Skip to content
Order from the app
EN

Privacy notice

Last updated: 5 November 2026

This is a translation: in case of differences, the Italian text prevails. IT · Italiano

This notice explains how Legami di gusto di Graziano Moreno (‘we’) processes the personal data of people who visit legamidigusto.it and of those who contact us, as required by Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

Legami di gusto di Graziano Moreno
Registered office: Piazza Libertà 24/26, 21016 Luino (VA)
VAT No. 04062060126
Email: morenograziano@gmail.com
Phone: 0332 795753

What data we process

  • Browsing data: IP address, browser and device type, pages visited, date and time. They are collected automatically by the systems that run and protect the site.
  • Emails and phone calls: your email address or your number, and what you write or tell us.

In your messages, write only what your request needs: no health data or other special categories of data, such as religious beliefs or political opinions.

Why we use the data and on what legal basis

For each use we state the legal basis, that is, the point of Article 6(1) GDPR that permits it.

  • Replying to your requests and, if you ask, preparing a quote or an offer for you: pre-contractual measures taken at your request (point (b)).
  • Managing the contract that results from the request: performance of a contract (point (b)).
  • Replying to other messages, for example a report or a job application: legitimate interest in replying to those who write to us (point (f)).
  • Complying with legal obligations, for example tax and accounting obligations: legal obligation (point (c)).
  • Protecting the site from abuse and automated programs: legitimate interest in security (point (f)).
  • Counting visits in aggregate form, with Cloudflare Web Analytics: legitimate interest in understanding how the site is used (point (f)). The tool stores nothing on your device, creates no profiles and does not track individual visitors.
  • Asserting or defending a right: legitimate interest (point (f)).

Mandatory and optional data

Giving us your data is your choice: without the data we need, however, we cannot reply to you.

When we ask for your consent, giving it is optional: if you say no, the site and the service still work.

How and for how long we keep the data

We process the data electronically and, where necessary, on paper. Only authorised persons can see them, and we protect them with appropriate security measures.

The site has a password-protected restricted area from which Legami di gusto di Graziano Moreno updates the content. Visitors to the site do not enter it and do not receive its cookies.

  • Browsing data are kept by the provider that hosts the site for as long as security requires, according to its own rules.
  • Requests and messages that do not lead to a contract are kept for as long as needed to reply and to follow up the negotiation, and in any case for no longer than 6 months after the last contact.
  • To protect the form and the restricted area from abuse, the site keeps for a short time, at most 48 hours, a fingerprint of the IP address calculated with a secret key, which does not contain the address in plain text.
  • If the request leads to a contract, we keep the data for its whole duration and then for 10 years, as the law requires for accounting and tax records (Article 2220 of the Italian Civil Code).

Who receives the data

The data are not sold or disseminated. Only the following parties may receive them, each for its own part:

  • persons authorised by Legami di gusto di Graziano Moreno, who are bound by confidentiality;
  • OnlinePerTutti.com (T.H.K. Consulting Limited, Hong Kong), which built and manages the site: it processes the data on our behalf, solely for the technical management of the site;
  • Cloudflare, Inc. (United States), which hosts the site, protects it and provides the technical tools described on this page: it processes the data on behalf of OnlinePerTutti.com, as its supplier;
  • the accountant and other advisers, banks and public authorities, when required by law or by the contract.

Data outside the European Union

Some of the providers listed are based outside the European Union, for example in the United States, and may process part of the data there. They do so with the safeguards provided for by the GDPR (Articles 44-46):

  • for US companies that participate in the EU-U.S. Data Privacy Framework, the European Commission's adequacy decision of 10 July 2023 (Implementing Decision (EU) 2023/1795);
  • in other cases, the standard contractual clauses approved by the European Commission (Implementing Decision (EU) 2021/914).

OnlinePerTutti.com (T.H.K. Consulting Limited) is based in Hong Kong, which is not covered by an adequacy decision of the European Commission. The data are stored on the systems of the providers listed above: T.H.K. Consulting Limited accesses them only for the technical management of the site, on our behalf.

For information on these safeguards, or a copy of them, write to morenograziano@gmail.com.

Your rights

At any time you can ask us:

  • to give you access to your data and a copy of them (access, Article 15 GDPR);
  • to correct or complete them (rectification, Article 16);
  • to erase them, when they are no longer needed or the law does not require us to keep them (erasure, Article 17);
  • to restrict their use (restriction, Article 18);
  • to provide them to you in a machine-readable format, so that you can take them elsewhere (portability, Article 20);
  • to stop using them on the basis of our legitimate interest and, in any case, for promotional purposes (objection, Article 21).

If you have given us your consent, you can withdraw it at any time: withdrawal does not affect what we did before (Article 7(3)).

To exercise your rights, write to morenograziano@gmail.com. We will reply within one month. In more complex cases the deadline may be extended by a further two months: in that case we will tell you within the first month (Article 12(3)).

We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Article 22).

Complaint to the Garante

If you believe that your data are being processed in a way that does not comply with the GDPR, you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian Data Protection Authority), Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it (Article 77 GDPR).

Which cookies and similar technologies the site uses, and how you can manage them, is explained in the cookie notice.

Changes to this notice

This notice may change, for example if the site adds a feature or if a law changes. The version in force is always this page, with the date at the top.