Privacy Policy
Pursuant to Regulation (EU) 2016/679 (“GDPR”), this policy describes how the personal data of users who visit the Riflessi Restaurant ｜Lake Lugano website is processed.
1. Data controller
The data controller is:
G&M Gastro S.r.l.
Registered office: Piazza Roma 1, IT-22010 Valsolda (CO)
Contact email: info@ristoranteriflessi.it
Telephone: +39 351 729 89 31
2. Type of data processed
The website may collect the following categories of personal data:
Identification data (first name, last name)
Contact details (email, phone number)
Browsing data (IP address, browser type, access time)
Any data provided voluntarily through contact or booking forms
3. Purpose of processing
Personal data is processed for the following purposes:
Management of contact requests
Table reservations
Response to requests for information
Compliance with legal obligations
Improvement of the website browsing experience
4. Legal basis for processing
Data processing is based on:
User consent
Execution of a contract or pre-contractual measures
Compliance with legal obligations
Legitimate interest of the Data Controller
5. Methods of processing
Data processing is carried out using IT and telematic tools, in accordance with the principles of fairness, lawfulness, transparency, and data minimization.
Appropriate security measures are taken to prevent unauthorized access, disclosure, modification, or destruction of data.
6. Data retention
Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected and in any case in compliance with legal obligations.
7. Communication and dissemination of data
Personal data will not be disclosed.
It may be communicated to third parties (e.g., IT service providers, hosting providers, consultants) exclusively for purposes related to the management of the website and in compliance with the GDPR.
8. Transfer of data outside the EU
If data is transferred to countries outside the EU, the transfer will take place in compliance with the guarantees provided for by the GDPR (e.g., standard contractual clauses).
9. Rights of the data subject
The user has the right to:
Access their personal data
Request its correction or deletion
Limit or oppose its processing
Request data portability
Withdraw consent at any time
Lodge a complaint with the Italian Data Protection Authority
Requests can be sent to: info@ristoranteriflessi.it
10. Cookies
For detailed information on the use of cookies, please refer to the website's Cookie Policy. Use of the website is also governed by the Terms and Conditions of Use.
11. Changes to this policy
The Data Controller reserves the right to change this Privacy Policy at any time. Changes will be published on this page. (Last updated: February 2026)