Privacy Policy information

The management methods of the Website are described below with regard to the processing of personal data of users of the website itself accessible at the url

The information is provided pursuant to the TEXT of EU REGULATION 2016/679 [LINK] (GDPR)

for Website – Code regarding the protection of personal data, where the writer
La Buca di Spigonetti Andra, as data controller, informs that the personal data acquired through interaction with the website with reference to the commercial relationships established, will be processed in compliance with the above legislation indicated.

It is provided here only for the website and not for other sites connected to it via links or sites that carry out the URL refferal of the user website.

The purposes of the processing of personal data you provide are: execution of contracts with You stipulated and related commitments, fulfillment of legal obligations related to the contractual relationship, organizational management of the contract, any external professional collaborations for the fulfillment of legal obligations, the protection of contractual rights, analyses internal statistics and the activities of:

  • direct marketing (direct marketing which is a form of advertising involving the delivery of an immediate and personal message)
  • newsletter (used to update customers on all the activities and offers of the accommodation facility, of any type)

by sending promotional and advertising material relating to the activity, products or services similar to those covered by the existing commercial relationship, in situations already authorized with the expression of consent.

Interested parties are at any time able to consciously and freely express their choices regarding the processing of their data, expressing, confirming or revoking their consent for each different purpose pursued by the Data Controller.

The provision of personal data is in relation to the performance of all the necessary and functional activities for the execution of the contractual and legal obligations.

It follows that any refusal to provide data for these purposes may determine the impossibility of the undersigned to implement the contractual relationships and legal obligations.

In relation to the aforementioned treatments, it also provides the following in-depth information.

The owner of the treatment of the Privacy

The “owner” of their treatment:

La Buca di Spigonetti Andra – P. Iva : 02949201202

Street – Montalogno n.1597, 40050, Castello di Serravalle (BO), Italy

Tel : 333/28.180.20 – Tel and Fax

E-mail :

What personal data we collect and why we collect it
Data collected with the contact form

The information you provide will be used only to respond to your requests or to send informative material.

They will not be disclosed in any way or used for any other purpose.
You can contact us at any time to update or delete your personal data.

By filling out the contact form, the user:

  • communicate your name;
  • communicate the email address at which you want to be contacted;
  • write a message to send to

The name, email address indicated by the user when completing the contact form and the information entered by the user in the body of the message are used exclusively to respond to the user’s request for information on the service we offer .

Optional provision of data

Apart from that specified for navigation data, the user is free to provide or not provide any personal data requested.

Recipients of personal data

The personal data collected is processed exclusively within the organization in order to manage customer information requests, any reservations, information requests such as estimates and costs.

Data processors pursuant to art. 4 n.8) GDPR which defines as “data controller” the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller.

In any case, each user can always ask the Data Controller for an updated list of Data Processors in the manner described in the section relating to user rights
(by sending an email communication to

Who we share your data with

The user’s personal data are therefore not disclosed to third parties for commercial purposes, are not disclosed or processed outside the organization for commercial purposes, are not used shared or managed at a marketing level, outside our organization for commercial.

The data may be communicated to the following categories of subjects:
  • Post office, transport and shipping companies for aspects connected to the shipment of goods and customs procedures;
  • Banking institutions for the management of receipts and payments; financial administrations and other companies or public bodies in fulfillment of regulatory obligations;
  • Companies and law firms for the protection of contractual rights;
  • Agents, representatives, procurers who work for the writer, contractors, self-employed workers and client companies;
  • Debt collection company;
  • Our other customers and suppliers;
  • Other external companies in compliance with contractual obligations deriving from the normal business activity.
How we protect your data

The personal data spontaneously received from customers are stored by the data controller, within the organization and may be processed in paper, computerized and telematic form and entered in the relevant databases to which they can access, and therefore become aware of, the persons in charge of processing the data expressly designated by the owner as persons in charge of processing personal data and who will be able to carry out consultation, use, processing, comparison and any other appropriate operation, even automated, in compliance with the provisions of the law aimed at guaranteeing, among other , confidentiality and data security, as well as the accuracy, updating and relevance of the data with respect to the stated purposes.

Retention period

The information provided by the user by completing the contact form (name, email address, message text) or by sending emails will be processed and stored for the time strictly necessary and no longer than that useful for the purposes for which they were collected and processed, based on the type of relationship and the duration and conclusion of the relationship itself.

