Ronzoni Srl con socio unico (hereinafter “Data Controller”) ensures that the processing of users’ personal data is carried out in compliance with EU Regulation 2016/679 (GDPR). This privacy policy aims to illustrate the methods, purposes, and rights relating to data processing.

Data Controller and DPO

The Data Controller is Ronzoni Srl con socio unico, with registered office at Via S. Cassiano 14 – 24030 Presezzo (BG), Italy, contactable at the e-mail address info@ronzonisrl.it.

This privacy policy is intended for users who interact with the website managed by the Data Controller, including through contact forms, newsletters, marketing tools, and statistical analysis tools.

The Data Controller has not appointed a Data Protection Officer (DPO). For any request relating to the processing of personal data or to exercise the rights provided for by Regulation (EU) 2016/679, please contact the Data Controller at the e-mail address indicated above.

Types of Data Collected

The following categories of personal data are collected through the website:

• Identification and contact data voluntarily provided by the user, such as name, e-mail address, telephone number, company affiliation, as well as any content entered in messages transmitted via the contact form or the Booking Calendar reservation system;
• Technical and browsing data, including IP address, type of device used, browser, date and time of access to the site;
• Usage data processed through tracking tools such as Google Analytics 4 (GA4).

The Data Controller does not process special categories of personal data pursuant to Article 9 of the GDPR (e.g., data relating to health, political opinions, religious or philosophical beliefs).

Purpose of Processing

Personal data collected through the site are processed for the following purposes:

• Management of contact requests: to respond to requests submitted by users;

Statistical analysis of web traffic: to carry out statistical analyses, in aggregate and anonymous form, relating to browsing and use of the site, through tracking tools such as Google Analytics 4 (GA4).

Purpose of Processing of Collected Data

User Data are collected to enable the Data Controller to provide its services, as well as for the following purposes: Statistics, Contacting the User, and Displaying content from external platforms. The types of Personal Data used for each purpose are indicated in the specific sections of this document.

Methods of Processing

The processing of personal data is based on the following lawful conditions, pursuant to Article 6 of Regulation (EU) 2016/679:

• Consent of the data subject (Article 6, paragraph 1, letter a), expressed by selecting an appropriate information box;
• Legitimate interest of the Data Controller (Article 6, paragraph 1, letter f), connected to the need to improve the functioning of the site, monitor its use, and optimize communications with users, including through statistical tools such as Google Analytics 4;
• Compliance with legal obligations (Article 6, paragraph 1, letter c), where legal obligations arise in fiscal or administrative matters, in cases where the user makes requests that involve the issuance of accounting documentation.

Consent given may be withdrawn at any time, without prejudice to the lawfulness of processing carried out before withdrawal.

Data Retention

Personal data collected through the site are retained for the time strictly necessary to achieve the purposes for which they were collected, and in particular:

• for the time necessary to manage and respond to requests sent via the contact form or the reservation system, and in any case no longer than 12 months from the last contact, except for further legal obligations;
• until withdrawal of consent, for processing based on it;
• for 10 years, where data are associated with fiscal, accounting, or administrative obligations (e.g., issuance of invoices or other official documents).

After the retention period has elapsed, personal data will be deleted or anonymized through technical procedures suitable to ensure their non-recoverability.

Last updated: August 1, 2025