Legal
Privacy policy
Last updated: 13 October 2026
This notice, provided under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"), explains how personal data are processed when you visit pastaepisa.it or contact us for information or bookings.
1. Data controller
La Repubblica s.a.s., registered office Via B. Pampaloni, 94 – 50063 Figline Valdarno (FI), Italy, VAT no. 06091510484. Email: info@pastaepisa.it · Phone: +39 335 649 6463.
2. Data we process
- Data you give us through the request form or by email, phone or WhatsApp: name, email address, phone number, company (if any), preferred date, number of guests and your message (for example dietary needs or children's ages, if you choose to share them).
- Technical browsing data: IP address, date and time of the request and pages visited, automatically logged by the server hosting the website for security and proper operation.
Information about allergies or intolerances, if you share it, is used only to run the class safely.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering requests and managing bookings for classes and team building | Pre-contractual measures and performance of a contract (Art. 6(1)(b) GDPR); for any health-related data (allergies), your explicit consent (Art. 9(2)(a)) |
| Tax and legal obligations | Legal obligation (Art. 6(1)(c)) |
| Website security and abuse prevention (e.g. automated spam) | Legitimate interest (Art. 6(1)(f)) |
We do not use your data for marketing and we do not sell or share it for marketing purposes.
4. How long we keep data
Data are processed electronically with appropriate security measures. Requests received through the form are kept for as long as needed to handle the request and any booking, and no longer than 24 months after the last contact, unless the law requires otherwise (e.g. tax records: 10 years). The technical log of form submissions is kept for 12 months and then deleted automatically.
5. Recipients
Data may be processed on our behalf by: the website hosting and maintenance provider (Royaletiger S.r.l.); our email service provider; our tax advisers. Data are never published. The class takes place at the Royal Victoria Hotel: guests' names may be shared with the hotel only where needed to organise the class.
6. Transfers outside the EU
Data are processed within the European Economic Area. If you contact us via WhatsApp or Facebook, those platforms process data under their own privacy policies.
7. Third-party services
This website does not use analytics tools, advertising pixels, embedded maps or fonts loaded from external servers. Links to Google Maps, Facebook and WhatsApp open those services only if you click them.
8. Your rights
You can exercise your rights under Articles 15-22 GDPR at any time — access, rectification, erasure, restriction, portability, objection and withdrawal of consent — by writing to info@pastaepisa.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of your country.
9. Is providing data mandatory?
Your name and email are needed to answer your request; all other information is optional.
10. Changes
This notice may be updated; the date of the latest update is shown at the top. For cookies, see our cookie policy.