Dear user, this website collects some Personal Data from its Users.
We provide you with this policy to inform you of the use and storage of such information under the provisions of the current regulations regarding data processing.

DATA CONTROLLER: The data controller is Rosticceria Galli Sas di Negrelli Luca & C. Corso Vercelli 8 - 20145 Milan (MI) - Italy - email to:

Object of the treatment

The Data Controller processes personal, identifying and non-sensitive data (in particular, name, surname, e-mail, telephone-mobile number - hereinafter, "personal data" or "data") brought to his attention.

Purposes for which the collected Data is processed

The processing of your data has your consent as its legal basis and is carried out:

1. to fulfil the contract between you and the Rosticceria Galli Sas di Negrelli Luca & C .;
2. to fulfil pre-contractual, contractual and tax obligations (VAT tax register etc.) deriving from existing relationships;
3. to fulfil the obligations established by law, a regulation, community legislation or an order of the Authority;
4. to exercise the Data Controller's rights, such as the right to defence in court;

Method and place of processing of the collected data

The processing of your data occurs through the operations indicated in art. 4 n. 2) GDPR, such as collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your data are subjected to both paper and electronic and automated processing.

The Data is processed at the Data Controller's headsquarters and other places where the parties involved in the processing operate.
Contact the Data Controller for more information.

The Data is processed for the time needed to provide the service requested by the User or the purposes described in this policy. 
The User can always request the interruption of the processing or the deletion of their Data.

Access to data

The data are made accessible for the purposes referred to in point 2 to employees and collaborators of the company Società Rosticceria Galli Sas di Negrelli Luca & C. in their capacity as data processors and/or system administrators.

Data communication

Your data may be disclosed to the Data Processors appointed by the Data Controller. We also inform you that the data collected will not be communicated without your explicit consent, except for the necessary communications that may involve the transfer of data to public bodies, consultants or other subjects for the fulfilment of legal obligations.

Data transfer

The management and storage of personal data will take place on servers located within the headquarters of the Data Controller and/or the Data Processor.
The data will be transferred outside the European Union. In any case, the Data Controller has the right to move the server if necessary.
In this case, the data protection officer ensures that the data is transferred following the legal provisions.

Dissemination of data. Data profiling.
Your data are not subject to disclosure. Your data are not subject to profiling.

Rights of the interested party

The Regulation grants the subjects whose personal data are processed specific rights, including:

(a) obtain confirmation that their data is being processed and obtain access thereto. (Article 15 of the Regulation);
(b) obtain the rectification of inaccurate personal data (Article 16 of the Regulation);
(c) obtain the cancellation of their data, in compliance with the right to be forgotten (Article 17 of the Regulations);
(d) obtain the limitation to processing by the Data Controller (Article 18 of the Regulation);
(e) obtain their data in a structured, legible and comprehensible way, as well as that such data be transmitted to another data controller without impediments (Article 20 of the Regulation);
(f) oppose processing of their personal data (Article 21 of the Regulation)

You can revoke your consent at any time without this revocation affecting the processing carried out up to that moment by the Data Controller.

How to exercise your rights

You can exercise your rights with a written request sent to the Company, to the postal address of the registered office or to the email address:


The Data Controller does not intentionally collect personal information relating to minors. In the event that information on minors were unintentionally registered, the Data Controller will delete them immidiately upon request of the users.

Duration of treatment

We point out that, in compliance with the principles of lawfulness, purpose limitation and data minimization, according to art. 5 of the Regulation:
(a) your data will be kept for the entire duration of the contractual relationship with the company Rosticceria Galli Sas di Negrelli Luca & C., and the following 10 (ten) years for tax purposes only and to fulfil the further needs of law, e
(b) subject to your free and explicit consent expressed to the processing of your data for the purposes referred to in point 2 by selecting the appropriate box on the site / your data will be kept for 2 (two) years from the moment in which will be provided.

Further information on the treatment

Defence in court

The User's Data may be used for defence by the Data Controler in court or the stages leading to its eventual establishment, from abuses in the use of the same or related services by the User. The User declares to be aware that the Data Controller may be required to disclose the Data at the request of the public authorities.

Information not contained in this policy

More information concerning the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page.

(Date of last revision: 29 September 2022)