1. Data Controller

The Data Controller is: La Baguetterie Molfetta s.n.c Dell'Olio V. Di Ceglie F. & Co., with registered office at Piazza Garibaldi 16/17, 70056 Molfetta (BA), Italy, VAT No. 07097480722, Email: labaguetteriemolfetta@gmail.com. For any privacy-related requests, you can contact us at: labaguetteriemolfetta@gmail.com.

2. Types of Data Processed

Depending on the services you use on the website, we may process:

• Navigation and technical data (e.g., IP address, logs, online identifiers, device/browser information, technical events related to security and operation).

• Data provided by the user via forms (e.g., name, email, phone number) and content submitted voluntarily.

• Members Area data (registration/login, profile data, and preferences, including preferences regarding promotional channels).

• Contact data and marketing preferences (e.g., email/WhatsApp opt-in and phone number, if provided).

• Any data related to orders/reservations if active on the site (e.g., take-away, delivery, reservations), strictly limited to what is necessary to provide the service.

3. Purposes and Legal Basis of Processing

We process your data for the following purposes:

A) Provision of the website and requested services

• Management of registration, login, Members Area, requests sent via forms, and technical functionalities of the website.

• Legal basis: execution of a contract or pre-contractual measures / provision of the requested service; legitimate interest of the Data Controller in the security and proper functioning of the site.

B) Management of requests and contacts

• Responding to requests for information, assistance, and operational communications.

• Legal basis: execution of pre-contractual/contractual measures or legitimate interest (depending on the case).

C) Legal obligations and protection

• Regulatory obligations (tax/accounting if applicable), dispute management, and legal defense.

• Legal basis: legal obligation and/or legitimate interest.

D) Promotional communications (marketing) via Email and/or WhatsApp

• Sending promotions, news, events, discounts, and commercial communications via the selected channels.

• Legal basis: consent of the data subject, freely given and revocable at any time. Failure to provide consent does not prevent the use of the site and its services.

For WhatsApp: If you choose this channel, we will use the provided number to send you messages via WhatsApp Business; WhatsApp may process certain data as a service provider in accordance with its own terms and privacy policies.

Revocation of marketing consent: You can revoke or modify your consent at any time (e.g., via the "Consents/Preferences" page, unsubscribe links in emails, or by writing to labaguetteriemolfetta@gmail.com). Revocation does not affect the lawfulness of processing carried out prior to the revocation.

4. Processing Methods

Data processing is carried out using IT and telematics tools, with appropriate security measures in place to prevent unauthorized access, disclosure, modification, or destruction of the data.

5. Data Recipients and "Data Processors"

Data may be processed by subjects authorized by the Data Controller and by suppliers acting as Data Processors (e.g., hosting providers, technical platforms, email service providers), strictly within the limits necessary for the aforementioned purposes.

Wix Platform The website is built and hosted on Wix.com. In this context, the Data Controller (us) determines the purposes and means of processing, and Wix typically operates as a "data processor" on behalf of the Data Controller, in accordance with the relevant Data Processing Agreement (DPA) and GDPR supporting documentation.

6. Extra-EU Data Transfers

The use of cloud services may involve the transfer of data to countries outside the EEA. Wix states that it manages such transfers in compliance with GDPR requirements through appropriate transfer mechanisms and safeguards. For third-party services (e.g., analytics/ads), transfers depend on the respective providers and the active settings on the website.

7. Retention Period

We retain data for the time strictly necessary to fulfill the aforementioned purposes:

• Technical security/log data: for limited periods, unless required for the investigation of crimes or the defense of legal rights.

• Request/contact data: for the time necessary to handle the request and for any legal protection needs.

• Marketing: until consent is revoked and, in any case, for a maximum period defined by the Data Controller (e.g., 24 months), unless renewed or further consent is given.

• Legal/accounting obligations (if applicable): according to the timeframes established by law.

8. Data Subject Rights

You can exercise the rights provided by Articles 15–22 of the GDPR (access, rectification, erasure, restriction, data portability, objection, and revocation of consent where applicable) by writing to labaguetteriemolfetta@gmail.com. You also have the right to lodge a complaint with the Data Protection Authority (Garante per la protezione dei dati personali).