Policy on the processing of personal data

This Policy sets out how the personal data of users of the Molinari restaurant website (hereinafter, the Site) is processed and protected, and applies to all information the Operator may obtain about a user during their use of the Site.

1. Key terms

Personal data — any information relating to a directly or indirectly identified natural person.

Processing of personal data — any action or set of actions performed on personal data: collection, recording, organisation, accumulation, storage, amendment, use, transfer, blocking, erasure and destruction.

User — a visitor to the Site who has completed any of the contact forms.

2. What data is processed

The Operator processes only the data a user provides voluntarily when submitting a request through the forms on the Site:

• name;
• telephone number;
• the intended date of the event, the number of guests, the chosen hall and any comment — where the user has provided them.

In addition, technical data is recorded automatically: the IP address, the address and title of the page from which the request was sent, the date and time of sending, the language version of the site, the source of the visit and any advertising tags (utm), the device type and browser data (User-Agent), and an anonymised visitor identifier from the statistics service.

3. Purposes of processing

• responding to the user about the request they have left;
• advising on the restaurant's services, available dates and prices;
• booking a hall and organising an event.

The data is not used for mailings, is not sold and is not passed to third parties, except in cases expressly provided for by the legislation of the Russian Federation.

4. Legal basis

Processing is carried out on the basis of the user's consent, given by ticking the relevant boxes when submitting the form, and in accordance with Federal Law No. 152-FZ of 27 July 2006 "On Personal Data".

5. Retention periods and arrangements

Personal data is kept no longer than the purposes of processing require, and is destroyed once those purposes are met or when the user withdraws consent.

6. Data protection

The Operator takes the organisational and technical measures necessary to protect personal data against unlawful access, copying, distribution and other unlawful actions.

7. User rights

Users have the right to obtain information about the processing of their personal data, to require it to be amended, blocked or destroyed, and to withdraw their consent to processing. To do so, simply contact the Operator by telephone on 8 (8652) 41-54-16.

8. Cookies

The Site uses cookies — small text files that the browser stores on the visitor's device. Some of them are required for the Site to work; others help the Operator understand which pages are useful to guests.

The Site uses:

• Technical. PHPSESSID — the session identifier, required for the feedback forms to work correctly and to guard against automated submissions. It is deleted when the browser is closed.
• Analytics, first-party. Files whose names begin with mol_ (mol_source, mol_landing, mol_landing_ref, mol_click, mol_utm_*) store the source of the visit and any advertising tags, so that the Operator knows which channels bring enquiries. They are kept for 30 days. mol_cookie_ok records that the visitor has seen this notice and is kept for 1 year.
• Analytics, third-party. Files belonging to Yandex.Metrica (Yandex LLC) — _ym_uid, _ym_d, _ym_isad, _ym_visorc, ymex and others. The service collects anonymised visit statistics; the terms of processing are set by Yandex.

The Operator does not use cookies for advertising targeting and does not pass them to third parties, apart from the statistics service named above.

The visitor may delete stored cookies and block them in their browser settings at any time. If technical cookies are disabled, the feedback forms on the Site will not work.

9. Changes to this Policy

The Operator may make changes to this Policy. A new version takes effect from the moment it is published on the Site.