Privacy Policy

Information on the Processing of Personal Data, pursuant to EU Regulation 2016/679 (GDPR)

The purpose of this document is to inform Users regarding the Personal Data collected by the website https://www.ambrosiaofficial.com (hereinafter "Website").

The Data Controller, as identified below, may modify or simply update this Policy, in whole or in part. Changes and updates will be binding as soon as they are published on the Website. The User is therefore invited to read the Privacy Policy each time they access the Website.

1. Personal Data collected by the Website

The Data Controller collects the following types of Personal Data:

    • A. Contents and information provided voluntarily by the User
      • Contact details, credentials, content: for example, personal data, email or postal addresses and other contact details, passwords and security information used for authentication and account access, personal interests and preferences, and other personal content.
      • Personal data collected from Social Media: Users may share with the Website Data communicated to social media. The User has the right to control the Personal Data that the Website can access when they authorize access to their social media accounts and via the privacy settings available on the social media in question. By associating accounts managed by social media with the Website and authorizing the Data Controller to access such Data, the User consents to the acquisition, processing, and storage of the Data provided by said social media in accordance with this Privacy Policy.

      Failure by the User to provide certain Data may prevent this Website from providing its services.
      The User assumes responsibility for the Personal Data of third parties published or shared through this Website and guarantees that they have the right to communicate or disseminate them, releasing the Data Controller from any liability to third parties.
      If the processing of Personal Data is based on the User's consent, the User may revoke it at any time. If the User is not of legal age to provide consent for the processing of personal data, the consent of a parent or guardian is required.
      The User may view the Privacy Policy at any time by returning to this same page.

    • B. Data and content acquired automatically during the use of the Website
      • Technical data: the computer systems and software procedures used to operate this Website may acquire, during their normal operation, some Personal Data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature, could, through processing and association with Data held by third parties, allow Users to be identified. This category includes IP addresses or domain names used by Users connecting to the Website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the website of origin of the visitor (Referral), parameters of the device used to connect to the site (User Agent), and the size of the file obtained.
      • Usage data: Data relating to the User's use of the Website may also be collected, such as the pages visited, actions taken, and features and services used.
      • Geolocation data: the Website may collect location Data, which may be precise or imprecise. Location Data may be GNSS Data (Global Navigation Satellite System, e.g., GPS), as well as Data identifying the nearest relay station, Wi-Fi hotspots, communicated by the User's device if they have enabled location-based features.

    • C. Personal data collected via cookies or similar technologies

      This Website uses cookies, web beacons, unique identifiers, and other similar technologies to collect Data on pages, links visited, and other actions of the User when using the Website's Services, within advertising content or emails. Cookies are stored to be then retransmitted to the same sites upon the next visit of the same User.

  • 2. Purposes

    The collected Data may be used for the following purposes:


    • Storage, Hosting, and backend infrastructure management

      This type of service has the function of hosting data and files that allow the Website to function, allow its distribution, and provide a ready-to-use infrastructure to provide specific features of the Website itself.

    • Ecommerce

      External management of payments via credit card, bank transfer, or other instruments (e.g., Paypal).
      The data used for payment is acquired directly by the operator of the requested Payment service without being processed in any way by this Website.

    • Payments

      Payment management services allow this Website to make payments via credit card, bank transfer, or other instruments. The data used for payment is acquired directly by the operator of the requested payment service without being processed in any way by this Website. Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment.

    • Paypal

      PayPal is a payment service provided by PayPal Inc., which allows the User to make payments online.
      Privacy Policy

    • SPAM protection

    • Google reCAPTCHA

      Google reCAPTCHA is an SPAM protection service provided by Google Inc. Use of the reCAPTCHA system is subject to Google's privacy policy and terms of use.
      Privacy Policy

    • User Registration and Authentication

    • Direct registration

      The User registers by filling out the registration form and providing their Personal Data directly to this Application.

    • Contacting the User

    • Contact form

      By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form's header.

    • Statistics

      The services contained in this section allow the Data Controller to monitor and analyze traffic data. The Website uses this service to perform aggregate analyses on its Users in an anonymous form and, thus, improve the performance of the site itself. All statistical services are used by the Website through an integration that anonymizes the User's IP address.

    • Google Analytics

      Google Analytics is a web analysis service provided by Google LLC (“Google”). Google uses the collected Personal Data for the purpose of tracking and examining the use of this Website.
      Privacy Policy

    • Displaying content from external platforms

      This type of service allows content hosted on external platforms to be viewed directly from the pages of the Website and to interact with them.

    • Google Fonts

      Google Fonts is a font display service managed by Google LLC that allows this Website to integrate such content into its pages.
      Privacy Policy

    How do we use cookie files?

    We use cookie files so that our website can function properly and our offer is relevant, interesting, and pleasant for the user. To use cookies, we need the support of the browser used by the user. Our website also works without cookies, but to a very limited extent, with the impossibility of using some basic functions.

    Cookies are a standard tool for storing information about the use of websites.

    Cookies are small text files that are created automatically when you visit a website and are stored on your computer, smartphone, or other device in relation to the browser used. Thanks to some cookies, we are able to track the user's activities on our website until the browser is closed. These cookies are automatically deleted when the browser window is closed.

