This Privacy Policy is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter “GDPR”) and applicable national data protection legislation.
Data Owner and Controller:
Az. Agr. Nocciola Amore Mio di Mattia Fontana
Via Cappelletti, 12
12050 Cravanzana (CN) – Italia
E-mail: info@nocciolaamoremio.com
Tel: +39 339 1506486
(Hereinafter, “Nocciola Amore Mio” or the “Data Controller”)
1. Subject of the Privacy Policy
This Policy describes the methods of collection, use, storage, and protection of personal data concerning users (hereinafter referred to as “Users” or “Data Subjects”) who interact with the website www.nocciolaamoremio.com (hereinafter referred to as the “Website”).
2. Types of Data Processed
2.1 Browsing Data
The IT systems and software procedures responsible for the operation of the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category includes IP addresses, domain names of the computers used to connect to the Site, URIs of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numeric code indicating the server’s response status, and other parameters related to the operating system and the user’s IT environment. These data are used solely to obtain anonymous statistical information about the use of the Site, to monitor its proper functioning, and to identify anomalies or abuses.
2.2 Data Provided Voluntarily by the User
The optional, explicit, and voluntary sending of messages to the email addresses provided on the Site, as well as the completion of any contact forms, involves the acquisition of the contact details of the sender (such as name, surname, email address, phone number, etc.) necessary to respond, as well as any additional personal data included in the communications.
2.3 Cookies and Tracking Tools
The Site uses technical cookies necessary for its operation and, currently, statistical analysis tools provided by third parties, specifically Google Analytics 4 (GA4). These cookies and tracking tools collect information anonymously, where possible, to analyze the use of the Site and improve the user experience. The User can manage their cookie preferences through their browser settings and can deactivate Google Analytics by installing the add-on available at the following address: https://tools.google.com/dlpage/gaoptout.
Any third-party cookies other than GA4 (e.g., social network sharing buttons, embedded videos from external platforms) will be indicated in a dedicated Cookie Policy, if available, where detailed information will be provided on the purposes, duration, and management methods of such cookies.
3. Purposes and Legal Bases of Processing
Personal data will be processed for the following purposes:
a) Provision of Site Services and Management of Requests
- Purpose: Allow browsing on the Site, provide information about products and services, respond to requests submitted by the User.
- Legal basis: Execution of pre-contractual or contractual measures (Article 6.1(b) GDPR).
b) Statistical analysis and improvement of the Offerings.
- Purpose: To carry out anonymous statistical analyses on the use of the Site in order to improve its functionality and understand User preferences (Google Analytics 4).
- Legal basis: Legitimate interest of the Data Controller in improving its services (art. 6.1(f) GDPR), implementing anonymization measures where possible.
c) Legal obligations and defense of rights.
- Purpose: To comply with legal obligations, regulations, and EU laws, as well as to assert or defend a right in legal proceedings.
- Legal basis: Compliance with a legal obligation (Art. 6.1(c) GDPR) and/or legitimate interest (Art. 6.1(f) GDPR).
Direct marketing (if foreseen in the future): If the company decides to send commercial communications, newsletters, or promotional materials, the user will be informed in advance, and, where required by law, their consent will be obtained (Art. 6.1(a) GDPR). Currently, this purpose is not operational. If it becomes active, the Data Controller will update this policy.
4. Nature of Data Provision
The provision of data for the purposes mentioned above is, in part, necessary to allow the use of the Site and to respond to user requests. Failure to provide the data may result in the inability to access certain functionalities or obtain the desired information.
The provision of data for statistical analysis through Google Analytics is optional. The User can object to this processing by disabling Analytics cookies.
5. Methods of Processing and Security Measures
The data is processed using IT and telematic tools, adopting technical and organizational measures appropriate to ensure a level of security proportional to the risk, pursuant to Article 32 of the GDPR. These measures are aimed at preventing data loss, unlawful or incorrect use, and unauthorized access.
6. Recipients of Personal Data
The data may be communicated to third parties, such as technical service providers, hosting providers, IT companies, legal or tax consultants, always within the scope of pursuing the described purposes and in compliance with privacy regulations. These entities typically act as Data Processors, appointed by the Data Controller, or as independent Data Controllers (in the latter case, the Data Controller ensures that these parties process the data in compliance with applicable laws).
The updated list of Data Processors can be requested from the Data Controller by writing to info@nocciolaamoremio.com.
7. Transfer of Data outside EU
The use of Google Analytics may involve the transfer of certain data outside the EEA (e.g., to the United States). Such transfers are carried out based on Standard Contractual Clauses approved by the European Commission or other equivalent safeguards, in compliance with applicable regulations. For more information, please refer to: https://policies.google.com/privacy.
8. Period of Data storage and saving
Personal data are stored for the time strictly necessary to pursue the purposes for which they were collected and, in any case, within the applicable legal terms. Once the need for storage ceases, the data will be deleted or anonymized. For data related to Google Analytics, refer to Google’s policies for the relevant retention times. Where possible, anonymization measures are implemented.
9. Rights of the Data Subject
The data subject has the right to:
- Access his/her own personal data (art. 15 GDPR).
- To obtain the correction of inaccurate data or the completion of incomplete data (art. 16 GDPR).
- To obtain the deletion of personal data (art. 17 GDPR).
- To obtain the restriction of processing (art. 18 GDPR).
- To object to the processing of one’s data (art. 21 GDPR).
- To receive one’s data in a structured, commonly used, and machine-readable format (portability, art. 20 GDPR).
- To withdraw consent, where given, at any time, without affecting the lawfulness of processing based on consent before the withdrawal.
To exercise these rights, the Data Subject can contact the Data Controller at the email address info@nocciolaamoremio.com.
The Data Subject also has the right to file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they believe that the processing of their personal data is in violation of the applicable regulations.
10. Link to Third parties Websites
The Site may contain links to third-party websites over which the Data Controller has no control. The Data Controller cannot be held responsible for the content or privacy policies of these third-party sites. Users are encouraged to review the respective privacy policies.
11. Changes to this Privacy Notice
This Notice may be subject to updates and changes, for example, in the event of regulatory changes or modifications to the functionality of the Site. Users are therefore encouraged to periodically review this page to stay informed of any updates.