What procedures we have in place to prevent data breaches

Data received via contact form or email address:
for both, the access login is reserved exclusively for the manager responsible for data processing or for persons in charge of data processing expressly designated by the owner as persons in charge of processing personal data and exclusively within the organization.

From which third parties we receive data

No methods of retrieval or profiling of data received from third parties are used.

What automated decision making and/or profiling we do with your data

Our website and the use of our offerings do not involve any automated decision making or “profiling” on our part.

Place of data processing

The treatments connected to the web services of this site take place at the same.

No data deriving from interaction with the Website is sold, communicated or disclosed to third parties for commercial purposes.

The Data is processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For more information, contact the Owner.

The User’s Personal Data could be transferred to a country other than the one in which the User is located, exclusively for technical purposes of analysis carried out by processing data obtained from the Analytics 4 tool compliant with the GDPR. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by public international law or constituted by two or more countries, such as for example the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.

The User can check whether one of the transfers described above takes place by examining the section of this document relating to the details on the processing of Personal Data or request information from the Data Controller by contacting him at the details indicated at the opening and closing of this document.

Types of data processed

Data provided voluntarily by the user
Personal data provided by users who request dispatch of informative material or direct contact from the manager.

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site involves the acquisition of the personal data provided, such as the sender’s e-mail address, as well as any other personal data included in the message.

Specific summary information is reported from time to time on the pages of the site prepared for any services for which personal data is requested.

Navigation data
The computer systems and software procedures used to operate this Website, during their normal operation, acquire some personal data whose transmission is implicit in the use of Internet communication protocols.

These data are used solely and exclusively for the control and correct functioning of the Website and to obtain, through the use of Google Analytics 4, the use of the site itself.
In the event of hypothetical computer crimes against the site, the data could be used to ascertain responsibility.


Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed.

Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When the treatment is based on the User’s consent, the Owner can keep the Personal Data for longer until said consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, at the expiration

of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Purpose of the processing of the collected data

The User’s Data is collected to allow the Owner to provide the Service, fulfill legal obligations, respond to requests or executive actions, protect its rights and interests (or those of Users or third parties), identify any malicious activity or fraudulent, as well as for the following purposes: Statistics, Displaying content from external platforms, Interaction with social networks and external platforms and Contacting the User.

To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User can refer to the “Details on the processing of Personal Data” section.

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contact the user

Interaction with social networks and external platforms


Viewing content from external platforms

User Rights

Users can exercise certain rights with reference to the Data processed by the Owner.

In particular, the User has the right to:

withdraw consent at any time. The User can revoke the previously expressed consent to the processing of his Personal Data.

oppose the processing of their Data. The User can object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are set out in the section below.

access their Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.

check and ask for rectification. The User can verify the correctness of his Data and request its updating or correction.

obtain the limitation of the treatment. When certain conditions are met, the User can request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose than their conservation.

obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Owner.

receive their data or have them transferred to another holder. The User has the right to receive their Data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its transfer without obstacles to another holder.

This provision is applicable when the Data are processed with automated tools and the processing is based on the User’s consent, on a contract of which the User is a party or on contractual measures connected to it.

propose a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of public powers vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons connected with their particular situation.

Users are reminded that, should their Data be processed for direct marketing purposes, they may object to the processing without providing any reason. To find out if the Data Controller processes data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise your rights

To exercise the User’s rights, Users can direct a request to the contact details of the Owner indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within a month.

Use of Cookies

This Website uses Trackers. To find out more, the User can consult the complete documentation of the Cookie Policy.

In order to make its services as effective and easy to use as possible, this site uses cookies.
Therefore, when you visit the Site, a minimum amount of information is entered into the User’s device, such as small text files called “cookies” which are saved in the User’s Web browser directory.
There are different types of cookies, but basically the main purpose of a cookie is to make the site work more effectively and to enable certain features.
Cookies are used to improve the overall navigation of the User. In particular:

  • They allow you to navigate efficiently from one page of the website to another.
  • They store the username and preferences entered.
  • They allow you to avoid entering the same information (such as username and password) several times during the visit.
  • They measure the use of the services by Users, to optimize the browsing experience and the services themselves.
  • They present targeted advertising information based on the interests and behavior shown by the User while browsing.

There are various types of cookies.
Below are the types of cookies that can be used on the Site with a description of the purpose linked to their use.

