La Tazza d’oro Srl (hereinafter ” Company “, ” Holder ” and ” we “) is the holder of the processing of personal data of users (hereinafter, the “Users”) who browse the website www.latazzadoro.it (hereinafter the ” Site “), the related e-commerce (” E-Shop “), or interact with the social pages Facebook, Instagram and Youtube of the Holder (collectively the ” Pages “).
- What data we collect and how we use it
Browsing the Site
To allow you to access and visit our Site, the computer system and the software procedures used to operate it automatically collect some personal data whose transmission is implicit in the use of Internet communication protocols. This information are not collected to be associated with identified interested parties, but by their nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes: IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server.
Our Company collects and processes this information exclusively in an aggregate and not immediately identifiable manner, in order to obtain statistical information and to guarantee the correct functioning and security of the Site. Such technical / IT data could also be used for the ascertainment of responsibility in case of hypothetical computer crimes against the site or at the request of the public authority.
The legal basis of the processing is therefore constituted by the legitimate interest of the Company in the correct functioning and safety of the Site [art. 6, par. 1, lett. f) GDPR].
The provision of such personal data is mandatory in order to guarantee the correct functioning of the Site and any refusal may prevent you from viewing the Site in whole or in part.
Plug-in Social Network
The selection and / or the usage of the social media features present on our Site (such as Facebook, Instagram and YouTube) does not involve the acquisition by the Company of your personal data; by selecting these functions, you directly access the platforms of these social networks whose processing of personal data is governed by the privacy policies or information of the holder companies. For information on these treatments, we therefore invite you to read the respective privacy policies made available by these companies.
Any contact with the Company through the Customer Service or the optional and spontaneous sending of messages, by e-mail or traditional mail, to the Company’s addresses indicated on the Site involve the subsequent acquisition of the sender’s contact details (e-mail, address, number telephone) necessary to respond to requests, as well as any other personal data included in the related communications.
The Company collects and processes this data only for the purpose and only for the period necessary to provide you with the information or assistance requested. The legal basis of the processing is, therefore, constituted by the execution of a contract or pre-contractual measures [art. 6, par. 1, lett. b) GDPR].
The provision of such personal data is optional; however, your incomplete or inaccurate identification by our authorized personnel may result in the inability to provide you with the information or assistance requested.
Subject to your free consent, which you can express by selecting the respective box of the form inserted at the bottom of the registration / order / contact forms, the data you will provide us may be processed for sending commercial communications, advertising material, or direct sales and / or carrying out market research with traditional methods of contact – by post or telephone – or automated – such as instant messaging systems, sms, faxes, emails or telephone calls without an operator; this consent is optional and, if given, can be revoked at any time.
To use the E-Shop service and purchase La Tazza d’oro products, you must register on the Site or fill in the billing form directly.
To this end, the Company collects and processes the following categories of personal data:
– Personal data provided by you directly during registration by completing the registration form: name, surname, billing address, shipping address for purchased products, city, postcode, e-mail address, telephone number, any note for delivery;
– Purchase and payment data required for billing purposes.
The Company collects such data for the following purposes:
The provision of data marked with an asterisk when completing the form and personal data relating to the purchase is mandatory for the purpose of concluding the sales contract and subsequent shipping and invoicing and, in case of failure to provide it, it will not be possible to complete the registration and the subsequent online purchase of our products.
If expressly requested by you, the Company collects and uses your e-mail address to communicate information on commercial initiatives, announcements of new services and offers, information on its products (legal basis: execution of the contract – newsletter service – art . 6 par. 1 letter b GDPR).
The provision of your e-mail address is mandatory for the purpose of subscribing to our newsletter and, in the event of failure to provide it, you will not be able to receive the above communications.
At any time you can ask to stop receiving the Newsletter by selecting the unsubscribe link in the Newsletter itself. In this case, you will be notified of immediate cancellation from our lists
Social pages interaction
If you interact with our Pages, we will process the information you provide for the sole purpose of responding to your comments, your reports or requests of information (legal basis: the execution of a contract or pre-contractual measures – request for a service, art.6 , paragraph 1 letter b GDPR).
