0,00 €
0,00 €
The domussocolatae.com website collects some personal data from users who browse the website.
In accordance with our commitment and care for personal data and in accordance with Articles 13 and 14 of the EU GDPR, domussocolatae.com provides information on the methods, purposes, scope of communication and dissemination of personal data, and user rights.
Data controller
Rima Loca s.a.s. di Cavazzoni Massimiliano & C.
Piazza Vittorio Veneto, 21
58022 – Follonica (GR) Italia
P.IVA 01594840538
Email: domussocolatae@gmail.com
Telefono: +39 338 9368 207
Types of data acquired
domussocolatae.com collects user data directly or through third parties. The types of data collected include: technical browsing data, usage data, email address, first name, last name, telephone number, province, country, zip code, city, address, company name, status, cookies, and other various types of data. Further details on the data collected are provided in the following sections of this policy.
Personal data is provided voluntarily by the user by filling out forms, or, in the case of usage data, such as data relating to navigation statistics, is collected automatically by browsing the pages of domussocolatae.com.
The data requested by the forms is divided into mandatory and optional; each type will be clearly indicated on each form. If the user prefers not to provide mandatory data, domussocolatae.com reserves the right not to provide the service. If the user prefers not to provide optional data, the service will still be provided by domussocolatae.com.
www.domussocolatae.com uses statistical tools to track user navigation; the analysis is done via logs. It does not use cookies directly, but may use cookies including third-party services.
Each use of cookies is detailed in the Cookie Policy and subsequently in this policy.
Users who communicate, publish, disseminate, share, or obtain third-party personal data through domussocolatae.com assume full responsibility for such data. Users release the website owner from any direct or third-party liability, guaranteeing that they have the right to communicate, publish, and disseminate such data. domussocolatae.com does not provide services to minors under the age of 18. In the case of requests made for minors, the parent or legal guardian must complete the data requests.
Methods, places and times of processing of the acquired data
Data Processing Methods
The Data Controller has designed an IT system designed to ensure appropriate security measures to prevent unauthorized access, disclosure, modification, or deletion of personal data. This system creates daily copies, deemed adequate based on the importance of the data contained therein.
The user has the right to obtain information regarding the security measures adopted by the owner to protect the data.
Data Access in Addition to the Owner
Internal staff (such as administrative, sales, marketing, legal, and system administrators) and/or external parties (such as third-party IT service providers, web farms, communications agencies, and complementary service providers) have access to the personal data collected by domussocolatae.com. Where necessary, these entities are appointed by the owner as data processors.
The user may request an updated list of data processors from the data controller at any time.
Report any unwanted access to the Italian Data Protection Authority
The aforementioned IT system is monitored and checked daily by technicians and systems engineers. However, even if deemed remote, unwanted access may occur. Should this occur, the data controller undertakes, in accordance with the GDPR, to notify the Italian Data Protection Authority within the legally required timeframes.
Locations where the acquired data is stored
Personal data is stored and processed at the data controller’s operational and administrative offices, as well as in the web farms hosting the servers hosting the domussocolatae.com website, or on the servers that perform backups. The user’s personal data may be stored in Italy, Germany, and the Netherlands, or in any other European Union country. The user’s personal data is never transferred or copied outside of Europe..
Data retention periods
In the case of data acquired to provide a service to the user (whether for a purchased or trial service), the data is retained for 24 months following completion of the service, or until consent is revoked.
If the data controller is required to retain personal data in compliance with a legal obligation or by order of an authority, the data controller may retain the data for a longer period of time, as necessary to fulfill the obligations.
At the end of the retention period, your personal data will be deleted. After this period, you will no longer be able to access your data, request its deletion, or request portability.
Legal basis for processing the acquired data
The Data Controller collects personal data from users in the cases described below.
