Privacy Policy

Dear user,
First of all, thank you for coming to visit us.
We value the fact that you can trust us and therefore we want to share with you on this page the purposes and methods of processing personal data that we collect during your browsing, following your registration on the site (hereinafter referred to as “Site”).
When you browse our Site, you may register (“Registered Users”) or choose not to do so (“Unregistered Users”).
Registration is optional and allows you to use services such as: receive communications and offers.
The processing of your personal data is always based on the principles of lawfulness and fairness in compliance with all applicable regulations. Below you will find all the details on the processing of your personal data.
We are here to answer your questions. To contact us, please visit the Contacts page on our website.
Remember that you can request your data by clicking on the following link DATA REQUEST and ask for its deletion writing to our email address present in the page Contacts

privacy notice

The data controller is “il Bottaccio” and can be contacted directly from the Contact page of this website.

The Data Controller will process your Personal Data in compliance with EU Regulation n. 2016/679 and national legislation on the protection of personal data (hereinafter “Privacy Law”).

What Personal Data we process and how we collect it

Your browsing on the Site and/or access to some sections of the Site may involve the collection and subsequent processing of your Personal Data by the Controller. In fact, when connecting to the Site, the computer systems and software procedures used for their operation automatically and indirectly provide and/or acquire certain information (such as, for example, the c.d. “cookies”, as specified in the “Cookie Policy” page,”IP” addresses, domain names of computers used by users connecting to the Site, addresses in notation “Url” of requested resources, the time of the request to the server).

Your registration to the Site and/or any requests for information or services on your part may also entail the collection and subsequent processing of your Personal Data (such as first name, surname, postal and e-mail address, password, age, date of birth, sex, image, profession, marital status, etc.).
In particular, the collection of your Personal Data may take place:
– by filling in on-line forms;
– through the purchase of products and/or services from our Site;

In the event that you choose to register on the Site or send a request through the “Contact” section of the Site, the provision of certain Personal Data is necessary for the Owner to meet your needs within the scope of the functionalities of the Site, for which the relevant fields of the registration form are marked with an asterisk or otherwise marked as mandatory. The provision of Personal Data not marked with an asterisk or otherwise marked as mandatory is merely optional and the failure, partial or incorrect provision of such Personal Data does not entail any consequence. On the other hand, the failure to provide, partially or incorrectly, the Personal Data marked with an asterisk or otherwise marked as mandatory does not make it possible to perform the service requested by you. In case you have failed to provide one or more mandatory Personal Data, an error message from the Controller will appear with the list of missing mandatory Personal Data.

What are the purposes of processing your Personal Data and its legal basis

According to the needs you have expressed from time to time by accessing the various sections of the Site (and except for individual initiatives that involve the provision of specific Personal Data, for which specific information will be published on the Site from time to time), the purposes of processing your Personal Data and the related legal bases are indicated below.

Your Personal Data will be processed for the following purposes only after your consent to processing, which can be revoked at any time by deleting your profile, using the link placed at the bottom of each promotional email (regarding marketing activities and the newsletter) or according to the modalities indicated by the Data Controller from time to time when collecting consent:

a) Management of and response to your requests

You can decide to give consent to the processing of your Personal Data for the management and response, by the Owner, to your requests in relation to products, advertising or the Site (“Contact” section of the Site). In relation to this purpose, your consent is required at the time of sending requests. If you decide not to give consent to the processing of your Personal Data for the aforementioned purpose, it will not be possible to continue with the sending of your request.

b) Marketing activities

You may decide to give consent to the processing of your Personal Data for marketing purposes, that is for commercial communications, including via e-mail, regarding the sending of promotional and advertising material. In relation to this purpose your consent is required at the time of registration on the Site.

c) Profiling activities

You can decide to give consent to be subject to profiling, that is to the analysis of your habits and/ or consumer choices as well as the comparison of your personal data in the different databases of or used by the Controller, for example, to send personalized promotional communications, personalization of the content displayed on the Site, publication of banners and statistical surveys. There are various activities that may contribute to the creation of your profile, interaction with the site, purchase of products. In relation to this purpose your consent is required at the time of registration on the Site.

d) Receipt of the newsletter

You can decide to subscribe, giving your consent, to the newsletter service. In relation to this purpose, your consent is requested at the time of subscription to the newsletter service.

