Privacy policy

Privacy Policy of Nanninidolciecaffe.com

This Website collects some Personal Data from its Users.


This document can be printed using the print command present in the settings of any browser.

Owner of the Data Privacy

DOLCI NANNINI SIENA SRL

Strada Massetana Romana 44 - Siena 53100 (Italy)

Tax Code and VAT n ° 01482230529

Email address of the owner: orders@ dolcinanninisiena.com

Types of data collected

Among the Personal Data collected by this Website, independently or through third parties, there are: Usage data; Cookie; unique identifiers of advertising devices (Google Advertiser ID or IDFA identifier, for example); Data communicated during the use of the service; e-mail.

Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data are collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all data requested by this website are mandatory. If the User refuses to communicate them, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation.
Users who have doubts about which data are mandatory, are encouraged to contact the owner.
Any use of Cookies - or other tracking tools - by this Website or by the owners of third party services used by this Website, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to for the additional purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website and guarantees that he has the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

Mode and place of processing of data collected

Mode of treatment

The Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The treatment is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Website (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers) may have access to the Data. , hosting provider, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Owner. The updated list of Managers can always be requested from the Data Controller.

Legal basis of the processing

The Holder processes Personal Data relating to the User in the event one of the following conditions exists:

  • the User has given consent for one or more specific purposes; Note: in some jurisdictions the Owner may be authorized to process Personal Data without the User's consent or another of the legal bases specified below, as long as the User does not object ("opt-out") to this treatment. However, this is not applicable if the processing of Personal Data is regulated by European legislation regarding the protection of Personal Data;
  • the processing is necessary for the execution of a contract with the User and / or the execution of pre-contractual measures;
  • the processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
  • the processing is necessary for the performance of a task carried out in the public interest or for the exercise of public authority vested in the Holder;
  • the processing is necessary for the pursuit of the legitimate interest of the owner or third parties.

It is in any case always possible to ask the Owner to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.

Location

The data are processed at the operational headquarters of the Data Controller and in any other place where those involved in the treatment are located. For more information, contact the owner.
The User's Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the processing site, the User can refer to the section concerning the processing of Personal Data.

You have the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization of public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect the Data.

The User can check whether one of the transfers described above takes place by examining the section of this document regarding the details on the processing of Personal Data or requesting information from the Data Controller by contacting him at the opening dates.

Retention period

The Data are processed and stored for the time required by the purposes for which they were collected.

Therefore:

  • Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of the contract is completed.
  • Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is met. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Data Controller.

When the processing is based on the consent of the User, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or an order of an authority.

At the end of the retention period the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

The use of the data collected

User data are collected to allow the owner to provide the service, fulfill legal obligations, respond to requests or executive actions, protect their rights and interests (or those of users or third parties), identify any malicious activities or fraudulent, as well as for the following purposes: Tag management, Interaction with external social networks and platforms, Platform and hosting services, Display of content from external platforms, Traffic optimization and distribution, Statistics, Access to accounts on third party services, Advertising , Registration and authentication, Content commenting, Interaction with live chat platforms and Remarketing and behavioral targeting.

To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User can refer to the section "Detailed information on the processing of Personal Data".

Facebook permissions required by this website

This Website may request some Facebook permissions that allow it to perform actions with the User's Facebook account and to collect information, including Personal Data, from it. This service allows this Website to connect with the User's account on the Facebook social network, provided by Facebook Inc.

For more information on the permissions below, refer to Facebook permission documentation and to Facebook privacy policy.

The required permits are as follows:

Basic information

The basic information of the User registered on Facebook which normally includes the following Data: id, name, image, gender and localization language and, in some cases, the "Friends" of Facebook. If the User has made publicly available additional data, the same will be available.

Contact email

Allows access to the User's contact email address.

Details on the processing of Personal Data

The Personal Data are collected for the following purposes and using the following services:

  • Access to accounts on third party services

    This type of service allows this website to collect data from your accounts on third party services and perform actions with them.
    These services are not activated automatically, but require the express authorization of the User.

