Privacy Policy

Dear user,
first of all thank you for coming to visit us.

We value the fact that you can trust us and therefore we wish to share with you on this page the purposes and methods of processing the personal data that we collect during your navigation, following your possible registration on the site (hereinafter “Site”).

We are available to answer your questions. To contact us visit the Contact page of our website.
Remember that you can request your data by clicking on the following link REQUEST DATA and request its deletion by writing to our email address on the Contact page

INFORMATION NOTE ON PRIVACY

The data controller is “il Bottaccio” which can be contacted directly from the Contact page of this website.

The Data Controller will process your Personal Data in compliance with EU Regulation no. 2016/679 and the national legislation on the protection of personal data (hereinafter “Privacy Law”).

What Personal Data we process and how we collect it

Your browsing on the Site and / or accessing some sections of the Site may result in the collection and subsequent further processing of your Personal Data by the Owner. In fact, when connecting to the Site, the computer systems and software procedures used to operate them automatically and indirectly administer and / or acquire some information (such as, merely by way of example, the so-called “cookies”, as specified in the specific page “Cookie Policy”, “IP” addresses, domain names of the computers used by users who connect to the Site, the addresses in “Url” notation of the requested resources, the time of the request to the server).

Your registration on the Site and / or any requests for information or services from you may also involve the collection and subsequent further processing of your Personal Data (such as name, surname, postal and e-mail address, password, age, date of birth, sex, image, profession, marital status, etc.).
In particular, the collection of your Personal Data may take place:
– by filling in online forms on your part;
– through the purchase of products and / or services from our Site;

In the event that you choose to register on the Site or send a request through the “Contacts” section of the Site, the provision of some Personal Data is necessary for the Owner to meet your needs in terms of the functionality of the Site, so the relevant fields of the registration form are marked with an asterisk or are otherwise marked as mandatory. The provision of Personal Data not marked with an asterisk or otherwise marked as mandatory is purely optional and the failure, partial or incorrect provision of such Personal Data does not entail any consequence. On the other hand, failure, partial or incorrect provision of Personal Data marked with an asterisk or otherwise marked as mandatory does not make it possible to perform the service requested by you. In the event that you have omitted to provide one or more mandatory Personal Data, an error message from the Owner will appear with the list of missing mandatory Personal Data.

What are the purposes of the processing of your Personal Data and its legal bases

According to the needs expressed by you from time to time by accessing the various sections of the Site (and except for individual initiatives that involve the provision of specific Personal Data, for which specific information will be published from time to time on the Site), the following are the purpose of the processing of your Personal Data and the related legal bases.

Your Personal Data will be processed for the following purposes only with your consent to the processing, which can be revoked at any time, by deleting your profile, using the link at the bottom of each promotional e-mail (as regards marketing activities and the newsletter) or according to the methods indicated from time to time by the Data Controller when collecting consent:

a) Management of and response to your requests

You can decide to give your consent to the processing of your Personal Data for the management and response, by the Owner, to your requests in relation to products, advertising, or the Site (“Contacts” section of the Site). In relation to this purpose, your consent is required at the time of sending requests. In the event that you decide not to give consent to the processing of your Personal Data for the aforementioned purpose, it will not be possible to continue with the sending of your request.

b) Marketing activities

You can decide to consent to the processing of your Personal Data for marketing purposes, ie for commercial communications, including by e-mail, concerning the sending of promotional and advertising material. In relation to this purpose, your consent is required when registering on the Site.

c) Profiling activity

You can decide to give your consent to be subjected to profiling, i.e. the analysis of your habits and / or consumption choices as well as the comparison of your Personal Data present in the various databases of or in use by the Data Controller, for example for the purposes of sending personalized promotional communications, personalization of the contents displayed on the Site, publication of banners and statistical surveys. There are various activities that can contribute to the creation of your profile, the interaction with the Site, the purchase of products. In relation to this purpose, your consent is required when registering on the Site.

d) Receipt of the newsletter

You can decide to subscribe, by giving your consent, to the newsletter service. In relation to this purpose, your consent is required when registering for the newsletter service.