How we process your Personal Data

The processing of your Personal Data may include any type of operation, including collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, Deletion and destruction.

Your Personal Data will be processed in a predominantly automated but also paper-based form, with logics strictly related to the respective purposes, through databases, the electronic platforms operated by the Data Controller or third parties appointed for this purpose external processors and/or integrated computer systems of the Data Controller and said third parties and/or websites owned or used by the Data Controller.

The Controller has assessed the security level as adequate taking into account the risks that could arise from loss, destruction, modification, unauthorised disclosure, accidental or illegal access, misuse or alteration of your Personal Data. In particular, the following:

– has adopted safety measures appropriate to the risks;
– store your Personal Data on servers mainly located in the European territory, (For the transfer of your Personal Data outside the European Economic Area, please see the following section “Transfer of your Personal Data outside the European Economic Area”). In any case, the servers are subject to an advanced and daily back up system.

Where we process your personal data

Your Personal Data are processed mainly at the offices of the Controller and in the places where the controllers are located. For further information, please contact the Data Controller at the addresses indicated in the “Identity and contact details of the Data Controller” section.

How long we keep your Personal Data

In order to ensure compliance with the principles of necessity and proportionality of processing, the Data Controller has identified different retention periods for Personal Data in relation to the individual purposes pursued:

(i) for the management of your registration on the Site and activities related to your activation and use of the services offered therein, your interaction with the Site and the sections present in it, Your Personal Data will be kept for the time strictly necessary and at most as long as your profile is active. For security reasons, we will use the log data to verify the usage of your account and in case you are inactive for a period of more than 24 months, we will contact you to verify your interest in keeping your account active, and how to express your interest. If you fail to do anything within the next 30 days, your account will be deleted;

(ii) for the purposes of managing and responding to your requests in relation to products and initiatives of the Owner, advertising or the Site (“Contact” section of the Site), your Personal Data will be kept for the time strictly necessary to fulfill your request;

(iii) for marketing purposes, that is to say for commercial communications, including by e-mail, regarding the sending of promotional and advertising material or the completion of market research, your Personal Data, excluding those of contact, will be kept for a maximum of 36 months;

(iv) for profiling purposes, that is to say the analysis of habits and/or consumer choices as well as the comparison of your Personal Data present in different databases of or used by the Controller, for example for the purpose of sending personalized promotional communications, personalization of the content displayed on the Site, publication of banners and statistical surveys, the Personal Data that contribute to the creation of your profile will be kept for a maximum period of 36 months;

(v) for the purpose of sending newsletters, your Personal Data, excluding contact details, will be kept for a maximum period of 36 months.

(vi) for the purposes of managing and executing the legal requirements (accounting, administrative, tax, etc.), your Personal Data will be stored for the time strictly necessary for this purpose;

(vii) for the purpose of managing disputes and any litigation, your Personal Data will be kept for the time strictly necessary for this purpose and, in any case, no longer than the applicable limitation periods.

Who are the recipients of your Personal Data

Your Personal Data may be communicated to and processed by:

(i) legal or natural persons acting as external data controllers, carrying out outsourcing activities, appointed by the Controller or by the Controller’s external data processors (including those entrusted with the activities of service, communication, marketing, advertising, promotions and sales of products and/or services as well as advertisers, advertising concessionaires, IT service providers, operators of the Site, operators of electronic platforms, partners, credit institutions, professional firms);

(ii) employees and/or collaborators of the Controller (including system administrators) who, operating under the direct authority of the latter, will be authorised to process your Personal Data;

