Privacy Policy
How we handle the personal data of people who visit the site, contact us or apply to join the waso team.
Last updated on 13 October 2026
Who processes your data
The data controller is BE WATER SRL, the company that runs waso, with its registered office at Via del Commercio Associato 30, Bologna, Italia, VAT no. 04277361202.
For information or requests about your personal data, email info@waso.it. You can also write to our registered office and mark your letter “Privacy request”.
This notice, provided under Article 13 of Regulation (EU) 2016/679 (GDPR), covers visits to www.waso.it and enquiries sent using the contact details on the site. The restaurant at ESP Shopping Centre in Ravenna is separate from the company’s registered office.
What data we process and why
Browsing and security
The systems that deliver and protect the site process technical data. This includes IP addresses, the date and time of requests, pages requested, browser and device information, response status and security signals.
We use these data to make pages available, address errors and counter unauthorised access and automated traffic. The legal basis is BE WATER SRL’s legitimate interest in keeping the service available and secure (Article 6(1)(f) GDPR). Article 122 of the Italian Privacy Code also applies to technical cookies. For details, see our Cookie Policy.
Enquiries and franchise proposals
If you write to us, we process your email address, name, any other contact details you provide and the content of your message. Franchise enquiries may include your company, the city you are interested in and information about your project.
We use these data to respond to your enquiry and handle the ensuing correspondence. For enquiries about a possible contract, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b)). For general enquiries, the legal basis is our legitimate interest in replying to the messages we receive (point (f)). Any processing required to meet a legal obligation relies on point (c).
The “Prepare email” button creates a draft in your email app. The fields are processed in your browser. The site does not send them to a database or save them for your next visit. We only receive the message when you send it from your email app.
Job applications and CVs
When you send a job application to info@waso.it, we process the contact details, experience, skills and other relevant information in your email and CV to assess your application and contact you. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b)).
Only include information relevant to your application. We keep applications for one month from receipt. If we hire you, a separate privacy notice covers the data we need for your employment.
The site does not offer customer accounts, newsletter subscriptions or direct payments. Sending an enquiry or application does not sign you up for promotional messages. We do not use these data for commercial profiling or to make decisions based solely on automated processing that have legal or similarly significant effects.
What you choose to share
You can choose whether to write to us or send an application. You can browse the menu, opening times and other content without filling in a form.
To answer an enquiry, we need valid contact details and enough information to understand your request. We may be unable to deal with it without these details. We process the technical data needed for the connection and for security while you browse.
How long we keep your data
- Applications and CVs
- One month from receipt, the period set by BE WATER SRL, unless there is a specific legal obligation or a documented need to defend a right. In the latter case, we keep only the data needed and only for as long as strictly necessary.
- Enquiries and projects
- For the time needed to reply and conclude the correspondence about your enquiry. After that, we may need to keep certain data to document agreements, comply with legal obligations or defend a right. We keep those data only for those purposes and within the applicable time limits.
- Technical data and logs
- For as long as necessary to operate and secure the site, in line with the infrastructure settings. Data relating to an incident may be kept for the time needed to address it and establish its cause.
- Security cookies
- The durations are listed in the Cookie Policy table. A cookie’s expiry in your browser is separate from the provider’s log retention period.
Who may receive your data
People authorised by BE WATER SRL and the providers involved in delivering the services may process your data within the scope of their respective roles. These include the following.
- Google, for the email service associated with info@waso.it and for managing incoming messages.
- OpenAI’s Sites platform and Cloudflare’s infrastructure, for publishing, delivering and protecting pages.
- Consultants and others helping BE WATER SRL deal with your specific request, where necessary.
- Authorities or other authorised parties when required by law.
The site does not make your data public. Where a provider acts on behalf of the controller, their relationship must be governed in accordance with Article 28 GDPR. Any processing the provider carries out for its own purposes is covered by its own privacy notice.
Services and international transfers
Technology providers may use infrastructure and staff outside the European Economic Area. For example, Cloudflare states that under its default settings, data relating to cookies may be processed in the United States. You should therefore not assume that data are stored exclusively in Italy or the European Union.
Any transfers must comply with Chapter V of the GDPR, through an adequacy decision applicable to the recipient or appropriate safeguards such as standard contractual clauses, together with any additional measures needed. You can write to info@waso.it for information about the safeguards in place and how to obtain a copy.
Delivery, maps and social media
Links to Deliveroo, Just Eat, Google Maps, Instagram, TikTok and LinkedIn take you to external services. When you visit them, their own policies and settings apply to the processing they carry out.
The waso site does not collect payment details for orders placed on delivery platforms. If an order involves sharing information with waso to prepare or deliver it, the notices provided during that ordering process apply. This page does not replace them.
Maps and social media feeds are not embedded in the pages. The site’s own infrastructure serves its images, videos and fonts. No video players or fonts are loaded from external social media services.
Your rights and how to exercise them
Where the GDPR provides for it, and subject to its limits, you can request access to your data, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing is based on consent, you may withdraw it without affecting the lawfulness of processing carried out before withdrawal.
Describe your request and include the details we need to identify the message or application it relates to. If necessary, we may ask for proportionate information to verify who made the request.
We respond without undue delay and normally within one month. Where the law allows, we may extend the deadline by a further two months. If we do, we will tell you why within the first month.
You can lodge a complaint with the Garante per la protezione dei dati personali (Italian data protection authority) or the competent supervisory authority, without prejudice to other remedies available to you by law.
Updates to this policy
We update this notice when the services or processing described change. The date at the top identifies the version you are reading.
For information about cookies and other technologies in your browser, see also our Cookie Policy.