Privacy policy

The Langosteria group has produced this document to provide the user (the “User”) with all the information necessary to understand the methods with which it collects and uses personal data (“Personal Data”), also in compliance with the provisions of articles 13 and 14 of EU Regulation 2016/679 (“G.D.P.R.”) and pursuant to Italian Legislative Decree 196/2003, as amended by Italian Legislative Decree 101/2018 and successive modifications and integrations (hereinafter referred to as “Privacy Code”).

By navigating on the website (the “Website”), the User accepts the terms and conditions specified in this Privacy Policy.


1. Who is the Data Controller?

EB MANAGEMENT S.r.l., represented by its pro tempore legal representative, with registered offices in Milan (MI), in Via Privata Lecce 4 – 20136, VAT Number 09715620960, LANGOSTERIA S.r.l., represented by its pro tempore legal representative, with registered offices in Milan (MI), in Via Savona 10 – 20144, VAT Number 08218980962, LANGOSTERIA BISTROT S.r.l., represented by its pro tempore legal representative, with registered offices in Milan (MI), in Via Bobbio 2 – 20144, VAT Number 082119150961, LANGOSTERIA CAFE’ MILANO S.r.l., represented by its pro tempore legal representative, with legal offices in Milan (MI) in Galleria del Corso 4 – 20122, VAT Number 10145140967, and LP S.r.l., represented by its pro tempore legal representative, with registered offices in Milan (MI) in Via Privata Lecce 4 – 20136, VAT Number 09727080963, joint Data Controllers for the personal Data of the User (hereinafter also referred to as “Joint Data Controllers” or “Langosteria group”).


2. Method of processing

The Joint Data Controllers process the Personal Data in compliance with the principles of correctness, legality, transparency, confidentiality and minimisation.

In particular, the Joint Data Controllers undertake, also pursuant to article 5, paragraph one, letter c) of the G.D.P.R., to not process Personal Data in the event that the purpose aimed for in individual cases can be achieved through the use of anonymous data or through other means, which allow for the identification of the User solely when necessary or on request from the authorities and law enforcement agencies.

In order to guarantee that the Personal Data are always correct and up to date, pertinent and complete, please inform us of all modifications made, preferably via certified email, to the address:


3. Types of data processed and purposes of processing

3.1 Navigation data

The Information Technology Systems used by this website register various data necessary for the use of Internet communication protocols that can potentially be associated to identifiable Users, and in particular:

  • the Internet protocol (IP) address of the Users connecting to the Website;
  • the type of browser and device (computer, tablet, smartphone, etc.) used to connect to the Website;
  • the date and time of visit;
  • the country of origin.

Legal Basis and Purpose of Data Processing – the Data are used:

  • to collect statistical information regarding the use of the Website and to monitor the regular functioning of the same, also pursuant to article 6, paragraph one, letter f of the G.D.P.R.;
  • for reasons of security (antispam filters, firewalls, intrusion detection), in particular the Data automatically registered may be used, in compliance with relative current laws, in order to block attempts to damage the Website or to avoid damage to other Users, or in any case to impede fraudulent activity, also pursuant to article 6, paragraph one, letter f of the G.D.P.R.

It is understood that the Data are not used for the identification or profiling of the User (the Joint Data Controllers are not in any way able to identify visitors to the website), nor are they cross-referenced with other Data, nor are they divulged to third parties, but are used exclusively for the purposes of protecting the Website and its Users.

The Data regarding the use of the Website are held for the period of time strictly necessary for technical purposes and in any case for no longer than twelve months, save for cases in which further conservation of the same is required (e.g. in the event of communication of illicit actions, in case of attacks to the Website or when requested by the Judicial Authorities).

  • General Data provided directly by the User

The Joint Data Controllers may, furthermore, acquire the User’s Personal Data (name, email address, telephone number, etc.) spontaneously provided by the latter when requesting subscription to the newsletter, when asking for information, including that of a commercial nature or with regards to possible offers of employment, or following the sending of a Curriculum Vitae.

Legal Basis – Purpose of the Data processing. The Data will be processed in order to respond to a request from the User:

  • for reservations or for commercial information, and therefore processing will be necessary for pre-contractual or contractual purposes pursuant to article 6, paragraph 1, letter b) of the G.D.P.R., and the duration will be equal to the duration of the relationship, save for the necessity for a different duration in order to comply with legal obligations.
  • for general information, and therefore processing will be carried out for the legitimate interests of the Data Controller pursuant to article 6, paragraph 1, letter b) of the G.D.P.R., and will last for a limited period of time equal to that necessary in order to respond to the request made by the User.
  • for information regarding offers of employment, and therefore processing will be carried out for the execution of pre-contractual measures adopted on the request of the Data Subject pursuant to article 6, paragraph 1, letter b), as well as pursuant to article 9, paragraph 2, letters b) and e) of the G.D.P.R.
  • to receive information regarding the Langosteria group, and therefore processing will be based on the consent of the User, pursuant to article 6, paragraph one, letter a) of the G.D.P.R.

In the event of further processing carried out for purposes and on legal bases other than those listed above, specific information will be provided, and consent will be requested where necessary.


4. Nature of provision of data

With the exception of Navigation Data, for which provision is necessary for the consultation of the Website, the provision of further Personal Data is free and optional, therefore any refusal by the User to provide said data will result in the impossibility of the Joint Data Controllers, while not for reasons attributable to the latter, to comply with the requests of the User.


5. Place where data are processed

The processing of Personal Data is carried out within the European territory pursuant to the G.D.P.R. and the Privacy Code.


6. Parties to whom we communicate Personal Data

All the Data collected may be communicated to the collaborators of the Joint Data Controllers in their role as data processors, save for further obligatory processing requested by current law.


7. Access to processing

Personal Data are processed exclusively by authorised subjects who act under the authority of the Data Controller, or by third-party entities, as data processors.


8. User rights

The User is always able to exercise the rights provided by articles 15 and onwards of the G.D.P.R. and the Privacy Code, which are listed below:

  • the right to access to Data as well as related information (i.e. purposes of processing, categories of Data, the recipients to whom the Data have been or will be communicated, the necessary period of storage of the Data or the criteria used to determine said period );
  • the right to the rectification of incorrect Data and the integration of the same in the event that they are incomplete;
  • the right to the cancellation of the Data (known as “right to be forgotten”);
  • the right to the restriction of processing of the Data, (i.e. in the event of contestation or in the event of illicit processing, etc.);
  • the right to lodge a complaint with the Data Protection Authority pursuant to article 77 of the G.D.P.R. (for further information please consult the website;
  • the right to Data Portability;
  • the right to object to the processing of Data (i.e. in the event of profiling, of processing for the purposes of marketing, or for scientific, historical and statistical research etc.);
  • the right to revoke consent where granted.

9. Exercising of rights

In order to exercise the rights specified in article 8 of this Privacy Policy, with the exception of complaints, the User may send a written request, preferably in accordance with the following methods:

  • Via certified email:;
  • Via registered letter with proof of receipt to Milano (MI), Via Privata Lecce 4 – 20136.

Within and no later than 30 days from receipt of the request, the User will be informed of the action taken with regards to the aforementioned request.

The aforementioned period of time may be extended in the case of necessity owing to the complexity of the request, following relative communication to the User.


10. Modifications and updates to the Privacy Policy

This Privacy Policy may be subject to modifications, also in consideration of any modifications made to the law regarding the protection of data that may take place over time.

Modifications and updates made to the Privacy Policy for the Website will be applicable from the moment they are published in this section. We therefore invite the User to regularly access this section in order to verify the publication of the most recent and updated Privacy Policy.