# Privacy Policy

> Privacy Policy Pursuant to Articles 13-14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018 Last updated: 24 October 2026 1. Data Controller The Data Controller for the personal data collected through the website www.wildlive.it

- **URL**: https://www.wildlive.it/en/privacy-policy-en/
- **Pubblicato**: 06/10/2026
- **Aggiornato**: 24/10/2026

---

## Privacy Policy

*Pursuant to Articles 13-14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018*

Last updated: 24 October 2026

### 1. Data Controller

The Data Controller for the personal data collected through the website **www.wildlive.it** (hereinafter “the Website”) is:

- **Company name**: Gardenia S.R.L.
- **Registered office**: Via XI Settembre n°20, 37019 Peschiera del Garda (VR), Italy
- **VAT / Tax code**: 04233600230
- **REA**: VR-403969
- **Share capital**: €50,000.00
- **Certified email (PEC)**: gardeniasrl@legalmail.it
- **Email**: info@wildlive.it
- **Phone**: +39 045 225 5955

The Website relates to the activity of **Wild Live — Cibo e Musica**, located at Via Tangenziale 3, 37019 Peschiera del Garda (VR), Italy.

### 2. Types of data collected

#### a) Browsing data

The IT systems and software procedures used to operate the Website automatically acquire certain personal data during normal operation, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects but, by its very nature, could allow user identification through processing and association with data held by third parties. This category includes: IP addresses, browser type and operating system, domain names and addresses of websites from which access or exit was made, pages visited, access times, time spent on each page, and other parameters related to the operating system and the user’s IT environment.

#### b) Data provided through the booking form

Through the booking form on the Website, the user may voluntarily provide the following data:

- First and last name
- Phone number
- Booking date and time
- Number of guests (adults and, where applicable, children)
- Additional notes (allergies, special requirements, special occasions)

This data is sent directly to the restaurant via WhatsApp or email and **is not stored on the Website’s servers**. The processing of such data takes place exclusively on the device of the restaurant manager who receives the communication.

#### c) Data collected through the Franchising form

Through the franchise information request form, the user may provide their phone number. This data is stored on the Website’s server in order to manage the commercial enquiry and is retained for the period strictly necessary for this purpose.

#### d) Cookies and tracking technologies

The Website uses technical cookies necessary for its operation and, subject to the user’s explicit consent, may use analytical and profiling cookies. For detailed information, please refer to the **Cookie Policy** available on the Website.

### 3. Purposes and legal basis for processing

Personal data collected is processed for the following purposes:

| Purpose | Legal basis (Art. 6 GDPR) | Description |
| --- | --- | --- |
| Technical operation of the Website and IT security | Legitimate interest of the Controller (Art. 6.1.f) | Ensuring proper operation, security and prevention of fraudulent activities on the Website |
| Handling booking requests | Performance of pre-contractual measures at the request of the data subject (Art. 6.1.b) | Processing and transmitting table booking requests sent via WhatsApp or email to the restaurant |
| Handling franchise enquiries | Performance of pre-contractual measures at the request of the data subject (Art. 6.1.b) | Collecting and managing information requests related to the franchise programme |
| Statistical analysis of web traffic | User consent (Art. 6.1.a) | Analysing Website usage through statistical analysis tools (e.g. Google Analytics) to improve content and user experience |
| Marketing and remarketing | User consent (Art. 6.1.a) | Displaying personalised advertising through third-party platforms (e.g. Google Ads, Meta Pixel — Facebook/Instagram) |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c) | Fulfilling obligations imposed by law, regulations, or European legislation |

### 4. Third-party services

The Website uses, or may use, the following third-party services that involve the processing of personal data:

#### Google Analytics (Google LLC)

A web analytics service that allows monitoring and analysis of Website traffic. Currently **not active**, but set up for future activation. If activated, its use will be subject to the user’s prior consent. Data may be transferred to the United States.

Privacy Policy: [policies.google.com/privacy](https://policies.google.com/privacy)

#### Google Ads (Google LLC)

An advertising service that allows personalised ads to be shown to Website users. Currently **not active**, but set up for future activation. If activated, its use will be subject to the user’s prior consent.

Privacy Policy: [policies.google.com/privacy](https://policies.google.com/privacy)

#### Meta Pixel — Facebook/Instagram (Meta Platforms, Inc.)

An analytics and advertising service that enables measuring the effectiveness of advertising campaigns and displaying personalised ads on Facebook and Instagram. Currently **not active**, but set up for future activation. If activated, its use will be subject to the user’s prior consent.

