1. Data controller
The data controller is the party that manages the DingList service and the dinglist.it domain. For personal data protection requests, contact info@dinglist.it.
2. Data we process
Depending on the features used, DingList may process:
- identity and contact data, such as name and email address;
- account data, role, user status and the tenants to which the user is assigned;
- content entered into the platform, including venue details, menus, images, contact details and other information intended for publication;
- technical browsing data, such as IP address, request date and time, browser, device, application and security logs;
- messages sent to the service contact address.
Passwords are not stored in plain text, but protected using hashing systems.
3. Purposes and legal bases
- provide the service, manage accounts, tenants and digital menus, and fulfil user requests;
- respond to information or support requests and carry out pre-contractual activities;
- protect accounts, infrastructure and data, preventing abuse and unauthorised access;
- comply with legal, administrative and accounting obligations or authority requests;
- establish, exercise or defend legal claims.
The legal bases are performance of a contract or pre-contractual measures, compliance with legal obligations, and the legitimate interest in service security and proper management. Where required, processing is based on consent.
4. Providing data
Data required to create or use an account is necessary to provide the service. Failure to provide it may make it impossible to activate the account or use certain features. Optional data is identified as such in the interface.
5. Processing methods and recipients
Data is processed using IT systems and organisational measures designed to limit unauthorised access, loss or use. It may be accessed by authorised personnel and providers required to operate the service, subject to confidentiality obligations and, where applicable, appointed as processors. Data may also be disclosed to authorities where required by law.
Information made public by the tenant manager, such as venue name, contact details and menu content, is visible to anyone visiting the related public page.
6. Retention
Account and tenant data is retained for the duration of the relationship and afterwards for as long as needed to comply with legal obligations or protect rights. Contact requests and technical logs are retained for periods proportionate to support, operation and security purposes. Backups are deleted according to infrastructure technical cycles.
7. Your rights
Where provided by Regulation (EU) 2016/679, data subjects may request access, rectification, erasure, restriction, portability and objection, and may withdraw consent without affecting prior processing. Requests can be sent to info@dinglist.it.
You may also lodge a complaint with the Italian Data Protection Authority.
8. Updates
This notice may be updated following changes to the service or applicable law. The version published on this page always shows the latest update date.