Privacy Policy

1. Controller and Contact

DAL MORO'S CONSULTING S.R.L., VAT IT04447040272. Registered office: Piazzale Cesare Rossarol 8, 30175 Marghera, Venice (VE), Italy. Venice Rovigo Companies Register no. 04447040272, REA VE-415684. Certified email (PEC): dalmorosfranchise@pec.it. Table bookings for Málaga are handled by DAL MOROS ESPAÑA, SOCIEDAD LIMITADA (NIF B24847527), which operates that restaurant.

Enquiries and exercising your rights: info@dalmoros.it. Phone: +34 657 21 35 18.

2. Data and Purposes

Franchise applications are handled by DAL MORO'S CONSULTING S.R.L. (Piazzale Cesare Rossarol 8, 30175 Marghera, Venice, Italy; VAT IT04447040272), owner of the Dal Moro’s franchise model and controller of this processing; you can exercise your rights at franchise@dalmoros.it. The franchise application collects identification and contact details, residence, professional experience, company structure, territory, planned investment and funding, premises, team and motivation. We ask for first name, surname, email, phone, country and city of residence, language and confirmation that you are of legal age. Where relevant, photos or plans of the premises may be provided. The first application does not ask for date of birth, nationality, home address, ID card, residence card or passport details or copies, a personal photo, a CV or an attached presentation. Do not send copies of ID by email. Any later verification and how it is delivered will be decided case by case. This data and these files are used to assess the application and contact the applicant. The form asks for consent for this purpose; requested pre-contractual steps may rely on Article 6.1.b GDPR where applicable. Fields marked as required must be completed to send the form. The application does not guarantee the grant of a franchise. Do not provide other people’s documents or private banking details.

The contact form asks for your name, email, subject and message to handle your enquiry. The required fields are needed to send and process the enquiry through this form. If you don’t provide them, you won’t be able to send it; you can use the other published contact channels. Do not include sensitive information that isn’t necessary.

Messages sent by email, phone or WhatsApp are used to reply to the contact you started. According to the configuration and the activity declared by the controller, contacts are not used for newsletters, advertising or other commercial communications. The website does not offer online payments. Restaurant table bookings are described in the “Restaurant table bookings” section. Browsing may generate technical data, such as IP address, browser and access logs, needed to serve and protect the website.

Restaurant Table Bookings

The booking form of the Fresh Pasta Restaurant (Málaga and Venice), available on this website and on the other Dal Moro’s websites, collects first name and surname, email, phone, number of guests, date and time and, only if you choose to give them, allergies or intolerances. The language and the website you book from are also recorded, so we can write to you in your language. The data is used to manage your booking, send you the confirmation and, where applicable, a reminder or notices of changes. Legal basis: handling the booking you request (Article 6.1.b GDPR); any allergies or intolerances you report are processed with your explicit consent (Article 9.2.a GDPR) solely to prepare your visit. Only authorised staff of the chosen restaurant have access to it. Bookings are deleted automatically 180 days after the date of the visit. You can cancel your booking with the link in the confirmation email and exercise your rights at info@dalmoros.it.

Job Applications for the Málaga Locations

The job forms for fresh pasta to go and the fresh pasta restaurant are separate. They collect first name and surname, email, phone, area of interest, start date and hours availability, languages and a summary of experience and motivation. They do not ask for an attached CV, photo or identity documents. The data is sent to info@dalmoros.it to assess the application for the selected location and to contact you during that process. It will be processed to carry out pre-contractual steps requested by the candidate where applicable. It will not be used for future processes without separate permission. The controller has set its deletion at no more than 48 hours from receipt, with the legal exceptions and the conditions for mailboxes and backups described in section 4. The website does not automatically delete applications from email accounts. You can withdraw your application and exercise your rights at info@dalmoros.it.

Restaurant Group Requests

The group form for the Málaga fresh pasta restaurant collects details of the agency or organisation, the professional contact and the group leader; the organisation’s billing details where provided; dates, times, guest counts, budget, menu and drink preferences, requested free places and service requirements. They are used to prepare a proposal and coordinate the service, based on the permission requested in the form and any applicable pre-contractual or contractual steps. Dietary and accessibility needs should be given as numbers and operational requirements, without guest names, diagnoses or medical reports. Do not identify specific people with health data in the text fields. If individual communication is needed, a channel and the relevant information will be agreed before collecting it. Requests are sent to info@dalmoros.it and kept while they are handled, with any retention obligations that apply if the service is confirmed. No automatic deletion is declared.