How we treat your Personal Data

The processing of your Personal Data may include any type of operation, including collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction.

Your Personal Data will be processed mainly in an automated form but also on paper, with logic strictly related to the related purposes, through the databases, the electronic platforms managed by the Data Controller or by third parties appointed for this purpose as external data processors and / or integrated IT systems. of the Owner and of the aforementioned third parties and / or websites owned or used by the Owner.

The Data Controller has assessed the level of security as adequate taking into account the risks that could derive from loss, destruction, modification, unauthorized disclosure, accidental or illegal access, abuse or alteration of your Personal Data. In particular:

– has adopted security measures appropriate to the risks;
– store your Personal Data on servers mainly located in the European territory, (for information on the methods of transferring Personal Data outside the European Economic Area, see the following section “Transfer of your Personal Data outside the European Economic Area” ). In any case, the servers are subject to an advanced and daily backup system.

Where we process your Personal Data

Your Personal Data are mainly processed at the offices of the Data Controller and in the places where the data processors are located. For further information, contact the Data Controller at the addresses indicated in the section “Identity and contact details of the Data Controller”.

How long do we keep your Personal Data

In order to ensure compliance with the principles of necessity and proportionality of the processing, the Data Controller has identified different retention times for Personal Data in relation to the individual purposes pursued:

(i) for the purpose of managing your registration on the Site as well as the activities related to the activation and use by you of the services offered there, your interaction with the Site and the sections present therein, your Personal Data will be stored for the time strictly necessary for this and in any case at the most until your profile is active. For security reasons, we will use the log data to verify account usage and, in the event of your inactivity for more than 24 months, you will be contacted to verify your interest in keeping your account active, and you will be indicate the methods for expressing this interest. If there is no activity within the next 30 days, your account will be deleted;

(ii) for the purpose of managing and responding to your requests in relation to products and initiatives of the Owner, advertising, or the Site (“Contacts” section of the Site), your Personal Data will be kept for the time strictly necessary for processing of your request;

(iii) for the purposes of marketing, i.e. for commercial communications, including by e-mail, concerning the sending of promotional and advertising material or carrying out market research, your Personal Data, excluding contact data, will be kept for a maximum period of 36 months;

(iv) for profiling purposes, i.e. the analysis of consumption habits and / or choices as well as the comparison of your Personal Data present in the various databases of or in use by the Data Controller, for example for the purpose of sending personalized promotional communications , personalization of the contents displayed on the Site, publication of banners and statistical surveys, the Personal Data that contribute to the creation of your profile will be kept for a maximum period of 36 months;

(v) for the purpose of sending newsletters, your Personal Data, excluding contact data, will be kept for a maximum period of 36 months.

(vi) for the purposes of managing and executing the obligations required by law (accounting, administrative, tax, etc.), your Personal Data will be kept for the time strictly necessary for this purpose;

(vii) for the purposes of managing disputes and any disputes, your Personal Data will be kept for the time strictly necessary for this purpose and, in any case, no later than the applicable limitation periods.

Who are the recipients of your Personal Data

Your Personal Data may be disclosed to and processed by:

(i) legal or natural persons acting as external data processors, carrying out outsourced activities, appointed by the Data Controller or by the Data Controller’s external data processors (including subjects to whom assistance, communication, marketing, advertising activities are entrusted, promotions and sale of products and / or services as well as advertisers, advertising agencies, IT service providers, site managers, electronic platform managers, partners, credit institutions, professional firms);

(ii) employees and / or collaborators of the Data Controller (including system administrators) who, operating under the direct authority of the latter, will be authorized to process your Personal Data;

(iii) employees and / or collaborators of external data processors (including system administrators) who, operating under the direct authority of external data processors, will be authorized to process your Personal Data. Your Personal Data will not be disclosed to third parties except in the event that your Personal Data should be disclosed by the Data Controller to consultants in order to protect their rights, nor disclosed. In the event that you have entered Personal Data in your nickname and / or have also associated your image with it, however, such Personal Data may be disseminated through the Site or Social Networks.

