visitors interacting with the website www.deliziebolognesi.mom. Personal data are processed in compliance with the GDPR, the Italian Data Protection Code (Legislative Decree 196/2003) and the guidelines of the Italian Data Protection Authority (Garante).
1. Data controller
Necala s.r.l.
Via Riva di Reno, 76 — 40122 Bologna (BO), Italy
VAT / Tax Code: IT03765591205
E-mail: info@deliziebolognesi.mom
Phone: +39 051 649 5124
2. Personal data processed, purposes and legal bases
| Purpose | Data processed | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Responding to requests sent via the contact / booking form | First name, last name, e-mail, phone (optional), message | Pre-contractual measures at the data subject's request — Art. 6(1)(b) | 24 months after the last contact, subject to legal obligations |
| Site security and operation (technical logs, session cookies) | IP address, user-agent, timestamp | Legitimate interest of the controller — Art. 6(1)(f) | 12 months |
| Displaying the Google Map (only after the user's explicit click) | IP address transmitted to Google LLC | Consent — Art. 6(1)(a) | Session (managed by Google) |
| Storing the user's cookie choice | Technical cookie cookie_consent |
Legitimate interest (Art. 6(1)(f)) — technical cookie, no consent required | 12 months |
3. Cookies and trackers
The site uses only the following cookies and tools:
| Name / tool | Type | Duration | Purpose |
|---|---|---|---|
cookie_consent | Technical — first party | 12 months | Stores the user's banner choice |
Google Maps (maps.google.com, gstatic.com) | Third party — loaded only after explicit user click | Variable (managed by Google) | Interactive map display of the gelato shop |
CognitoForms (cognitoforms.com) | Third party — activated only when the user fills the form | Session / persistent (managed by Cognito Forms Inc.) | Submission of the contact/booking form |
Typographic fonts are served locally (self-hosted) and do not transmit data to third parties. The site does not use Google Analytics, Meta Pixel or any other profiling tool.
Withdrawal of consent: you can withdraw consent at any time by deleting cookies from your browser. The banner will then be displayed again on your next visit.
4. Recipients and data transfers
Personal data may be disclosed to the following parties, appointed as processors pursuant to Art. 28 GDPR:
- Cognito Forms Inc. (contact/booking form provider) — based in the United States. Transfers are based on Standard Contractual Clauses (SCC) under Art. 46 GDPR and, for certified entities, on the EU-US Data Privacy Framework. Privacy policy: cognitoforms.com/product/data-protection-privacy.
- Google LLC / Google Ireland Ltd. (Google Maps) — loaded only upon the user's explicit click. EU-US transfer covered by the Data Privacy Framework. Privacy policy: policies.google.com/privacy.
- The site's hosting provider (entity based in the European Union).
Data are not disseminated and are not subject to automated decision-making or profiling.
5. Your rights
As a data subject, under Arts. 15-22 GDPR you have the right to:
- access your personal data (Art. 15);
- obtain rectification (Art. 16) or erasure (Art. 17);
- restrict processing (Art. 18) or object to it (Art. 21);
- receive your data in a structured format (data portability — Art. 20);
- withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7(3));
- lodge a complaint with the Italian Data Protection Authority — www.garanteprivacy.it.
To exercise your rights, write to info@deliziebolognesi.mom. We will respond within 30 days of receiving your request.
6. Minors
The site is intended for users aged 14 and over. We do not knowingly collect personal data from children under 14 without the consent of a person with parental responsibility. If you believe this has happened, please contact us at the address above for deletion.
7. Security
We adopt appropriate technical and organisational measures (HTTPS connections, access controls, periodic updates) to prevent loss, misuse or unauthorised access to processed data.
8. Changes to this notice
We may update this notice to reflect changes in our services or applicable law. The date at the top of the document indicates the latest revision. Please consult it periodically.