Privacy policy
This notice explains what personal data we collect when you use this website, why we collect it, how long we keep it and what rights you have. It is given under Articles 13 and 14 of Regulation (EU) 2016/679.
Who processes your data
The data controller is Conserve Alimentari I Maletti S.r.l., Via Sant'Ambrogio 17/A, 41041 Casinalbo di Formigine (MO), Italian VAT and tax number 01561270362, business register (REA) no. MO-225485, share capital €15,600.00 fully paid up.
For anything concerning your data you can write to imalettisrl@gmail.com or to meloria@pec.it, or call +39 349 5162750. We have not appointed a data protection officer because the law does not require one in our case: we answer you directly.
What we collect, and why
If you write to us from the contact form we collect your name, email address, phone number if you leave one, and the text of your message. We need them to reply. If the message comes from the cart, it also contains the list of products you chose.
If you book a visit to the acetaia we collect name, email, phone, the date you suggest and the number of people. We need them to arrange the visit and confirm it.
If you place an order we collect what is needed to fulfil and invoice it: name and surname or company name, shipping and billing address, tax number or VAT number where required, email and phone to keep you posted on delivery.
When you pay, your card or account details never pass through us and we never see them: they are handled directly by the payment provider. All we receive is the outcome and the amount.
When you browse, the server hosting the site records, as all servers do, the IP address, date and time, the page requested and the type of browser. These keep the site running and defend it from attacks and abuse. We do not use them to identify you or to profile you.
To understand how the site is used we rely on Google Analytics, configured to produce aggregate statistics only: how many people arrive, where from, which pages they read, which products they look at and how many reach the cart. The IP address is not kept in full, we have switched off the combining of data across devices and Google services as well as ad personalisation, and the data is not used to recognise you nor passed to anyone else. On the conditions set out by the Italian data protection authority in its cookie guidance, such tools are treated as technical cookies: that is why we do not ask for your consent, but we do account for them here.
This site uses no profiling cookies, has no social buttons that follow you and loads no fonts or images from other sites. Your cart is saved only in your browser and does not reach our servers until you decide to send us the order. The details are in the cookie policy.
On what legal basis
- To answer your requests, manage bookings and fulfil orders: performance of a contract or of pre-contractual measures you have asked for (Art. 6.1.b of the Regulation).
- For invoices, registers and accounting records: a legal obligation to which we are subject (Art. 6.1.c).
- For the security of the site and to defend ourselves in a dispute: our legitimate interest (Art. 6.1.f), balanced against your rights.
- To email you about our products similar to those you have already bought: Art. 130(4) of the Italian Privacy Code, which allows this towards people who have already bought from us. You can object at any time, free of charge and with one click, either by writing to us or by using the unsubscribe link in every message.
- To send you the newsletter with discount codes and news, if you sign up on the site or at checkout: your consent (Art. 6(1)(a) of the Regulation), which you can withdraw at any time by writing to us or using the unsubscribe link in every message.
Providing your data is optional, but without the fields marked as required we cannot reply to you, confirm a visit or ship an order.
How long we keep it
- Enquiries and bookings: twenty-four months from the last contact.
- Orders, invoices and accounting records: ten years, as required by Art. 2220 of the Italian Civil Code and by tax law.
- Addresses used for commercial messages: until you object; after that we keep only what is needed not to write to you again.
- Server logs: as long as security requires, and in any case no more than twelve months.
Who we share it with
We do not sell or pass on your data to anyone. It is known only to the people who work with us and to the suppliers we need in order to run the site and the shop, appointed as processors where the law requires:
- whoever hosts the site and manages its security;
- whoever provides our email;
- the payment service providers, to collect the amount of the order;
- the courier who brings you the parcel, limited to the shipping details;
- our tax and accounting adviser;
- Google, limited to the aggregate browsing data collected by the statistics tool;
- Google, if you choose to watch a YouTube video on the site: it receives your IP address and the technical data needed to play it, only after you press play;
- the authorities, where a legal obligation requires it.
Data outside the European Union
Some of these suppliers belong to groups based in, or with infrastructure in, the United States. In those cases the transfer takes place on the basis of an adequacy decision of the European Commission or of the standard contractual clauses adopted by the Commission, with the supplementary safeguards required. If you would like the current list of suppliers and the safeguards applied, write to us and we will send it.
Your rights
At any time you can ask us to give you access to your data, to correct it if it is wrong, to erase it, to restrict its use, to receive it in a readable format so you can take it elsewhere, and you can object to processing based on our legitimate interest. If you have given consent, you can withdraw it whenever you like, without affecting what was done before.
An email to imalettisrl@gmail.com is enough. We reply within a month; if the request is complex we may take two more, and we will tell you.
If you believe we are handling your data improperly you can turn to the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garanteprivacy.it), or to the authority of the country where you live, or to a court.
Automated decisions
We take no automated decisions about you and we do no profiling. Behind every reply and every order there is a member of the family.
Changes
If we change the way we handle data we will update this page and state the date. If the changes are significant we will tell you by email.