Privacy Policy

www.francosbar.com

 

Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR)

This notice is provided to inform users and visitors of the principles governing the use of personal data supplied when accessing our web services, with particular regard to privacy and confidentiality.

This page describes how the website francosbar.com operates with respect to the processing of personal data of users and visitors who browse it. It constitutes an information notice issued pursuant to Regulation (EU) 2016/679 (the “GDPR”) and in accordance with applicable data protection legislation, addressed to those who interact electronically with the services available on this website, accessible from the address www.francosbar.com.

This notice applies solely to the website francosbar.com and does not extend to any third-party websites accessible through links contained herein.

Data Controller and Place of Processing

The website francosbar.com is operated by:

  1. Le Sirenuse S.p.A., trading as Franco’s Bar Positano, VAT no. 02397010659, with registered office at Via San Sebastiano, 2, Positano (SA), Italy — Data Controller for all processing activities related to the management of services and requests submitted through this website. Le Sirenuse S.p.A. undertakes to ensure full compliance with applicable data protection legislation.

The following third-party providers operate technical services in connection with this website:

  1. Positioner SA, Lugano, Centro Monda 3, 6528 Camorino, Switzerland, for the design, development and technical management of this website. Switzerland has been recognised by the European Commission as a country ensuring an adequate level of protection for personal data;
  2. iWay AG, headquartered in Zurich, Switzerland, for website hosting services; processing activities are limited exclusively to technical services. Switzerland has been recognised by the European Commission as a country ensuring an adequate level of protection for personal data;
  3. Cloudflare, Inc., San Francisco (USA), for security and performance services (CDN/WAF) through which all site traffic transits — transfer to a third country is safeguarded by Standard Contractual Clauses pursuant to Article 46 GDPR;
  4. Google LLC, Mountain View (USA), for web traffic analysis services (Google Analytics 4) and tag management (Google Tag Manager) — transfer to a third country is safeguarded by Standard Contractual Clauses pursuant to Article 46 GDPR. These services are activated exclusively upon the data subject’s prior consent through the cookie consent management mechanism.

Other parties that may require access to personal data held on this website may be appointed as Data Processors by the Controller. An up-to-date list of processors may be requested from the Data Controller.

Users and visitors are requested to read this notice carefully before submitting any personal information. Browsing this website does not, in itself, constitute a legal basis for the processing of personal data pursuant to Article 6 GDPR. Processing activities that require the data subject’s consent are carried out solely upon its prior collection in the manner prescribed by applicable legislation.

Purposes and Legal Basis of Processing

This website is a purely informational one-page site. No forms are present and no personal data is actively requested from users. The only personal data processed is that which is collected automatically during browsing (see below) and, where consent is given, data collected through analytics tools.

Browsing data are processed to ensure the correct functioning of the website, on the basis of the legitimate interest of the Controller (Article 6(1)(f) GDPR). Any processing carried out using non-anonymised traffic analysis tools is performed exclusively on the basis of the data subject’s prior consent (Article 6(1)(a) GDPR).

Categories of Data Processed and Purposes of Processing

Browsing data

The computer systems and software procedures underlying the operation of this website may, in the course of their normal functioning, collect certain personal data whose transmission is implicit in the use of internet communication protocols. This information is not gathered with the intent of associating it with identified individuals; however, by its very nature and through processing and cross-referencing with third-party data, it may enable the indirect identification of users (IP addresses, domain names of computers used to connect, operating system and browser details, timestamps, etc.). Such data may be used solely for statistical purposes in anonymous, aggregated form, and to monitor the proper functioning of the website. It is retained for a limited period not exceeding 7 days, is not disclosed to third parties, and is shared only to the extent strictly necessary for the technical management of the service.

Data relating to cookies and similar technologies

Cookies are small text strings that visited websites deposit on users’ devices to enhance the browsing experience and, where applicable, to monitor usage patterns. In the course of browsing a website, users may also receive on their device cookies sent by different websites or web servers (so-called “third-party” cookies).

Upon first accessing the website, users and visitors may express their consent to the installation of non-technical cookies, which are used exclusively upon receipt of such consent, and/or may view the Cookie Policy. Non-technical cookies — including non-anonymised traffic analysis cookies — are installed and activated exclusively following the expression of the user’s consent through the dedicated cookie preference management mechanism; in the absence of such consent, these tools remain disabled.

The full and up-to-date Cookie Policy, including the list of all cookies in use, their purposes, duration, and the identity of third-party providers, is available via the cookie preference centre on the website.

Third-party content and links

The website contains a link to the Instagram profile @francosbar (Meta Platforms Ireland Ltd, Dublin, Ireland). This link directs users to an external platform; the Controller has no control over the processing of personal data carried out by Instagram on its own platform, which is governed by Meta’s own privacy policy.

The website contains a link to Google Maps (Google LLC, USA) for location information. Interaction with this service is subject to Google’s privacy policy. Transfer to a third country is safeguarded by Standard Contractual Clauses pursuant to Article 46 GDPR.

Optional Nature of Data Provision

With the exception of browsing data as specified above, users and visitors are free to choose whether or not to interact with third-party services linked from this website. No personal data is required to browse the site itself.

Processing Methods and Retention

All processing is carried out by automated means for the period strictly necessary to achieve the purposes for which the data were collected, and in any event in accordance with applicable legislative provisions. Browsing data are retained for a period not exceeding 7 days, save where retention is required in connection with the investigation of criminal offences.

For processing carried out by third-party service providers acting as Data Processors (including Positioner SA, iWay AG, Cloudflare and Google LLC), retention periods are governed by the respective contractual arrangements and the privacy policies of the individual providers, to which reference is made.

Specific security measures are implemented to prevent the loss, unlawful or improper use of data, as well as any unauthorised access.

Rights of Data Subjects

Pursuant to Articles 15–22 of the GDPR, the data subject has the right, at any time and within the limits and conditions established by law, to obtain confirmation as to whether or not personal data relating to them are being processed and, if so, to obtain access to their data and to the following information:

  1. the purposes of the processing;
  2. the categories of personal data being processed;
  3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular where located in third countries or international organisations;
  4. the envisaged retention period for the personal data or, where this is not possible, the criteria used to determine that period;
  5. all available information as to the source of the data, where personal data have not been collected directly from the data subject;
  6. the existence of any automated decision-making process, including profiling.

The data subject also has the right to obtain, without undue delay, from the Data Controller:

  1. the rectification of inaccurate personal data;
  2. the completion of incomplete personal data, including by means of a supplementary statement;
  3. the erasure of their personal data (within the limits and cases provided for by applicable legislation);
  4. the restriction of processing;
  5. the right to object at any time to the processing of their personal data (Article 21 GDPR), where processing is based on the legitimate interest of the Controller;
  6. the right to withdraw consent at any time, without prejudice to the lawfulness of processing carried out prior to such withdrawal (Article 7 GDPR);
  7. the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome – www.garanteprivacy.it – PEC: garante@gpdp.it.

The data subject further has the right to receive from the Data Controller the personal data concerning them in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance (portability, Article 20 GDPR), where technically feasible.

Relevant requests should be addressed directly to the Data Controller at the e-mail address info@sirenuse.it. Data subjects may also contact the Data Protection Officer directly at dpo.sirenuse@figurati.it.

This document, published at www.francosbar.com, constitutes the Privacy Policy of this website and may be updated periodically. The use of information collected is subject to the policy in effect at the time of use.

Last updated: April 2026