    Access to the Facebook account (this website)

    This service allows this Website to connect with the User's account on the Facebook social network, provided by Facebook, Inc.

    Permissions asked: Contact email.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

    Access to the Twitter account (Twitter, Inc.)

    This service allows this Website to connect with the User's account on the Twitter social network, provided by Twitter, Inc.

    Personal data processed: various types of data as specified in the privacy policy of the service.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

  • Content comment

    The comment services allow Users to make and make public their comments regarding the content of this Website.
    Users, according to the settings decided by the Owner, can leave the comment also anonymously. In the case of Personal Data issued by the User there is an email, this could be used to send notifications of comments regarding the same content. Users are responsible for the content of their comments.
    In the event that a comment service provided by third parties is installed, it is possible that, even if the Users do not use the comment service, the same collect traffic data relating to the pages in which the comment service is installed. .

    Facebook Comments (Facebook, Inc.)

    Facebook Comments is a service operated by Facebook, Inc. that allows the user to leave your comments and share them within the Facebook platform.

    Personal Data processed: Cookies; Usage data.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

  • Tag management

    This type of service is functional to the centralized management of the tags or scripts used on this website.
    The use of these services involves the flow of User Data through them and, if necessary, their retention.

    Google Tag Manager (Google Ireland Limited)

    Google Tag Manager is a tag management service provided by Google Ireland Limited.

    Personal Data processed: Usage data.

    Place of processing: Ireland - Privacy Policy. Person adhering to the Privacy Shield.

  • Interaction with live chat platforms

    This type of service allows you to interact with live chat platforms, managed by third parties, directly from the pages of this Website. This allows the User to contact the support service of this Website or this Website to contact the User while browsing his pages.
    In the event that an interaction service is installed with live chat platforms, it is possible that, even if the Users do not use the service, it collects Usage Data relating to the pages in which it is installed. Furthermore, live chat conversations could be recorded.

    Facebook Messenger Customer Chat (Facebook, Inc.)

    Facebook Messenger Customer Chat is an interaction service with the Facebook Messenger live chat platform, provided by Facebook, Inc.

    Personal Data processed: Cookies; Data communicated during the use of the service; Usage data.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

  • Interaction with external social networks and platforms

    This type of service allows interaction with social networks or other external platforms directly from the pages of this Website.
    The interactions and information acquired from this Website are in any case subject to the User's privacy settings relating to each social network.
    This type of service could still collect traffic data for the pages where the service is installed, even when Users do not use it.
    It is recommended to disconnect from the respective services to ensure that the data processed on this Website are not linked to the User's profile.

    Tweet button and social widgets to Twitter (Twitter, Inc.)

    The Tweet button and Twitter social widgets are interactive services with the social network Twitter, provided by Twitter, Inc.

    Personal Data processed: Cookies; Usage data.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

    GetSiteControl social widget (GetWebCraft Limited)

    GetSiteControl social widget is a service provided by GetWebCraft Limited that displays a widget that allows interaction with external social networks and platforms and the sharing of the contents of this Website.
    Depending on the configuration, this service can show widgets belonging to third parties, for example the managers of social networks on which to share interactions. In this case, also the third parties that supply the widget will be aware of the interaction and of the Usage Data relating to the pages in which this service is installed.

    Personal Data processed: Cookies; Usage data.

    Place of treatment: Cyprus - Privacy Policy.

    Like button and social widgets for Facebook (Facebook, Inc.)

    Click "Like" Facebook and social widgets are services of interaction with the social network Facebook, provided by Facebook, Inc.

    Personal Data processed: Cookies; Usage data.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

  • Traffic optimization and distribution

    This type of service allows this Website to distribute its contents through servers located throughout the territory and to optimize its performance.
    The Personal Data processed depend on the characteristics and method of implementation of these services, which by their nature filter communications between this Website and the User's browser.
    Given the distributed nature of this system, it is difficult to determine the places where the contents are transferred, which may contain the User's Personal Data.

    Cloudflare (Cloudflare Inc.)

    Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
    The Cloudflare integration methods require that this filter all the traffic of this Website, ie the communications between this Website and the User's browser, also allowing the collection of statistical data on it.