Privacy Policy: [facebook.com/privacy/policy](https://www.facebook.com/privacy/policy/)

#### Google Maps (Google LLC)

The Website embeds an interactive Google Maps map on the contacts page. This service is active and may install its own cookies. The use of Google Maps is subject to Google’s terms of service and privacy policy.

Privacy Policy: [policies.google.com/privacy](https://policies.google.com/privacy)

### 5. Communication and disclosure of data

Personal data collected may be communicated to the following categories of recipients:

- **IT service providers**: entities providing hosting, maintenance, and management services for the Controller’s IT systems (currently Aruba S.p.A.)
- **Analytics and advertising service providers**: Google LLC and Meta Platforms, Inc. (only with the user’s prior consent and if the relevant services are activated)
- **Professionals and consultants**: within the limits strictly necessary for the performance of their duties
- **Competent authorities**: in the cases provided for by law or upon their request

Personal data **will never be disclosed** to unspecified parties, nor sold to third parties.

### 6. Transfer of data outside the EU

Some of the third-party services listed above (Google LLC, Meta Platforms, Inc.) are based in the United States of America. If such services are activated, the transfer of personal data outside the European Economic Area will comply with the safeguards provided by the GDPR, and in particular:

- Adequacy decisions of the European Commission (including, where applicable, the EU-US Data Privacy Framework)
- Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Art. 46.2.c of the GDPR
- Other appropriate safeguards under Articles 46-49 of the GDPR

### 7. Data retention period

- **Browsing data**: retained for the time strictly necessary for the technical management of the Website and, in anonymous and aggregated form, for statistical purposes. In any case, no longer than 26 months from collection.
- **Booking data**: not stored on the Website, as it is sent directly via WhatsApp or email to the restaurant.
- **Franchise enquiry data**: retained for the time necessary to manage the request and in any case no longer than 24 months from collection, unless otherwise indicated by the data subject.
- **Cookies**: the duration is specified in the Website’s Cookie Policy.
- **Data for legal obligations**: retained for the period required by applicable legislation (e.g. tax and accounting obligations: 10 years).

### 8. Rights of the data subject

Under Articles 15-22 of the GDPR, the user has the right to:

- **Access** (Art. 15): obtain confirmation of whether personal data is being processed and, if so, access the personal data and the information provided for in the article
- **Rectification** (Art. 16): obtain without undue delay the rectification of inaccurate personal data or the completion of incomplete data
- **Erasure** (Art. 17, “right to be forgotten”): obtain without undue delay the erasure of personal data in the cases provided for by the GDPR
- **Restriction of processing** (Art. 18): obtain the restriction of processing when one of the conditions set out in the article applies
- **Data portability** (Art. 20): receive personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller without hindrance
- **Objection** (Art. 21): object at any time to the processing of data based on the Controller’s legitimate interest, including profiling
- **Withdrawal of consent** (Art. 7.3): withdraw consent at any time, without affecting the lawfulness of processing based on consent given before the withdrawal
- **Automated decision-making** (Art. 22): not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects the individual

To exercise their rights, the user may send a request to the Controller at:

- **Email**: info@wildlive.it
- **Certified email (PEC)**: gardeniasrl@legalmail.it
- **Post**: Gardenia S.R.L. — Via XI Settembre n°20, 37019 Peschiera del Garda (VR), Italy

The Controller undertakes to respond to requests within 30 days of receipt, extendable by a further 60 days in cases of particular complexity, informing the data subject of the extension and the reasons for the delay within the first month.

### 9. Right to lodge a complaint

Any data subject who believes that the processing of their personal data infringes the GDPR has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):

- **Website**: [www.garanteprivacy.it](https://www.garanteprivacy.it)
- **Email**: garante@gpdp.it
- **Certified email (PEC)**: protocollo@pec.gpdp.it
- **Address**: Piazza Venezia 11, 00187 Rome, Italy

### 10. Online dispute resolution

Consumers residing in an EU Member State may use the European Commission’s ODR (Online Dispute Resolution) platform for the alternative resolution of disputes, accessible at: [ec.europa.eu/consumers/odr](https://ec.europa.eu/consumers/odr).

### 11. Changes to this policy

The Controller reserves the right to amend this privacy policy at any time, publicising the changes to users on this page and, where possible, through the Website. Please consult this page regularly, taking the date of the last update shown above as reference. If you do not accept the changes made, you are invited to stop using the Website and to request the deletion of your personal data from the Controller.

---

Fonte: https://www.wildlive.it/en/privacy-policy-en/ — Wild Live