Privacy & Cookie Policy
Last updated: June 2026
1. Data Controller
The data controller for personal data collected through conzato.it is:
Conzato Bistrot Matera
Via Fiorentini, 241 — 75100 Matera (MT), Italy
Tel: +39 347 728 9282
Email: info@conzato.it
2. Data collected and purposes
The site collects the following data:
a) Navigation data
Standard server logs (IP address, browser type, operating system, request time) are automatically acquired for statistical analysis and correct operation of the site. They are not stored beyond the strictly necessary period.
b) Cookies
See section 5 for details on cookies used.
c) Voluntarily provided data
The site does not collect voluntarily provided data (no contact forms, registration or purchase).
3. Legal basis for processing
| Purpose | Legal basis |
|---|---|
| Technical operation of the site | Legitimate interest of the controller (Art. 6.1.f GDPR) |
| Language preference | Legitimate interest (Art. 6.1.f GDPR) |
| Statistical traffic analysis (Google Analytics) | User consent (Art. 6.1.a GDPR) |
4. Retention period
| Data / Cookie | Duration |
|---|---|
| Server navigation logs | Max 30 days |
Session cookie (PHPSESSID) | Session (browser close) |
| Language preference cookie | Session |
Consent cookie (conzato_consent) | 12 months |
Google Analytics cookies (_ga, _ga_*) | 24 months (if consent given) |
5. Cookie Policy
Cookies are small text files stored in your browser. We use the following categories:
Essential technical cookies — always active
Required for the site to function. No prior consent needed.
| Name | Purpose | Duration |
|---|---|---|
PHPSESSID | PHP session management (language preference) | Session |
conzato_consent | Stores the cookie preferences expressed | 12 months |
Analytics cookies — with consent only
Set only if the user accepts analytics cookies in the banner. They collect anonymous, aggregated statistics via Google Analytics 4 (GA4).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google LLC | Distinguishes unique users | 24 months |
_ga_* | Google LLC | Maintains GA4 session state | 24 months |
IP addresses are anonymised before being sent to Google. No profiling data is collected. More info: Google Privacy Policy.
Managing consent
You can change your preferences at any time by clicking the cookie icon at the bottom left (🍪) or by returning to this page.
6. Data transfers outside the EU
Google Analytics involves data transfers to Google LLC (USA). The transfer is covered by the Standard Contractual Clauses (SCC) adopted by the European Commission and the data processing agreement entered into with Google.
7. Your rights
As a data subject, you have the right to:
- Access (Art. 15 GDPR): obtain confirmation of processing and a copy of your data;
- Rectification (Art. 16): correct inaccurate data;
- Erasure (Art. 17): request deletion of your data ("right to be forgotten");
- Restriction (Art. 18): restrict processing in certain cases;
- Portability (Art. 20): receive data in a structured format;
- Objection (Art. 21): object to processing based on legitimate interest;
- Withdrawal of consent (Art. 7.3): withdraw consent at any time without affecting prior processing;
- Complaint (Art. 77): lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
To exercise your rights, write to: info@conzato.it
8. Changes to this policy
This policy may be updated to reflect regulatory changes or changes to the services offered. The "last updated" date at the top of the page indicates the most recent version.