Technical cookies

Cookies of this type are necessary for the correct functioning of some areas of the site. Cookies in this category include both persistent cookies and session cookies. In the absence of these cookies, the site or some portions of it may not function properly. Therefore, they are always used, regardless of user preferences. Cookies in this category are always sent from our domain.

Analytical cookies

Cookies of this type are used to collect information on the use of the site. The Owner uses this information for statistical analyses, to improve the site and simplify its use, as well as to monitor its correct functioning. This type of cookie collects anonymous information about user activity on the site and how they arrived at the site and the pages visited. Cookies in this category are sent from the site itself or from third-party domains.

Analytical cookie Analytics

An Analytical Cookie is used on the Site to connect to The purpose of the cookie is solely to collect information anonymously about user activity on the site, the pages visited, the time spent and the way in which have arrived at the site.

This information is used by the owner, solely for statistical analysis, in order to improve the site and simplify its use, as well as to monitor its correct functioning.

The Analytical Cookie is sent by the Site itself.

Third-party tracking cookies

Cookies of this type are used to collect information on the use of the website by visitors, the keywords used to reach the site, the websites visited and the origins of the traffic from which visitors come for marketing campaigns. IThe owner can use this information to compile reports and improve the site. Cookies collect information anonymously. Cookies of this type are sent from the Site itself or from third-party domains.

Facebook Pixel – Third party tracking cookie

Like Analytics, it is used for the sole purpose of obtaining detailed statistics on site visitors.

The 1st function of the pixel is to generate custom audiences – personalized audiences – based on the people who have visited the website.
Simple visitors who, having already had a first contact (visiting the Website) may be more inclined to continue future visits and request information.

Through custom audiences, thanks to statistical information of the Facebook Pixel it is possible to activate retargeting campaigns.

Cookies for integrating third-party features

Cookies of this type are used to integrate third-party functions into the Site (for example, comment forms or social network icons that allow visitors to share site content).

Cookies in this category can be sent from the domains of partner sites or that in any case offer the functions present on the site.

The Owner is not required to request the user’s consent for technical cookies, since these are strictly necessary for the provision of the service.

For other types of cookies, consent can be expressed by the User, in accordance with current legislation, through specific configurations of the browser and computer programs or devices that are easy and clear to use for the User.

The Owner reminds the User that it is possible to change the cookie preferences at any time. It is also possible to disable cookies from the browser at any time, but this operation could prevent the User from using some parts of the Site.

You can view the complete Cookie Policy at the [LINK]


If you send images as an attachment via email, you should avoid sending images that include embedded location data (EXIF GPS).

Content embedded from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc).

Embedded content from other websites behaves exactly the same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, integrate additional third-party tracking and monitor your interaction with them, including tracking your interaction with embedded content if you have an account and are logged in to those websites.

The consent to the use of these cookies is expressed by the interested party through the individual setting that he has freely chosen for the browser used to navigate the site, without prejudice to the user’s right to communicate his will to the Data Controller at any time regarding data managed through cookies that the browser itself has accepted.

Third Party Websites

The site contains links to other websites that have their own privacy policy and cookie policy. These privacy policies may be different from the one adopted by the Owner, who therefore is not responsible for third-party sites.

See the General Data Protection Regulation (EU) abbreviation [LINK] GDPR

Learn more about treatment
Defense in court

The User’s Personal Data may be used by the Owner in court or in the preparatory stages for its eventual establishment for the defense against abuse in the use of this Website or related Services by the User.

The User declares to be aware that the Owner may be obliged to disclose the Data by order of the public authorities.

Specific information

At the request of the User, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System and maintenance logs

For needs related to operation and maintenance, this Website and any third party services used by it may collect system logs, i.e. files that record the interactions and which may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Response to “Do Not Track” requests

This Website does not support “Do Not Track” requests.

To find out if any third-party services used support them, the User is invited to consult the respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website as well as, if technically and legally feasible, by sending a notification to Users via one of the contact information you have.

Therefore, please consult this page frequently, referring to the date of the last modification indicated at the bottom.

If the changes concern treatments whose legal basis is consent, the Data Controller will collect the User’s consent again, if necessary.

Rights of the interested parties

The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the same data, to know its content and origin, verify its accuracy or request its integration, updating or the correction.

Pursuant to the same article, one has the right to request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing, by writing to:

La Buca di Spigonetti Andra

Street Montalogno n.1597, 40050, Castello di Serravalle (BO), Italy

Or by sending an email to:

Last modified: March 14, 2023