Last updated: September 30, 2026
Welcome to the Ristorante La Chicca website. When you visit it we collect some technical information necessary for it to work and, with your consent, information about how you use it so we can improve it. Below we explain what we collect, for what purpose, and who has access to it.
Data controller
The controller of the personal data collected through this website is:
La Chicca Srl (Ristorante La Chicca)
Via dei Macci 79 rosso, 50122 Firenze (FI)
Email: info@ristorantelachicca.it
Phone: +39 351 316 4268
Personal data we collect
We collect different types of personal data depending on how you interact with the site:
- Data you provide voluntarily: when you contact us by email or WhatsApp, fill in the groups and events form, buy a gift card or an experience, or book through the platforms linked to the site, you provide us with your first name, last name, email, phone number, and other information needed for the request.
- Data collected automatically: when you browse the site we collect technical data such as IP address, browser type, device, pages visited, and time spent on the site.
- Data collected through third-party services: for bookings the site links to OpenTable, TheFork, and Hertable; for statistics we use Google Tag Manager; the site is hosted by Webflow; gift card and experience payments go through Stripe; for cookie consent we use CookieYes. These services may collect personal data as described below.
Purposes of processing
Your personal data is processed to:
- Manage bookings and respond to requests.
- Improve the experience on the site.
- Fulfil legal or regulatory obligations.
- Analyze site usage for statistical purposes, only with your consent.
Legal basis for processing
Processing is based on one or more of the following legal grounds, depending on the context:
- Performance of a contract: to manage bookings or requests.
- Consent: for non-essential cookies or marketing purposes.
- Legal obligation: to comply with legal requirements.
- Legitimate interest: to improve the site, when this does not override your rights.
Third-party services we use
OpenTable, TheFork, and Hertable (bookings)
For bookings, the site links to OpenTable, TheFork, and Hertable, independent platforms. When you book through these services, your name, email, phone number, and booking details are collected and processed directly by these providers under their respective privacy policies. The legal basis is performance of a contract or your consent.
CookieYes (cookie consent management)
We use CookieYes to manage cookie consent on the site. This tool collects data about your cookie preferences through the banner that appears on your first visit. The data collected is processed according to CookieYes's privacy policy. The legal basis is your consent or our legitimate interest in ensuring compliance with cookie regulations.
Google Tag Manager (statistics)
We use Google Tag Manager, a service of Google Ireland Limited, to manage the tools that measure how the site is used, such as Google Analytics. These tools collect technical data such as pages visited, device type, and where the visit came from, and they are only activated with your consent. The data is processed according to Google's privacy policy. The legal basis is your consent.
Webflow (website hosting and forms)
The site is hosted by Webflow, Inc. When you fill in the groups and events form, the data you enter is collected through Webflow and sent to us so we can respond to your request. The legal basis is taking steps at your request before entering into a contract.
Stripe (payments)
Gift cards and experiences are purchased through Stripe, an independent payment platform. Card details are processed directly by Stripe under its privacy policy: we never see or store them. We only receive the data needed to handle the order, such as your name and email. The legal basis is performance of a contract.
WhatsApp (contact)
If you message us on WhatsApp, your messages and phone number are also processed by WhatsApp, a Meta group service, under its privacy policy. We use them only to respond to your request. The legal basis is taking steps at your request before entering into a contract.
Cookies and similar technologies
The site uses technical cookies, necessary for it to work, and analytics cookies, which help us understand how it is used. Analytics cookies and the tools managed through Google Tag Manager are only activated after you give your consent through the CookieYes banner: until you choose, they stay off. You can change your preferences at any time from the same banner, or delete cookies from your browser settings. If you also block technical cookies, some site features may not work correctly.
Sharing of personal data
Your personal data may be shared with:
- The service providers we use (OpenTable, TheFork, Hertable, Google, Webflow, Stripe, WhatsApp, and CookieYes) for the purposes described above.
- Competent authorities, if required by law or to protect our legal rights.
We do not sell or transfer your personal data to third parties for commercial purposes without your consent.
International data transfer
Some of the providers we use may transfer your data outside the European Union. In these cases, we ensure that appropriate safeguards are adopted, such as the standard contractual clauses provided for by the GDPR.
Data retention
We keep your personal data only for as long as necessary to achieve the purposes for which it was collected, or to comply with legal obligations — for example, data relating to contact requests is kept for the time needed to handle them and for any tax and accounting obligations required by law.
Your rights
Under the GDPR you have the following rights over your personal data:
- Access: you can request confirmation that your data is being processed and obtain a copy of it.
- Rectification: you can request the correction of inaccurate or incomplete data.
- Erasure: you can request the deletion of your personal data.
- Restriction of processing: in certain circumstances.
- Portability: you can receive your data in a structured, readable format.
- Objection: you can object to processing on legitimate grounds or for direct marketing.
- Withdrawal of consent: at any time, without affecting the lawfulness of processing already carried out.
To exercise these rights, write to us at info@ristorantelachicca.it. We will respond within the timeframe required by law, generally 30 days.
Data security
We adopt appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, alteration, or disclosure. No data transmission over the Internet is ever completely secure, so we encourage you to take care when sharing information online.
Changes to this notice
We reserve the right to update this notice periodically to reflect changes in our practices or in the law. We will inform you of any significant changes by publishing the updated version on this page with the update date.
Contact
For any question, request, or complaint regarding privacy, you can contact us at:
Email: info@ristorantelachicca.it
Phone: +39 351 316 4268
Address: Via dei Macci 79 rosso, 50122 Firenze (FI)
If you are not satisfied with our response, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).
La Chicca Srl — Registered office: Via dei Macci 79 rosso, 50122 Firenze (FI) — Registered with the Chamber of Commerce of Florence — VAT/Tax ID: 06759590489 — Unique code: M5UXCR1 — Certified email (PEC): lachiccasrl24@pec.it — Share capital €10,000.00, fully paid-in.
