Privacy policy

INFORMATION ON ONLINE PURCHASE E-COMMERCE SITE

In implementation of EU regulation 2016/679 and current regulations we provide you with the following information relating to the processing and protection of your personal data

Data Controller
Antica Acetaia La Secchia di Righi Lorenzo, Via Ghiaroni 169 – 41126 Modena (MO) – Italy, Tel. +39059300331 mail: info@lasecchia.it

Source of personal data:
Personal data is collected directly from the interested party when completing this form for the purpose of purchasing the products offered, even without the need to create a specific account.

Purpose of the processing
The personal identification data collected from the interested party, user of the site, constitute the object of the processing and are processed and used directly for the following purposes:

Satisfy users' purchase requests and arrange for the stipulation and execution of the contract aimed at the purchase as well as for the subsequent dispatch/shipment of the products on this site. The provision of data is mandatory to proceed with the purchase.
Any incorrect or insufficient communication of the requested data may result in the total or partial impossibility of following up on the interested party's requests.
storage times: 10 years from purchase
For administrative/accounting purposes.
storage times: as required by law
For defensive purposes or debt collection, based on the legitimate interest of the Owner.
retention times: for the next 2 years from the conclusion of any dispute
To send communications on future commercial and promotional initiatives; announcements and offers of the Owner and for sending informative and promotional messages relating to its activity, as well as for related and instrumental purposes. Sending is subject to your express consent. The data will be used by the owner until the interested party withdraws consent.
To send communications and commercial offers on products similar to those already purchased, without the need to request consent from the interested party ("Soft spam").
retention times: for the next two years from the first archiving and in any case no longer than any objection from the customer.

Recipients
The data collected will not be disclosed.
They will be communicated to third parties to whom the communication is necessary to carry out fiscal or administrative obligations, or subjects that the Data Controller uses to carry out activities that are instrumental and/or ancillary to the fulfillment of its obligations deriving from the conclusion of contracts and/or in any case connected to the services offered.

Treatment methods
The processing of your personal data will be consistent with the principles of correctness, lawfulness and transparency, protecting your privacy and your rights. They will be processed with the aid of current IT systems or paper supports by specifically authorized personnel trained in confidentiality and the obligation to use the data only for the purposes identified by the Data Controller. The Data Controller will implement technical and organizational measures appropriate to the level of risk. Once the retention terms indicated above have expired, all data will be destroyed or made anonymous, compatibly with the technical cancellation and backup procedures.

Transfer of Data Outside the EU
The data of the interested party will not be transferred to non-European countries. If the Data were to be transferred to non-European countries or international organizations in the future, all the provisions of Chapter V (EU Regulation 2016/679) will be respected in order to ensure an adequate level of protection.

Rights of the interested party
You have the right to ask the data controller for access to your personal data, rectification, cancellation, opposition to the processing of the same or possibly limitation of the processing. You can always request a complete specification of the processing and your rights by writing to the contacts made available by the Data Controller and indicated at the beginning of the information.

Revocation of Consent
You can interrupt the processing covered by this information at any time by writing your intentions to the Data Controller, without this however jeopardizing the operations carried out lawfully up to that point.

Right to Complaint
If you believe that the processing concerning you violates the GDPR Regulation EU-2016/679, you have the right to lodge a complaint with the Guarantor Authority for the Protection of Personal Data through the contacts available on the website https://www.garanteprivacy.it/