    Personal Data processed: Cookies; various types of data as specified in the privacy policy of the service.

    Place of processing: United States - Privacy Policy.

  • Advertising

    This type of service allows you to use User Data for commercial communication purposes. These communications are shown on this Website in the form of banners and other advertising forms, also in relation to the interests of the User.
    This does not mean that all Personal Data are used for this purpose. Data and operating conditions are given below.
    Some of the services indicated below may use cookies or other identifiers to identify the user or use the behavioral retargeting technique, i.e. display advertisements tailored to the interests and behavior of the user, also detected outside this website. For more information, we suggest you check the privacy policies of the respective services.
    In addition to the opt-out features offered by the services listed below, the User can opt-out by visiting the opt-out page of the Network Advertising Initiative.

    Users may also choose not to participate in certain advertising features through the corresponding device configuration options, such as the advertising configuration options for the mobile device or the generic advertising configuration..

    Facebook Audience Network (Facebook, Inc.)

    Facebook Audience Network is an advertising service provided by Facebook, Inc. For an understanding of the use of data by Facebook, please consult the legislation on Facebook data.

     

    To allow Facebook Audience Network to work, this Website may use some identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for OS) or cookies-like technologies. Among the ways in which Audience Network proposes advertisements to the User, there is also the use of the advertising preferences of the latter. The User can control the sharing of his advertising preferences within the Facebook Ad settings.

     

    The User can opt-out from certain Audience Network targeting functions through the settings of his own device. For example, you can change the advertising settings available for mobile devices, or follow the instructions applicable to Audience Network that may be present in this privacy policy.

    Personal Data processed: Cookies; Usage data; unique identifiers of advertising devices (Google Advertiser ID or IDFA identifier, for example).

    Place of processing: United States - Privacy Policy - Opt Out. Person adhering to the Privacy Shield.

    Similar Facebook audience (Facebook, Inc.)

    Facebook-like public is a service of advertising and behavioral targeting provided by Facebook, Inc. that uses the Data collected through Facebook's personalized Public service in order to show advertisements to Users with behavior similar to Users who are already on a list Public Audience based on their previous use of this Website or their interaction with relevant content through Facebook applications and services.
    Based on this data, personalized ads will be shown to users suggested by similar Facebook users.

     

    Users may choose not to use Facebook cookies to personalize ads by visiting this one opt-out page .

    Personal Data processed: Cookies; Usage data.

    Place of processing: United States - Privacy Policy - Opt Out. Person adhering to the Privacy Shield.

  • Registration and authentication

    By registering or authenticating, the User allows this Website to identify him and to give him access to dedicated services.
    Depending on the following, registration and authentication services could be provided with the help of third parties. If this occurs, this Website will be able to access some Data stored by the third party service used for registration or identification.
    Some of the services listed below may also collect Personal Data for targeting and profiling purposes; to find out more, please refer to the description of each service.

    Facebook Authentication (Facebook, Inc.)

    Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and connected to the Facebook social network.

    Personal data processed: various types of data as specified in the privacy policy of the service.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

    Twitter OAuth (Twitter, Inc.)

    Twitter Oauth is a registration and authentication service provided by Twitter, Inc. and connected to the Twitter social network.

    Personal data processed: various types of data as specified in the privacy policy of the service.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

  • Remarketing and behavioral targeting

    This type of service allows this Website and its partners to communicate, optimize and serve advertisements based on the User's past use of this Website.
    This activity is facilitated by the tracking of Usage Data and by the use of Cookies and other Identifiers to collect information which is then transferred to the partners who manage the remarketing and behavioral targeting activities.
    Some services offer a remarketing option based on email address lists.
    In addition to the opt-out features offered by the services listed below, the User can opt-out by visiting the opt-out page of the Network Advertising Initiative.

    Users may also choose not to participate in certain advertising features through the corresponding device configuration options, such as the advertising configuration options for the mobile device or the generic advertising configuration..

    Remarketing Facebook (Facebook, Inc.)

    Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.

