Welcome to Michelangelo's Pizzeria, owned and operated by Viale Olimpico LLC ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you register to use our complimentary in-restaurant Wi-Fi service or visit our website at https://michelangelospeonk.com/.

This Policy is designed to comply with applicable United States privacy laws — including the California Consumer Privacy Act (CCPA), the Telephone Consumer Protection Act (TCPA), and the CAN-SPAM Act — as well as the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area (EEA) or United Kingdom.

Please read this Policy carefully. If you do not agree with its terms, please discontinue use of our Wi-Fi service and website.

When you register for our complimentary Wi-Fi service, we collect the following personal information:

• First Name

• Email Address

• Mobile Phone Number

• Birthday

We collect this information solely for the purpose of providing you with access to our free Wi-Fi and sending you special promotional offers, discounts, and updates related to Michelangelo's Pizzeria. We do not collect sensitive personal data (such as financial information, government ID numbers, or health data) through this registration.

For individuals in the EEA or UK, our legal basis for collecting and processing your personal data is your explicit consent, which you provide at the time of Wi-Fi registration. You may withdraw your consent at any time (see Section 7 below).

For US-based individuals, by registering and providing your mobile number, you expressly consent to receive recurring automated marketing text messages (SMS) from Viale Olimpico LLC at the number provided, in accordance with the TCPA.

We use the personal information you provide for the following purposes:

• To grant you access to our complimentary in-restaurant Wi-Fi network.

• To send you special offers, promotions, discounts, and news about Michelangelo's Pizzeria via SMS (text message) and/or email.

• To communicate important updates related to our services or this Privacy Policy.

• To comply with applicable legal obligations.

We will NOT use your information for automated decision-making or profiling, nor will we sell, rent, or lease your personal data to third parties for their own marketing purposes.

By providing your mobile number and registering for our Wi-Fi service, you consent to receive recurring promotional and informational text messages from Viale Olimpico LLC (Michelangelo's Pizzeria). Message frequency will vary. Standard message and data rates may apply depending on your mobile carrier and plan.

You may opt out of receiving SMS messages from us at any time by replying STOP to any text message you receive from us. Upon receiving your STOP request, we will promptly remove your mobile number from our SMS marketing list and send you a final confirmation message. No further SMS messages will be sent after opt-out is confirmed, except as required by law.

For assistance, reply HELP to any of our text messages or contact us directly at the information provided in Section 11.

Message carriers are not liable for delayed or undelivered messages. Opting out of SMS does not automatically remove your other data from our system. To request full data deletion, see Section 7

We may send promotional emails to the address you provide at registration. All marketing emails we send will:

• Clearly identify Viale Olimpico LLC (Michelangelo's Pizzeria) as the sender.

• Include a valid physical postal address for our business.

• Include a clear and conspicuous unsubscribe mechanism.

To unsubscribe from marketing emails, click the "Unsubscribe" link in any email we send, or contact us at the information in Section 11. We will process your request within 10 business days.

Depending on your location, you may have the following rights with respect to your personal data:

• Right to Opt Out: Opt out of SMS by texting STOP; opt out of email by clicking Unsubscribe.

• Right to Access: Request a copy of the personal data we hold about you.

• Right to Deletion: Request that we delete your personal data from our systems.

• Right of Access (Art. 15 GDPR): Obtain confirmation of whether we process your data and request a copy.

• Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.

• Right to Erasure / Right to be Forgotten (Art. 17 GDPR): Request deletion of your personal data.

• Right to Restriction of Processing (Art. 18 GDPR): Request that we limit how we use your data.

• Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.

• Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests or for direct marketing.

• Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw consent at any time without affecting prior lawful processing.

• Right to Know: Know what personal information we collect, use, disclose, or sell.

• Right to Delete: Request deletion of personal information we have collected.

• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, please contact us using the information in Section 11. We will respond to verifiable requests within 30 days (CCPA) or one month (GDPR).

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Policy, or as required by applicable law. Once you opt out or request deletion, we will remove your data from our active marketing systems within a reasonable time, and in no event longer than 30 days.

Note: Certain transaction and compliance records may be retained longer as required by US tax law or other applicable regulations, even after an opt-out or deletion request.

We implement commercially reasonable technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. However, no method of data transmission or storage is 100% secure. We encourage you to be cautious about the personal information you provide.

In the event of a data breach that affects your rights and freedoms, we will notify the relevant supervisory authorities and affected individuals as required by applicable law (including GDPR Article 33/34 where applicable).

We do not sell, trade, or rent your personal data to third parties. We may share your data only in the following limited circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our Wi-Fi registration system, SMS platform, or email marketing services, subject to confidentiality and data processing agreements.

• Legal Compliance: When required by law, regulation, court order, or governmental authority.

• Business Transfer: In connection with a merger, acquisition, or sale of our business assets, with appropriate data protection obligations transferred to the successor.

Any third-party service providers we engage are contractually obligated to use your data only for the purposes we specify and in compliance with applicable privacy laws.

Our Wi-Fi service and website are not directed to children under the age of 13 (or 16 for GDPR purposes). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take prompt steps to delete such information.

Your personal data is primarily stored and processed in the United States. If you are located in the EEA, UK, or another jurisdiction with data transfer restrictions, please be aware that the US may not offer the same level of data protection as your home country. Where required, we will implement appropriate safeguards — such as Standard Contractual Clauses — to protect your data in compliance with GDPR Chapter V.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this Policy and, where required, notify you by email or other appropriate means. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

Viale Olimpico LLC (Michelangelo Speonk)

Website: https://michelangelospeonk.com/

email: chef@michelangelospeonk.com

Location: Speonk, New York

For GDPR-specific inquiries, you also have the right to lodge a complaint with your local data protection supervisory authority.