Processing is necessary:
– if the user has voluntarily agreed to the processing for one or more purposes;
– to provide the user with a quote;
– to provide the user with a contract;
– to provide a service to the user;
– for the Data Controller to comply with a legal obligation;
– for the Data Controller to perform a task carried out in the public interest;
– for the Data Controller to exercise official authority;
– for the Data Controller or third parties to pursue their legitimate interests.
The user may request clarification from the data controller at any time regarding the legal basis for each processing operation.
Purpose of processing the acquired data
User data is collected by the owner for the following purposes:
– provide the Service and fulfill legal obligations;
– requests for technical and commercial information about services;
– send technical and commercial information about services;
– requests for quotes from users;
– respond to requests for quotes;
– contact the user in case of problems;
– advertising newsletters.
Data may also be processed for:
contacting the user, statistics, analyzing user behavior and recording sessions, viewing content and interacting with external applications, spam protection, managing payments, interacting with social networks, and advertising.
The user may request clarification on the purposes of each processing operation from the data controller at any time.
Specific details on the collection and use of personal data
To contact you
Contact forms
You can fill out the contact/information request form(s) by entering your data and consenting to their use to respond to requests as indicated in the form header.
Personal data that may be collected: ZIP code, city, last name, email address, address, country, name, telephone number, province, company name.
To manage tags
These services are used for the centralized management of tags or scripts used on the website; they collect data from users and store it if necessary.
Google Tag Manager
Service provider: Google LLC.
Purpose of the service: Tag management service.
Personal data collected: Cookies, usage data
Place of processing: United States
Privacy Policy (https://policies.google.com/privacy?hl=en)
Privacy Shield compliant
To process payments
The domussocolatae.com website uses payment services to process payments by credit card, bank transfer, or other means. The domussocolatae.com website does not collect or acquire payment data. Payment data is collected and acquired directly by the payment service provider (e.g., the credit card company or PayPal, etc.).
These services may send messages to the user, such as emails or SMS payment notifications.
The data acquired and their use by third-party services are governed by their respective Privacy Policies, to which we ask you to refer.
PayPal
Service provider: PayPal, Inc.
Purpose of the service: Making online payments
Personal data collected: Types of data as specified in the service’s privacy policy
Place of processing: As specified in the service’s privacy policy
Privacy Policy (https://www.paypal.com/it/webapps/mpp/ua/privacy-full)
For interaction with external applications (including social networks)
domussocolatae.com includes plugins and/or buttons on its pages for interacting with social networks and/or external applications.
Regarding social networks, even if the user does not use the service on the website, it is possible that the service may collect traffic data.
The data acquired and their use by third-party services are governed by their respective Privacy Policies, to which we ask you to refer.
Facebook: “Like” button and social widgets
Service provider: Meta Platforms Ireland Limited.
Purpose of the service: Interaction with the Facebook social network
Personal data collected: Cookies, usage data
Place of processing: United States and other countries
Privacy Policy (https://www.facebook.com/privacy/policy)
Twitter: “Tweet” button and social widgets
Service provider: Twitter, Inc.
Purpose of the service: Interaction with the Twitter social network
Personal data collected: Cookies, usage data
Place of processing: United States
Privacy Policy (https://twitter.com/privacy)
Cookies used (https://help.twitter.com/it/rules-and-policies/twitter-cookies)
Privacy Shield participant
WhatsApp: WhatsApp button and WhatsApp social widgets
Service provider: If you reside in the European Region, WhatsApp Ireland Limited; if you reside outside the European Region, the Services are provided by WhatsApp LLC.
Purpose of the service: Interaction services with WhatsApp.
Personal data collected: Cookies, usage data
Place of processing: Ireland; information may be transferred, transmitted, or stored and processed in the United States or other third-party countries outside of your country of residence.
Privacy Policy (https://www.whatsapp.com/legal/privacy-policy-eea)
Privacy Shield compliant
For statistics
These services are used by the data controller to analyze user traffic on the domussocolatae.com website.