(iii) employees and/or collaborators of external processors (including system administrators) who, operating under the direct authority of the external processors, will be authorised to process your Personal Data. Your Personal Data will not be communicated to third parties except in the case where your Personal Data should be communicated by the Controller to consultants for the purpose of protecting their rights, or disclosed. In case you have inserted Personal Data in your nickname and/or have associated with it also an image of yours, however, there may be dissemination of such Personal Data through the Site or the Social Networks.

children

Minors under the age of 16 must not provide information or Personal Data to the Owner without the consent of the operators parental responsibility on them. In the absence of such consent, it will not be possible to register the child on the Site. The Owner invites all those who exercise parental responsibility over minors to inform them about safe and responsible use of the Internet and the Web and to implement the procedures indicated during registration on the Site regarding the registration on the Site subjects under the age of 16.

Identity and contact details of the data processors

The complete list of those responsible for processing personal data can be consulted by contacting the Controller at the addresses indicated in the “Contact” section of the Site.

Contact details of the Data Protection Officer (“DPO”)

The Data Protection Officer appointed by the Controller has the contact details on the Contact page.

Your rights in relation to the processing of your Personal Data

The Privacy Policy grants you, as a data subject, numerous rights. In particular, you have the right to:

1. ottenere dal Titolare conferma dell’esistenza o meno di tuoi Dati Personali, anche se non ancora registrati e la loro comunicazione in forma intelligibile nonché l’accesso ai tuoi Dati Personali (ottenendone una copia) e alle relative informazioni (tra cui le finalità del trattamento, le categorie e l’origine dei Dati Personali, le categorie di destinatari a cui essi sono stati o potranno essere comunicati, il periodo di conservazione (quando possibile), i diritti esercitabili);
2. obtain from the Data Controller the correction of your Personal Data and the integration of your incomplete Personal Data;
3. delete your profile on the Site and, in any case, obtain from the Owner the deletion of your Personal Data without undue delay, among others, when the Personal Data is no longer necessary for the purposes for which it was processed or there is no legal basis for its processing;
4. obtain from the Data Controller the transformation into anonymous form or the blocking of your Personal Data processed in violation of law, including those for which it is not necessary to store them, in relation to the purposes for which the Personal Data itself has been collected or subsequently processed;
5. obtain from the Data Controller the restriction of the processing of your Personal Data, inter alia, when you contest its accuracy or oppose the processing, for the period necessary to the respective verifications;
6. receive, in a structured, commonly used and machine-readable format, your Personal Data as well as transmit or, if technically feasible, obtain the direct transmission of your Personal Data to another controller without impediments, in cases where the processing is carried out by automated means and is based on your consent or is necessary for the execution of a contract to which you are party;
7. revoke your consent to the processing of your Personal Data for any of the purposes for which it has been provided.

You can exercise your rights against the Owner by accessing the “Contact” section of the Site or writing to the e-mail address indicated on the Contacts web page or a letter by regular mail to the address indicated in the Contacts section.

In addition, if you believe that the processing of your personal data violates the Privacy Law, you can file a complaint with the Authority for the protection of personal data of the state where you reside, where your place of work is located or where the alleged violation occurred, or you can contact the same Authority to request information about the exercise of your rights under the Privacy Policy.

The right to object to the processing of your Personal Data

At any time and for reasons related to your particular situation, you have the right to object to the processing of your Personal Data (including profiling) that is necessary to pursue a legitimate interest of the Controller or third parties. In this case, the Data Controller shall refrain from further processing your Personal Data unless it proves the existence of compelling legitimate reasons that prevail over your interests, rights or freedoms or is necessary for the determination, the exercise or defence of a right in legal proceedings.

Without prejudice to your right to withdraw consent for the processing for marketing and profiling purposes, you have the right to object to the processing of your Personal Data for direct marketing purposes, including profiling, to the extent that it is connected to such direct marketing, by accessing the “Contact” section of the Site or by sending an e-mail to the Owner’s e-mail address. If you object to the processing of your Personal Data for direct marketing purposes, the Controller may no longer process them for such purpose.