Policy E-Commerce

This page describes the management methods of this website with reference to the processing of the personal data of users who use it. The data processing is carried out in compliance with the criteria provided for by the European regulation on the protection of personal data, Reg. 2016/679/EU and any other national legislative text, measure or authorization of the competent authority connected to the same. According to the aforementioned legislation, the processing must be based on the principles of correctness, lawfulness and transparency and the protection of your privacy and your rights.

The information provided is specific for the processing of personal data relating to the e-commerce service of the products sold by the data controller.

THE DATA CONTROLLER

Following consultation of this site, data relating to identified or identifiable persons may be processed. The data controller is Alberti S.r.l. s.u., in the person of its pro tempore legal representative, with registered office in Via Teobaldo Ciconi, 30 – 33038 San Daniele del Friuli (UD), tel. +39 0432957422 e-mail: info@lacasadelprosciutto.com.

PLACE OF DATA PROCESSING and COMMUNICATION

The processing related to the e-commerce service for the purchase of products, the processing of data for the management of orders, take place at the aforementioned headquarters of the Company and are handled by the Company’s staff. Payment data are managed in outsourcing by a duly appointed data processor pursuant  to Article 28 of Reg. 2016/679/E.U. whose service was examined in the impact assessment drawn up for the e-commerce service.

There are no areas of communication to subjects other than those identified; The data collected are not disseminated.

PURPOSES OF PROCESSING AND LEGAL BASES OF PROCESSING

The personal data collected is necessary to:

a) Request to purchase products, order processing, preparation of goods and shipment to the selected address;

b) Management of the payment methods of the product;

c) Management of accounting and tax relationships related to the main contract;

d) Management of any return requests or any disputes;

e) Booking and tasting service of products at the premises of the data controller.

Personal contact data may be used by the Data Controller to:

f) Purpose of contacting the data controller for specific written requests;

g) Marketing purposes, such as sending newsletters, promotions, price lists and invitations to events.

The e-commerce service is functional to the purposes referred to in letters a), b), c) and to the marketing purpose. The other purposes are ancillary and not managed directly by the e-commerce service.

The legal bases for the processing are found in Article 6.1 (a) “the data subject has given consent”, letter b) “performance of a contract to which the data subject is a party”, letter f) “legitimate interest of the data controller”.

TYPES OF DATA PROCESSED

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, successful,  error, etc.) and other parameters related to the user’s operating system and computer environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site. For these data, limited to the aforementioned purpose, it is not necessary to request consent.

Data provided voluntarily by the user

The e-commerce service is structured for the collection of data necessary to prepare the order and ship the requested product. All required fields are required; Inclusion is optional, but denial will make it impossible to make the purchase. The marketing activity is subject to your explicit consent, in case of refusal the data controller will not be able to carry out the specific activity.

Cookies

The site’s cookie policy is regulated and described in the specific cookie policy of the website to which the e-commerce service is linked.

METHODS OF PROCESSING

Personal data are processed by the data controller and by duly appointed data processors for the correct fulfilment of the purposes indicated by means of electronic tools and paper archives, as well as with the use of security measures to guarantee the confidentiality of personal data and to avoid undue access by unauthorised parties. The data controller does not use automated processes, including profiling, to achieve the purposes set out in this policy.

TERMS OF PROCESSING

The Data Controller will process personal data for the time necessary to fulfil the above purposes and in any case for no longer than 2 years from the acquisition of the data for the purposes of processing following consent for marketing activities.

DATA TRANSFER OUTSIDE THE E.U.

The data controller does not directly transfer data outside the EU; any transfer of data by out-sourcers has been analysed in the impact assessment prepared pursuant to Article 35 of the Italian Presidential Decree.

RIGHTS OF THE DATA SUBJECTS

Pursuant to art. 15 – 22 G.D.P.R., the interested party has the right to ask the data controller for access to his or her personal data or the correction or cancellation of the same or the limitation of the processing concerning him/her, or has the right to object to their processing, as well as the right to request the portability of the data themselves.

The request can be made by email or fax or registered mail with the subject: “request by the interested party” specifying in the request the right that the interested party wants to exercise (cancellation, rectification, portability, oblivion), together with a valid e-mail/certified email address to which the response can be delivered.

The data controller or, any person appointed by the same person, will proceed to satisfy the request within 30 days from the date of receipt. If the answer is complex, the time could be extended to a further 30 days, subject to timely communication to the interested party.

If you deem it appropriate to assert your rights, you have the right to lodge a complaint with the competent supervisory authority, corresponding to the National Data Protection Authority, with headquarters in Piazza Venezia, 11 – 00187 Rome, garante@gpdp.it.

Last update of this Privacy Policy: 01/08/2024