The data acquired and their use by third-party services are governed by their respective Privacy Policies, to which we ask you to refer.
Google Analytics
Service provider: Google, Inc.
Purpose of the service: Web analytics service provided. This service collects the user’s personal data to monitor and analyze use of the domussocolatae.com website, generate reports, and use them for other Google services. Google may use the data collected to personalize its ads.
Personal data collected: cookies, usage data
Place of processing: United States
Privacy Policy (https://policies.google.com/privacy?hl=it)
Opt-Out (https://tools.google.com/dlpage/gaoptout?hl=it)
Privacy Shield compliant
To display content from external websites
These services are used to display external content on the website pages, with the possibility of interaction.
Even if the user does not use the service on the website, it is possible that the service may collect traffic data.
I dati acquisiti e l’utilizzo degli stessi da parte di servizi terzi sono regolamentati dalle rispettive Privacy Policy alle quali si prega di fare riferimento.
Google Maps Widget
Service Provider: Google, Inc.
Purpose of the service: Service to display and interact with external maps on its website
Personal data collected: Cookies, usage data
Place of processing: United States
Privacy Policy (https://policies.google.com/privacy?hl=en)
Privacy Shield compliant
TripAdvisor Widget
Service Provider: TripAdvisor LLC.
Purpose of the service: Service to display and interact with external content on its website.
Personal data collected: Cookies, usage data.
Place of processing: United States.
Privacy Policy (https://tripadvisor.mediaroom.com/us-privacy-policy)
Privacy Shield compliant.
YouTube Video Widget
Service Provider: Google, Inc.
Purpose of the service: Service to view and interact with external videos on your website
Personal data collected: Cookies, usage data
Place of processing: United States
Privacy Policy (https://policies.google.com/privacy?hl=en)
Privacy Shield compliant
Wubook Widget
Service Provider: WuBook
Purpose of the service: Service to display and interact with external content on your website
Personal data collected: Cookies, usage data
Place of processing: Italy
Privacy Policy (https://wubook.net/privacy/site/it/privacy.html)
Rights of the interested party
The user has all the rights provided for by Art. 12 of the EU GDPR, including the right to review, modify, supplement (rectify), and delete their personal data by accessing their reserved area. Once all data has been deleted, the account to the reserved area will be closed.
Specifically, you have the right to:
– know whether the data controller holds personal data concerning you (Article 15, Right of Access);
– amend or supplement (rectify) inaccurate or incomplete personal data (Article 16, Right to Rectification);
– request the erasure of some or all of your personal data if one of the grounds set forth in the GDPR applies (Article 17, Right to Erasure);
– restrict processing to only some of your personal data, or withdraw your consent entirely, if one of the grounds set forth in the Regulation applies (Article 18, Right to Restriction of Processing);
– receive a copy of all your personal data held by the data controller, in a commonly used, structured, and machine-readable format (Article 20, Right to Portability);
– object, in whole or in part, to processing of your data for marketing purposes, for example, to object and receive advertising offers (Article 21, Right to Object). Users are advised that they can object to the processing of their data for advertising purposes without providing any reason;
– object to the processing of their data, whether automated or otherwise, for profiling purposes (so-called Consent).
How a user can exercise their rights
The user may exercise their rights set forth above by sending a request to the data controller, Rima Loca s.a.s. di Cavazzoni Massimiliano & C., at the following addresses: domussocolatae@gmail.com; tel. +39 338 9368 207.
There is no cost to requesting to exercise one’s rights. The owner undertakes to process requests as quickly as possible, and in any case within one month.
The user has the right to lodge a complaint with the Italian Data Protection Authority. Contact details: garante@gpdp.it, http://www.gpdp.it (http://www.gpdp.it).
Additional information on data processing
Legal defense
In the event of legal action for abuse by the user in the use of domussocolatae.com or related services, the data controller has the right to disclose the user’s personal data. The data controller is also required to provide such data upon request by public authorities.