Minors

Minors under the age of 16 must not provide information or Personal Data to the Data Controller in the absence of the consent of the persons exercising parental responsibility over them. In the absence of such consent, it will not be possible to register the minor on the Site. The Owner invites all those who exercise parental responsibility on minors to inform them about the safe and responsible use of the Internet and the Web and to put in place the procedures indicated during registration on the Site concerning the registration on the Site of subjects with a ‘under the age of 16.

Identity and contact details of the data processors

The complete list of those responsible for the processing of Personal Data can be consulted by contacting the Data Controller at the addresses indicated in the “Contacts” section of the Site.

Contact details of the Data Protection Officer (“DPO”)

The Data Protection Officer appointed by the Data Controller has the contact details present on the Contacts web page.

Your rights in relation to the processing of your Personal Data

The Privacy Law recognizes you, as an interested party, numerous rights. In particular, you have the right to:

1. obtain from the Data Controller confirmation of the existence or not of your Personal Data, even if not yet registered and their communication in an intelligible form as well as access to your Personal Data (obtaining a copy) and related information (including the purposes of the processing, the categories and origin of the Personal Data, the categories of recipients to whom they have been or may be communicated, the retention period (when possible), the rights that can be exercised);
2. obtain from the Data Controller the correction of your Personal Data and the integration of your incomplete Personal Data;
3. delete your profile on the Site and, in any case, obtain from the Data Controller the deletion of your Personal Data without undue delay, among other things, when the Personal Data are no longer necessary with respect to the purposes for which they were processed or not there is no longer the legal basis for their processing;
4. obtain from the Data Controller the transformation into anonymous form or the blocking of your Personal Data processed in violation of the law, including those that do not need to be kept, in relation to the purposes for which the Personal Data were collected or subsequently processed ;
5. obtain from the Data Controller the limitation of the processing of your Personal Data, among other things, when you dispute its accuracy or object to the processing, for the period necessary for the respective checks;
6. receive, in a structured format, commonly used and readable by an automatic device, your Personal Data as well as transmit or, if technically feasible, obtain the direct transmission of your Personal Data to another data controller without impediments, in cases where the processing is carried out by automated means and is based on your consent or is necessary for the execution of a contract to which you are a party;
7. withdraw consent to the processing of your Personal Data for any of the purposes for which it was provided.

You can exercise your rights towards the Data Controller by accessing the “Contacts” section of the Site or by writing to the e-mail address indicated on the Contacts web page or a letter by ordinary mail to the address indicated in the Contacts section.

Furthermore, in the event that you believe that the processing of your Personal Data violates the Privacy Law, you can lodge a complaint with the Guarantor Authority for the protection of personal data of the State in which you are resident, where your workplace is located or in which the alleged violation occurred, or contact the same Authority to request information regarding the exercise of your rights under the Privacy Law.

The right to object to the processing of your Personal Data

At any time and for reasons related to your particular situation, you have the right to object to the processing of your Personal Data (including profiling) which is necessary for the pursuit of a legitimate interest of the Data Controller or third parties. In this case, the Data Controller refrains from further processing your Personal Data unless he demonstrates the existence of compelling legitimate reasons that prevail over your interests, rights or freedoms or is necessary for the assessment, exercise or defense of a right in court.

Without prejudice to your right to withdraw consent for processing for marketing and profiling purposes, you have the right to object to the processing of your Personal Data for direct marketing purposes, including profiling, to the extent that it is connected to such marketing. direct, by accessing the “Contacts” section of the Site or by sending an e-mail to the Data Controller’s e-mail address. If you object to the processing of your Personal Data for direct marketing purposes, the Data Controller will no longer be able to process them for this purpose.