Last updated: 15 September 2025
This notice explains how Carnevale (the "Controller", "we", "us") processes personal data in connection with the Passione Pasta website (the "Site"). The Site has no contact forms and no user registration. We only publish contact details (e‑mail address and telephone number) that you may use to get in touch with us. Passione Pasta is a brand operated by Carnevale.
Carnevale
107 Blundell Street
London
N7 9BN, United Kingdom
For any data‑protection request, please contact us using the contact details published on the Site.
We process personal data in accordance with the UK GDPR, the Data Protection Act 2018, and other applicable law. Where relevant, we also take account of the EU GDPR.
Browsing data and technical logs: the ordinary operation of the Site involves the automated collection of technical information (e.g. IP address, date/time of request, requested URL, browser user‑agent, response codes). These are generated by Internet communication protocols and are necessary to deliver the Site and to maintain its security and integrity.
Data you choose to provide: if you contact us using the e‑mail address or telephone number published on the Site, we will process the personal data contained in your message/call (e.g. name, contact details, the content of the communication) solely to handle your enquiry.
Operating and securing the Site (including logs and protective measures): our legitimate interests in the secure operation of the Site and the prevention of abuse (Art. 6(1)(f) UK GDPR/EU GDPR, as applicable).
Handling enquiries sent by you (via e‑mail or phone): our legitimate interests in responding to spontaneous enquiries and maintaining relationships (Art. 6(1)(f)), and/or taking steps at your request prior to entering into a contract where relevant (Art. 6(1)(b)).
You can browse the Site without providing personal data other than what is strictly necessary for Internet communication. Sending us a voluntary communication is optional, but if you do, we will process the data needed to respond.
Your data may be processed by suppliers providing technical/organisational services (e.g. hosting, IT support) acting as processors under written terms, and by public authorities or other parties where disclosure is required by law or orders of an authority.
As a rule, data are processed in the United Kingdom and/or the European Economic Area. If it becomes necessary to transfer data outside the UK/EEA, we will implement appropriate safeguards required by law (e.g. adequacy regulations/decisions, the UK International Data Transfer Agreement or the EU/UK Standard Contractual Clauses), where applicable.
Technical logs and browsing data: kept for the time strictly necessary to ensure security and the proper operation of the Site and to investigate anomalies, and in any case no longer than 12 months, unless a longer period is required to investigate offences or to establish or defend legal claims.
Enquiries/communications: kept for the time needed to respond and manage the request and, where appropriate, to comply with legal obligations or establish/defend legal claims.
Subject to conditions and limits under law, you have the rights to access, rectification, erasure, restriction, data portability (where applicable), and objection to processing based on legitimate interests. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). For details, see the ICO's website.
To exercise your rights, please contact us using the contact details published on the Site.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, disclosure, or alteration.
The Site is intended for a general audience. We do not knowingly collect data relating to children under 13.
We may update this notice to reflect legal or technical changes. Updates will be published on this page.
Note: this text is provided for general information only and does not constitute legal advice. For specific needs, please consult a qualified professional.