Privacy & cookies

Who this notice is for

This notice concerns www.cesarinomilano.it and follows the structure of Article 13 of Regulation (EU) 2016/679 (GDPR) and Italian data protection law.

The website presents Cesarino, the menu and its three Milan locations. Its pages do not contain contact forms, newsletter subscriptions, account registration, booking or online purchasing services. Any processing in the shops or through other channels requires the relevant separate notices.

Controller and contact details

The controller of personal data processed through the Cesarino website is:

SUERTE S.R.L.
Via Enrico Besana 10
20122 Milano (MI), Italy
VAT no.: 10261410962

PEC (Italian certified email):
suertesrl@sicurezzapostale.it

For information about the processing of your personal data and to exercise your rights, you can contact SUERTE S.R.L. by certified email (PEC) or by post using the details above.

Data processed while browsing

When you request a page, your browser sends the server technical data such as your IP address, request date and time, requested resource, browser and operating system information, and response codes. Whether this information is recorded in logs depends on the hosting configuration.

Images and fonts are hosted alongside the website pages. Navigation and gallery features do not send data to analytics services and do not store identifiers in your browser.

Purposes and legal bases

Technical data is necessary to deliver pages, handle requests and protect the website against errors, abuse and unlawful access. The proposed legal basis for technical operation and security is the controller’s legitimate interest in maintaining a working, secure website under Article 6(1)(f) GDPR, while respecting users’ rights.

Any processing necessary to comply with legal obligations or binding requests from authorities is based on Article 6(1)(c) GDPR. The website’s own functions do not involve automated decisions producing legal or similarly significant effects.

Transmitting strictly technical data is necessary for browsing: without it, the requested pages cannot be delivered. You do not need to complete forms or provide other personal data to browse the website.

The website’s own functions do not carry out marketing or profiling. Any processing by Google after optional map activation is described in the dedicated section.

Cookies and tracking technologies

The website’s own functions do not use advertising, profiling or analytics cookies. Images, fonts and scripts are hosted alongside the pages. Language switching uses links without storing a language preference.

Strictly technical cookies and equivalent technologies are exempt from consent within the limits of Article 122 of the Italian Privacy Code. The decision of 8 May 2014 should be read together with the Italian Data Protection Authority’s guidelines of 10 June 2021. The “technical cookies only” notice concerns the default settings: Google Maps is an optional external service and remains blocked until you consent.

Privacy preferences — first‑party technical storage

cesarino_cookie_preferences_v1 is saved in your browser’s localStorage only when you choose to allow or refuse Google Maps. It contains the choice, notice version, save date and expiry date; it contains no personal identifier and the website code does not send it to an analytics service. It remembers and respects your choice for six months across the languages of the same website. After expiry it no longer authorises maps and is deleted on your next visit; you can remove it sooner in your browser settings.

Google Maps — optional third‑party service

No loading with the default settings. After consent, Google may read or set cookies and use technologies to operate maps and, depending on its settings, for analytics, personalisation and advertising. Names and lifetimes may vary by browser and account: see Google’s current description of its cookies.

Any cookies or other technologies added by the hosting or security provider must be checked on the published domain. No names or lifetimes are assigned to unverified tools.

Google Maps and preferences

Google Maps remains available on location pages, but no Google frame is loaded before consent. To enable maps, select “Activate the map” on a location’s preview or “I consent to Google Maps” in Cookie preferences. Permission applies to all maps on this website, including when switching language. Selecting “Technical cookies only” keeps maps disabled; addresses, opening hours, the menu and directions links remain available.

When you enable maps, your browser sends Google your IP address and technical information about the request and device. Google may process data and use cookies for the purposes explained in its Privacy Policy. Optional loading of maps from this website is based on consent under Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code.

You can open Cookie preferences using the link at the bottom of every page. “Technical cookies only” withdraws permission and removes loaded maps. The choice is also applied to other open tabs on the same website when supported by the browser. Withdrawal stops new map loading from this website, but does not undo previous processing or delete cookies belonging to Google domains: use your browser settings and Google’s privacy tools for those.

Consent or refusal is recorded only in your browser for six months, without introducing tracking identifiers. If your browser prevents storage, the choice lasts for the current page. Without JavaScript, embedded maps stay disabled and external directions links remain available. There are no repeated banners and scrolling alone never enables maps.

Data retention

Data must only be retained for as long as necessary for the purposes for which it is processed. For browsing and security logs, the criteria to be determined include the time needed to handle requests, diagnose errors and investigate abuse, taking applicable obligations into account.

The actual retention periods for logs, their backups and any hosting cookies await confirmation. Any longer retention related to incidents, legal obligations or disputes must be limited to what is necessary and documented by the controller.

The privacy preference in your browser is valid for six months from your choice, as described in the cookies section. Information sent to Google after consent is subject to the retention periods and criteria in its Privacy Policy; withdrawal on this website does not retroactively change that processing.

Providers and data transfers

Authorised personnel and hosting, maintenance and security providers may be involved in operating the website. When processing data on behalf of the controller, they must act under the instructions and safeguards required by Article 28 GDPR. Competent authorities may also receive data where required by law.

The hosting provider, actual categories of recipients, processing locations and any access from countries outside the European Economic Area still need to be confirmed. It is therefore not possible to state that data is processed exclusively within the European Union.

If transfers outside the EEA are envisaged, the final notice must identify the applicable mechanism, such as an adequacy decision or other safeguards under Article 44 onwards of the GDPR, and explain how to obtain information about the safeguards in place.

Links to other websites

Links to Google Maps, Instagram, Facebook, Tripadvisor and Siti Professionali open external services only when selected. Cookie choices on this website do not control external websites you choose to visit. No social feeds are embedded.

Embedded maps follow the consent described in Google Maps and preferences. Google may process information outside your country; information on data transfer mechanisms and safeguards is available in Google’s data transfer frameworks. External providers explain their purposes, retention periods and choices in their respective privacy notices.

Your rights

Where applicable and subject to Articles 15–22 GDPR, you may request access, rectification, erasure or restriction of processing. You may object to processing based on legitimate interests on grounds relating to your particular situation.

The right to data portability applies when automated processing is based on consent or a contract. Where processing relies on consent, you may withdraw it without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, you can contact SUERTE S.R.L. by certified email (PEC) at suertesrl@sicurezzapostale.it or by post at Via Enrico Besana 10, 20122 Milano (MI), Italy. A response is normally provided within one month; where permitted by the GDPR, this may be extended by two months, with notice given within the first month.

If you believe your rights have been infringed, you may lodge a complaint with the Italian Data Protection Authority or a competent supervisory authority, particularly where you habitually reside, work or where the alleged infringement occurred, and seek a judicial remedy.

Italian Data Protection Authority

Updates to this notice

This page must be updated when processing, providers or website features change. The date at the top identifies the latest revision. Introducing services that process additional data requires a prior assessment and, where necessary, updates to the notice and consent mechanisms.