    However, other cookies remain saved in the browser or on the device for a certain period and are reactivated every time you visit our website. In addition to cookies, we also use so-called tracking pixels, which are small images invisible to the average user, which work on a similar principle to cookies. The retention time of cookies in the browser or on the device depends on the settings of the cookies themselves and the browser. We store the data obtained from cookies for a maximum of 1 year.

    Which cookie files do we use?

    The cookies we use on our website can be divided into 2 basic types:

      • short-term, so-called “session cookies”, which are deleted immediately after the end of the visit to our website;
      • long-term, so-called “persistent cookies”, which remain in the browser or on the device for a set period or until they are deleted manually.

    Cookies can also be divided according to their functionality into:

      • essential, i.e., technical and functional cookies, which are important for the basic functioning of the website. Without these cookies, it would not be possible to add items to the cart, submit an order, or access your customer account;
      • analytical, which help us improve the comfort of our website users, allowing us to understand how users use it. They also allow us to analyze the performance of the different sales channels;
      • remarketing, which we use to personalize the content of ads and their correct targeting.

    In practice, we use the aforementioned cookie files to:

      • Ensure the proper functioning of the cart, so that you can complete the order as easily and quickly as possible.
      • Remember login credentials so you don't have to enter them every time.
      • Better customize our website according to the user's needs thanks to traffic monitoring, website navigation, and functions used.
      • Discover which ads are viewed, so as not to show ads for products that will not be of interest in the future.

    Some cookies, including their content, may collect information that can subsequently be used by third parties and which, for example, directly support our advertising activities (so-called “third-party cookies”). For example, information about products purchased on our website may be viewed by an advertising agency, so they can customize advertising banners on the websites viewed. However, these cookies are anonymized for third parties and it is not possible to identify the user based on them.

    How is it possible to limit cookie files?

    The setting for the use of cookies is part of the browser used; most browsers automatically accept cookies by default. Cookies can be completely rejected via the browser or limited to selected types. However, this will also limit the functioning of our website and it will not be possible to fully exploit the functions we offer, including access to the customer account.

    Alternatively, it is also possible to use incognito browsing mode, which does not completely prevent the use of cookies, but anonymizes them better and does not save the history of the websites visited.

    Information on how to set cookie preferences is available in the links below or in other browser documentation:

     

  • 3. Methods of processing


    The processing of Personal Data is carried out using computer and electronic tools, with organizational methods and logic strictly related to the indicated purposes.

    In addition to the Data Controller, in some cases, other authorized parties (Processors) involved in the management of this Website and business or who provide services to the User may have access to the Data. The Processors, if any, may access the Users' Personal Data whenever it is strictly necessary and will be contractually obliged to keep them confidential.
    The Data Controller may appoint a Data Protection Officer (mandatory for example in the case of Public Administration), whose main responsibility is to observe, evaluate, and organize the management of processing and the protection of Personal Data.

  • 4. Legal basis for processing


    The Data Controller processes Personal Data relating to the User in compliance with one or more of the following conditions:

    • the User has given consent for specific purposes:
    • the processing is necessary for the execution of a contract with the User and/or for the execution of pre-contractual measures;
    • the processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
    • the processing is necessary for the execution of a task in the public interest or for the exercise of public powers vested in the Data Controller;
    • the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

    It is however always possible to request the Data Controller to clarify the specific legal basis of each individual processing.

  • 5. Place


    The Data is processed at the Data Controller's operating offices and at the web Hosting datacenter (Server Type: Dedicated, managed by Aruba S.p.A.), and possibly in other places where the parties involved in the processing are located. For further information, you can contact the Data Controller.

  • 6. Security measures


    The Processing is carried out according to methods and with tools suitable for ensuring the security and confidentiality of the Data itself, with the Data Controller having adopted technical (e.g., SSL/TLS) and organizational (e.g., confidentiality agreements with Processors) measures that ensure the Processing is carried out in compliance with the GDPR regulation.

  • 7. Data retention period


    The Data Controller will process Personal Data for the time necessary to fulfill the purposes connected with the execution of a contract between the Data Controller and the User.
    When the processing of Personal Data is necessary for the pursuit of a legitimate interest of the Data Controller, the Personal Data will be kept until such interest is satisfied.
    If the processing of Personal Data is based on the User's consent, the Data Controller will keep the Personal Data until a revocation request.
    Personal Data may be kept for a longer period if necessary to fulfill a legal obligation or by order of an authority.
    All Personal Data will be deleted or anonymized at the end of the retention period.

  • 8. Automated decision-making processes


    All collected Data will not be subject to any automated decision-making process, including profiling, that may produce legal effects for the person or that may significantly affect them.

  • 9. User Rights


    With regard to the Data processed by the Data Controller, the User has the right to:

    • withdraw consent at any time;
    • object to the processing of their Data;
    • access their Data;
    • verify and request rectification;
    • obtain the restriction of processing;
    • obtain the erasure or anonymization of their Personal Data (right to be forgotten);
    • receive their Data or have it transferred to another controller;

    To exercise their rights, Users may direct a request to the contact details of the Data Controller indicated in this document. Requests are made free of charge and processed by the Data Controller as soon as possible.

  • 10. Data Controller


    The Data Controller is REB & RAC SPA SRL

    Company name: REB & RAC SPA SRL
    With registered office in
    Via Paghezzana, 29
    54035 Fosdinovo MS
    Italy
    VAT Number 01307520450
    E-mail address: info@ambrosiaofficial.com