    Personal Data processed: Cookies; Usage data.

    Place of processing: United States - Privacy Policy - Opt Out. Person adhering to the Privacy Shield.

    Personalized Facebook audience (Facebook, Inc.)

    Personalized Facebook audience is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.

     

    Users may choose not to use Facebook cookies to personalize ads by visiting this one opt-out page.

    Personal Data processed: Cookies; e-mail.

    Place of processing: United States - Privacy Policy - Opt Out. Person adhering to the Privacy Shield.

    Twitter's Tailored Audiences (Twitter, Inc.)

    Twitter's Tailored Audiences is a remarketing and behavioral targeting service provided by Twitter, Inc. that connects the activity of this Website with the Twitter advertising network.

     

    Users can choose to opt out of interest-based ads by visiting: Personalization and data.

    Personal Data processed: Cookies; e-mail.

    Place of processing: United States - Privacy Policy - Opt Out. Person adhering to the Privacy Shield.

    Twitter Remarketing (Twitter, Inc.)

    Twitter Remarketing is a remarketing and behavioral targeting service provided by Twitter, Inc. that links the activity of this Website with the Twitter advertising network.

    Personal Data processed: Cookies; Usage data.

    Place of processing: United States - Privacy Policy - Opt Out. Person adhering to the Privacy Shield.

  • Platform and hosting services

    These services are intended to host and operate key components of this website, making it possible to deliver this website from a single platform. These platforms provide the Owner with a wide range of tools such as, for example, analytical tools, for managing user registration, for managing comments and the database, for e-commerce, for processing payments etc. The use of these tools involves the collection and processing of Personal Data.
    Some of these services work through servers located geographically in different places, making it difficult to determine the exact place where Personal Data is stored.

    Shopify (Shopify Inc.)

    Shopify is a platform provided by Shopify Inc. that allows the Owner to develop, operate and host a website dedicated to e-commerce.

    Personal data processed: various types of data as specified in the privacy policy of the service.

    Place of treatment: Canada - Privacy Policy. Person adhering to the Privacy Shield.

  • Statistics

    The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of the user's behavior.

    Google Analytics (Google Ireland Limited)

    Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
    Google may use this personal information to contextualize and personalize the ads of its own advertising network.

    Personal Data processed: Cookies; Usage data.

    Place of processing: Ireland - Privacy Policy - Opt Out. Person adhering to the Privacy Shield.

    Facebook Analytics for Apps (Facebook, Inc.)

    Facebook Analytics for Apps is a statistical service provided by Facebook, Inc.

    Personal Data processed: Usage data; various types of data as specified in the privacy policy of the service.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

    Conversion tracking of Facebook Ads (Facebook pixels) (Facebook, Inc.)

    Facebook Ads conversion tracking (Facebook pixel) is a statistics service provided by Facebook, Inc. that connects data from the Facebook ad network with the actions performed on this website. The Facebook pixel monitors the conversions that can be attributed to Facebook, Instagram and Audience Network advertisements.

    Personal Data processed: Cookies; Usage data.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

    Twitter Ads conversion tracking (Twitter, Inc.)

    Twitter Ads conversion tracking is a statistics service provided by Twitter, Inc. that connects data from the Twitter ad network with the actions performed on this website.

    Personal Data processed: Cookies; Usage data.

    Place of processing: United States - Privacy Policy. Person adhering to the Privacy Shield.

  • Displaying content from external platforms

    This type of service allows you to view content hosted on external platforms directly from the pages of this Website and to interact with them.
    This type of service could still collect data on web traffic related to the pages where the service is installed, even when users do not use it.

    Google Fonts (Google Ireland Limited)

    Google Fonts is a font style visualization service managed by Google Ireland Limited that allows this website to integrate such content within its pages.

    Personal Data processed: Usage data; various types of data as specified in the privacy policy of the service.

    Place of processing: Ireland - Privacy Policy. Person adhering to the Privacy Shield.

    Awesome Font (Fonticons, Inc.)

    Font Awesome is a font style visualization service managed by Fonticons, Inc. that allows this website to integrate such content within its pages.