- To whom we can communicate your personal data
Data will be processed by the authorized personnel of the Company operating the administrative, logistic, commercial offices responsible for carrying out the operations relating to the purposes indicated above, as well as by external companies that handle the shipments and the technical management of the site, appointed by us as Managers of the Treatment through specific agreements drawn up pursuant to art. 28 GDPR.
Your personal data may also be disclosed to independent third parties data controllers such as lawyers and competent authorities and police forces in case of need (e.g. in case of complaints concerning the products purchased or for the detection of fraud or other illegal and the protection of rights, as well as where required by applicable laws).
- How we process the data
The processing of your personal data, for each of the aforementioned purposes, will take place in an automated and / or traditional form and, in any case, in such a way to guarantee the security and confidentiality of the data. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. In particular, in the sections of the websites set up for particular services, where personal data is requested from the navigator user, the data is encrypted using a security technology called Secure Sockets Layer, abbreviated to SSL. SSL technology encodes the information before it is exchanged via the Internet between the user’s computer and the central systems of La Tazza d’oro Srl making them incomprehensible to unauthorized persons and thus guaranteeing the confidentiality of the information transmitted. The use of SSL also requires a compatible browser capable of “swapping” a security key with a minimum length of 128 bits, which is necessary to establish the aforementioned secure connection with the central systems of La Tazza d’oro Srl.
How long and where do we keep the data
We keep your personal data through servers located within the European Economic Area for the time strictly necessary to pursue the aforementioned purposes in compliance with civil and fiscal conservation obligations and the limits established by law. After the ten-year limitation period (art. 2946 of the civil code; art. 8, Law no. 212 of 27 July 2000) and that – also ten-year – for the obligatory conservation of accounting records (art. for the Company to keep the information in view of possible tax checks, the data are destroyed, deleted or transformed into an unintelligible form, provided that there are no further needs that justify their conservation (e.g. pending legal disputes).
For the promotional purposes to which you may have consented by ticking the flag provided in the respective boxes of the registration / order / contact forms , your personal data will be kept for a maximum period of 2 years, after which the Company will ask you for a new consent.
- Your rights
Pursuant to art. 15-21 of the Regulations, the interested parties (if you are a natural person or the legal / personal representatives of the client legal person) have the right to:
– receive confirmation of the existence of personal data, access their content and obtain a copy (right of access);
– update, modify and / or correct personal data (right of rectification);
– request its deletion when the data are no longer necessary or consent has been revoked and do not serve other purposes, or in case of opposition to the use for the purposes referred to in point 2 (d), or because this is required by law or data are processed in violation of the law (right to cancellation);
– request the limitation of the processing of data pending a dispute (accuracy of data, data processed illegally or of opposition) and in case of exercise of the rights of defense (right to limitation);
– revoke the consent, where given, at any time and without prejudice to the lawfulness of the processing based on the consent given before the revocation (right to revoke the consent);
– receive a copy of the data in electronic format concerning your contractual relationships or on the basis of consent and request that such data be transmitted to another data controller (right to data portability).
The interested party also has the right to object at any time to the use of data by the Company in accordance with the provisions of the Regulation (right of opposition), providing evidence of the reasons justifying the opposition: the Data Controller reserves the right to evaluate your request, which will not be accepted if there are compelling legitimate reasons to proceed with the processing that prevail over your interests, rights and freedoms, as well as to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR (Italian Guarantor for the Protection of Personal Data), or judicial authority appeal pursuant to art. 79 of the GDPR.
They can exercise their rights at any time by writing to the addresses indicated in point 6.
The identification and contact data of the Data Controller
The Data Controller is La Tazza d’oro Srl, with registered office in Z.I. Macchiareddu, road 8 – 09010 – Uta, Cagliari, VAT number IT03431160922
E-mail address: firstname.lastname@example.org .
Last updated: [10/07/2020]