Request for specific information
The user has the right to request specific information from domussocolatae.com regarding the services offered on the website and/or the collection and use of personal data.
Data Collection for System Logs and Maintenance
domussocolatae.com and/or third-party services (if any) may collect personal data, such as the user’s IP address, in the form of system logs. This data is collected for the operation and maintenance of the website.
Information not contained in this policy
The user has the right to request from the data controller at any time additional information not contained in this Policy regarding the processing of personal data. The data controller may be contacted using the contact information.
Support for “Do Not Track” requests
“Do Not Track” requests are not supported by domussocolatae.com.
Users are encouraged to consult the privacy policies of the third-party services listed above to find out which ones support these types of requests.
Changes to this Privacy Policy
The Data Controller reserves the right to amend this document by notifying users on this page or, if applicable, through the contact information provided. Users are therefore encouraged to periodically review this page. To confirm whether any changes have been made, please refer to the last modification date indicated at the bottom of the page.
The Data Controller will re-obtain user consent if the changes to this document involve data processing for which consent is required.
Definitions and legal references
Personal data (or data, or user data)
Personal data is information that identifies or makes identifiable, directly or indirectly, a natural person and that can provide insights into their characteristics, habits, lifestyle, personal relationships, health, economic situation, etc.
Source: website of the Data Protection Authority (http://www.garanteprivacy.it).
Usage data
Usage data is information collected automatically while browsing domussocolatae.com, both from the website itself and from third-party applications included on the site. Examples of usage data include the IP address and details of the device and browser (including geographic location) used by the user to navigate the site, the pages viewed, and the length of time spent on individual pages.
Usage data
Usage data is information collected automatically while browsing domussocolatae.com, both from the website itself and from third-party applications included on the site. Examples of usage data include the IP address and details of the device and browser (including geographic location) used by the user to navigate the site, the pages viewed, and the length of time spent on individual pages.
User
The individual who uses the domus socolatae.it website.
This term coincides with the interested party, unless otherwise specified.
Data Subject
The data subject is the natural person to whom the personal data refers. Therefore, if a processing concerns, for example, Mario Rossi’s address, tax code, etc., this person is the data subject (Article 4, paragraph 1, point 1), of EU Regulation 2016/679 (http://www.garanteprivacy.it/regolamentoue).
Source: website of the Data Protection Authority (http://www.garanteprivacy.it).
Data Processor (or Controller)
A data processor is the natural or legal person to whom the controller entrusts, even outside its organizational structure, specific and defined management and control tasks on its behalf regarding data processing (Article 4, paragraph 1, point 8) of EU Regulation 2016/679 (http://www.garanteprivacy.it/regolamentoue). The Regulation itself introduced the possibility for a data processor to, in turn and under certain conditions, designate another entity as a “sub-processor” (Article 28, paragraph 2).
Source: website of the Data Protection Authority (http://www.garanteprivacy.it).
Data Controller (or Owner)
The Data Controller is the natural person, public authority, company, public or private entity, association, etc., which makes decisions on the purposes and methods of processing (Article 4, paragraph 1, point 7) of EU Regulation 2016/679 (http://www.garanteprivacy.it/regolamentoue).
Source: website of the Data Protection Authority (http://www.garanteprivacy.it).
domussocolatae.com (or website)
The website through which users’ personal data is collected and processed.
Service
The service offered by the domussocolatae.com website as indicated in the relevant terms.
European Community (or EU)
Any reference to the European Community extends to all current member states of the European Union and the European Economic Area, unless otherwise specified.
Cookies
Data stored on the user’s device.
Legal References
This policy is drafted based on multiple legislative provisions, including Articles 13 and 14 of Regulation (EU) 2016/679. This policy applies exclusively to domussocolatae.com, unless otherwise specified.
Informativa privacy aggiornata il 30/06/2023 15:00