    Personal Data processed: Usage data.

    Place of processing: United States - Privacy Policy.

User Rights

Users may exercise certain rights with reference to the Data processed by the Data Controller.

In particular, the User has the right to:

  • withdraw consent at any time. The User can withdraw consent to the processing of their Personal Data previously expressed.
  • oppose the processing of your data. The User can object to the processing of his Data when it occurs on a legal basis other than consent. Further details on the right of opposition are indicated in the section below.
  • access your data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.
  • verify and request rectification. The User can verify the correctness of his Data and request its updating or correction.
  • obtain treatment limitation. When certain conditions are met, the User may request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose other than their conservation.
  • obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Owner.
  • receive your data or have it transferred to another holder. You have the right to receive your data in a structured format, commonly used and readable by automatic device and, where technically feasible, to obtain the transfer without hindrance to another holder. This provision is applicable when the Data are processed with automated tools and the processing is based on the User's consent, on a contract of which the User is a party or on contractual measures connected to it.
  • propose a complaint. The User can lodge a complaint with the competent personal data protection authority or act in court.

Details on the right of opposition

When Personal Data is processed in the public interest, in the exercise of public authority to which the Holder is invested or to pursue a legitimate interest of the Owner, Users have the right to oppose the processing for reasons related to their particular situation.

Users are reminded that, if their data are processed for direct marketing purposes, they can oppose the processing without providing any reasons. To find out if the Owner deals with data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise the rights

To exercise the rights of the User, Users can direct a request to the contact details of the Owner indicated in this document. The requests are deposited free of charge and processed by the Owner as soon as possible, in any case within a month.

Cookie Policy

This website uses cookies and other identifiers. To find out more, the User can consult the Cookie Policy.

Additional information on treatment

Defense in court

The User's Personal Data may be used by the Data Controller in court or in the preparatory stages for its possible establishment for the defense against abuse in the use of this Website or related Services by the User.
The User declares to be aware that the Data Controller may be obliged to disclose the Data by order of the public authorities.

specific privacy

At the request of the User, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

Log System and Maintenance

For needs related to operation and maintenance, this Website and any third party services used by it may collect system logs, i.e. files that record the interactions and which may also contain Personal Data, such as the User IP address.

Information not contained in this Policy

Further information in relation to the processing of Personal Data may be requested at any time to the Data Controller using the contact details.

Response to "Do Not Track" requests

This website does not support "Do Not Track" requests.
To find out if any third-party services used support them, the User is invited to consult their respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying it to Users on this page and, if possible, on this Website as well as, if technically and legally feasible, by sending a notification to Users through one of the extremes of contact he has. Please therefore consult this page frequently, referring to the date of the last modification indicated at the bottom.

If the modifications concern treatments whose legal basis is consent, the Controller will collect the User's consent again, if necessary.

Definitions and legal references

Personal Data (or Data)

It constitutes personal data any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a physical person identified or identifiable.

Data of Use

This information is collected automatically through this Website (also from third party applications integrated into this Website), including: IP addresses or domain names of the computers used by the User that connects to this Website, the addresses in URI (Uniform Resource Identifier) ​​notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (good order, error, etc. .) the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of the pages consulted, to the parameters relating to the operating system and the IT environment of the User.

User

The individual who uses this Website that, unless otherwise specified, coincides with the interested party.

Interested

The natural person to whom the Personal Data refers.

Data Processor (or Manager)

The natural person, legal person, public administration and any other entity that processes personal data on behalf of the Owner, as set out in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures related to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.

This Website (or this Application)

The hardware or software tool through which the Personal Data of Users are collected and processed.

Service

The Service provided by this Website as defined in the relevant terms (if any) on this website / application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union contained in this document shall be extended to all current member states of the European Union and the European Economic Area.

Cookie

Small portion of data stored in the User's device.


Legal

This privacy statement is drawn up on the basis of multiple legislative systems, including articles 13 and 14 of the Regulation (EU) 2016 / 679.

Unless otherwise specified, this privacy statement applies exclusively to this Website.