3. Legal Bases

The form asks for your consent to reply to your enquiry (Article 6.1.a GDPR). You can withdraw it by writing to the email address given, without affecting earlier lawful processing. If you request steps prior to a contract, handling them may rely on Article 6.1.b. Technical security is based on the legitimate interest in protecting the website and its users, limited to what is necessary (Article 6.1.f). Applicable legal obligations may require information to be kept (Article 6.1.c).

Confirming that you have read about the fresh pasta to go format before the menu is separate from form consent.

4. Retention

The controller has set a maximum period of 48 hours from receipt for keeping enquiries and job or franchise applications in mailboxes and working files, including attachments. After that period they must be deleted, including from trash and working copies under its control. The only exception is specific information that must be kept because of a legal obligation or pending liability, which must stay blocked for the applicable period.

This period is a retention instruction from the controller; the website does not automatically delete anything from Aruba or Google mailboxes. To be effective, it must be applied in those services and the deletion checked. Retention of backups is detailed below.

Contact forms handled by Contact Form 7 send requests to info@dalmoros.it, and the franchise application form sends them to franchise@dalmoros.it, Aruba mailboxes. Anyone who sends a franchise application receives an automatic acknowledgement email. The controller identifies Aruba and Google as its providers and states that it uses no other providers to receive these requests. Earlier messages may remain in Google. The 48-hour period must be applied to mailboxes, attachments, downloads and trash under the controller’s control. The deletion settings and specific periods for technical logs and backups at the providers need checking; this policy does not confirm their automatic deletion or set an unverified period for backups. You can ask the controller for more information.

5. Services and Recipients

The WordPress emoji detector was disabled for public browsing on 17 October 2026 to avoid storing its checks and loading replacement images from its CDN. The “Privacy” centre links to these policies without setting new cookies or saving a generic acceptance of the privacy policy.

Hosting is provided by Aruba S.p.A.’s Hosting Gestito Smart per WordPress. Contact forms send new requests to info@dalmoros.it and the franchise application form to franchise@dalmoros.it, mailboxes managed through Aruba. Requests previously sent to the Gmail account used before the mailbox change, and messages still sent directly to that account, may remain in Google’s Gmail. People authorised by the controller access enquiries to handle them. Information may be disclosed to authorities where there is a legal obligation.

Google Maps, WhatsApp and email links open only if the visitor chooses. Maps are not embedded in these pages. When you access an external service, its provider may receive technical data and apply its own terms: Google’s privacy policy and WhatsApp’s privacy policy.

6. International Transfers

The contact and franchise application forms no longer send new requests to Gmail. Processing of earlier messages, emails sent directly to Gmail and the use of external Google or WhatsApp services may involve processing outside the European Economic Area. Google explains its mechanisms in its data transfer frameworks. The specific contractual terms of the accounts used and the safeguards applicable to this controller are still to be checked; this link alone does not prove a processor agreement or a specific safeguard. Google states that consumer Gmail does not include a data processing agreement and that in that case it does not act as a processor. Google Workspace terms are different and cannot be assumed to apply to that account. See Google’s information for business customers. For more information, contact the controller.

7. Your Rights

You can request access, rectification, erasure, restriction, objection and portability where applicable, and withdraw your consent, by writing to the contact email. State the right and the details needed to find your request. Additional identification will only be requested when necessary. Under Article 12 GDPR, a reply must be given without undue delay and within one month of receipt at the latest. This may be extended by two months where justified by complexity or the number of requests, with the extension and its reasons communicated within the first month. This is free of charge, except in the legally provided cases of manifestly unfounded or excessive requests. You can complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali) or to the supervisory authority of your country of residence.

No automated decision-making or commercial profiling has been identified in the reviewed configuration. No Analytics modules were found configured in Site Kit.

8. Changes

Google’s optional measurement tags stay blocked until you select “Accept optional”. You can reject them or withdraw your permission from the “Privacy” centre. Your choice is remembered in local storage for up to 180 days. See the cookie policy for the controls and storage used. This information will be reviewed when orders, payments, advertising or other processing are added. See also the cookie policy. Last updated: 31 October 2026.