Privacy Policy

THIS WEBSITE'S PRIVACY POLICY
Notice pursuant to EU Regulation 2016/679 (“GDPR”)

Dear User, on this page we inform you about the processing of personal data carried out during the navigation of the website managed by AMIGOS CAFFÈ S.N.C. by Mingardi Severino and Arianna & C., which constitutes a notice given in accordance with Article 13 of EU Regulation 2016/679 (GDPR) to those who interact with the web services of AMIGOS CAFFÈ S.N.C.

This notice is provided only for this website and not for other websites that may be consulted via links.

WHO WE ARE: THE “DATA CONTROLLER”

The “data controller” is the company AMIGOS CAFFÈ S.N.C. by Mingardi Severino and Arianna & C., located at 34015 - MUGGIA (TS), Strada delle Saline n. 3 - Zona Industriale delle Noghere.

The contact details are as follows: Tel. +39 040 9235052; Email: info@amigoscaffe.com

PERSONAL DATA PROCESSED AND PURPOSES OF PROCESSING

Browsing Data

The computer systems and software procedures used for the functioning of this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user's operating system and computer environment.

Such data, necessary for the use of web services, are also processed for the purpose of:

-obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);

-checking the correct functioning of the services offered.

Navigation data do not persist for more than seven days and are deleted immediately after their aggregation (except for any need to investigate crimes by the judicial authority).

Data provided by the user

The optional, explicit, and voluntary sending of messages to the contact addresses published on the website, as well as the filling out and forwarding of forms on the website, entail the acquisition of the sender's contact data, necessary to respond, as well as all personal data included in the communications.

Specific notices are published on the web pages set up for the provision of certain services, with a request for consent if necessary.

Please be informed that, in general, the Data Controller processes users' personal data for the following purposes:

1. fulfillment of orders and related e-commerce services (including all activities functional to the sale and after-sales services, such as administrative, accounting, customer relationship management, etc.);

2. management of payments, including anti-fraud checks in case of payment by credit card;

3. management of user requests: technical, commercial requests, on the progress of orders and requests for information in a broad sense (information, questions, communications or feedback from users) also through a customer service managed by telephone;

4. sending a periodic newsletter with informative, promotional and/or advertising content related to the services offered, upon your consent;

5. management of participation in promotions and other initiatives organized through the Site;

6. fulfillment of legal obligations, regulations, and community legislation (including anti-money laundering legislation) and for the exercise of rights in judicial proceedings.

Your personal data may also be processed for sending advertising material and direct marketing or other commercial communications, including by email: if the advertisement concerns products similar to those already purchased, you may receive it at your email address even without your express consent (so-called Soft Spam), provided that you have not refused such use at the time of providing your email or on subsequent occasions; while your consent will be necessary to lawfully receive email advertisements related to products and services different from those you have already purchased.

Data acquired through Social

If the user connects to a company's social page through social login (i.e., the account of a social network to which they are subscribed), the company may acquire data published on that social network, also based on the user's privacy settings (e.g., information contained in the message/post to respond to requests for information or assistance, images, or information from the published profile). Specific notices on the processing of data carried out by social platforms are made available by them (e.g., https://www.facebook.com/privacy/explanation).

SOCIAL NETWORKS

This site may use so-called social plug-ins. Social plug-ins are special tools that allow incorporating the functionality of the social network directly within the website (e.g., the "like" function of Facebook).

All social plug-ins on the site are marked with the respective logo owned by the social network platform (e.g., Facebook, Google, Twitter, LinkedIn). When you visit a page of our site and interact with the plug-in (e.g., clicking the "Like" button) or decide to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform and stored by it. For information on the purposes, type and methods of collection, processing, use, and storage of personal data by the social network platform, as well as the ways in which to exercise your rights, please consult the privacy policy adopted by the individual social network

Facebook: Notice: https://www.facebook.com/policies/cookies/

Twitter: Notice: https://support.twitter.com/articles/20170514

LinkedIn: Notice: https://www.linkedin.com/legal/cookie-policy

COOKIES Please refer to the cookie notice.

LEGAL BASIS OF PROCESSING

The company may process the aforementioned personal data even without specific consent, except as required for the completion of specific forms, as the legal basis for the lawfulness of processing derives from the execution of pre-contractual measures taken at the request of the data subject (e.g., request for information via email), as well as for the pursuit of the legitimate interest of the company in promoting and realizing its statutory purposes.

Apart from what is specified for navigation data, the user is free to provide their personal data, but failure to do so may result in the inability to obtain what is requested and the company's inability to follow up on requests.

METHODS OF PROCESSING

The data is entered into an electronic database and/or stored in paper archives.

The data is not subject to automated decision-making, nor is any profiling of any kind carried out.

RECIPIENTS OF THE DATA

Personal data may be known to the company's collaborators and employees, as subjects authorized to process and specially trained.

Data may be communicated to external parties (e.g., companies that manage web platforms, affiliated companies, external consultants, subcontractors, etc.) for the purposes outlined above, should their involvement be necessary. These parties will operate as independent Data Controllers or will be designated as Data Processors.

DATA RETENTION PERIOD

The company will retain the data for the time strictly necessary to achieve the purposes outlined above and also to respond to any needs for access and retrieval of data. Data processed to fulfill any contractual obligation may be stored for the duration of the contract and for the following 10 years, in order to verify any outstanding issues or for compliance with legal obligations (e.g., accounting documentation). After 24 months from acquisition (7 days for navigation data), if there are no further needs for contact or retention obligations, data collected for other purposes will be deleted.

RIGHTS OF THE DATA SUBJECT

Among the rights recognized are those to:

request access to your personal data and information related to them; the correction of inaccurate data or the integration of incomplete ones; the deletion of personal data (upon one of the conditions indicated in Article 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); the restriction of processing of personal data (upon one of the hypotheses indicated in Article 18, paragraph 1 of the GDPR); request and obtain - in cases where the legal basis for processing is the contract or consent, and it is carried out by automated means - personal data in a structured format readable by automatic device, also to communicate such data to another data controller (so-called right to data portability); oppose at any time the processing of personal data in the occurrence of particular situations concerning them; withdraw consent at any time, limited to cases where processing is based on consent for one or more specific purposes and concerns common personal data (e.g., date and place of birth or place of residence), or special categories of data (e.g., data revealing health status or sexual life). The processing based on consent and carried out prior to the revocation thereof retains, however, its lawfulness; With reference to the above purposes, the data subject has the right to proceed, at any time, with the request to stop the processing and the sending of email communications by the company, with a request to be presented to the above-mentioned contacts.

RIGHT TO LODGE A COMPLAINT

If the data subject believes that there is a violation in the processing of their personal data, they may lodge a complaint with the Supervisory Authority of the place where they habitually reside, work, or where the alleged violation occurred. In Italy, a complaint can be lodged with the Italian Data Protection Authority.