Privacy Policy

We provide the following information on how we process personal data collected as a result of interaction with the website starting from the URL: https://www.labottega.com and www.labottegacollective.com. If you leave the https://www.labottega.com domain and www.labottegacollective.com and visit other websites whose links may also be included in the web pages published on the https://www.labottega.com and www.labottegacollective.com website,  please refer to the privacy policies of those other websites.

Data Controller: LA BOTTEGA SPA, registered office via Marco Polo 2, TRECASTELLI (AN), 60012, Tel: 071 791191, E mail: : info@labottega.com  , Pec: labottegaspa@pec.labottega.com

Data Protection Officer: SOLUZIONI SRL-SOCIETA’ BENEFT, Ref. Avv. Massimiliano Galeazzi, E-mail: privacy@labottega.com

1. When and how we collect personal data

As soon as you interact with our website we start collecting data. The collection can take place either through your specific request or automatically during the use of the website.

Here’s how the collection takes place:

1. Data relating to the way in which the Website is used: data that we collect automatically;
2. Identification, contact and personal data (name, surname, e-mail, telephone): data that the user enters in the forms on the Site requesting information;
3. Data for marketing purposes (newsletter): data that the user communicates with prior explicit consent.

2. The Types of Data We Process, for What Purposes and What Legal Basis allows us to do so

Different types of personal data are collected and processed through the Site for different purposes. We may only process data for certain purposes and, in any case, always if we have a legal basis that allows us to do so.  More precisely, we can treat:

1. Browsing data

These are personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. These are, for example, the IP addresses or domain names of the computers you use to connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, successful,  error, etc.) and other parameters related to the user’s operating system and computer environment.

Purpose: we use this data for the sole purpose of allowing the operation of the site, obtaining anonymous statistical information on the use of the site to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

Legal basis: the processing is based on the legitimate interest in ensuring the correct functioning of the Site and the user himself in navigating the Site correctly.

1. Contact details for sending inquiries and information

If you fill in the appropriate form, we may process your contact details (name, surname, country, city and e-mail) in order to manage the requests for information received

Purpose: in this case, the processing is carried out to provide feedback to requests for information regarding the services offered.

Legal basis: the processing is based on the legal basis of pre-contractual or contractual measures.

1. Contact details for sending our promotions and commercial initiatives or, in general, for marketing purposes

Only with specific consent, we may process contact data (e-mail) to send our newsletter or information and updates on our products, services and events promoted.

This activity will take place through automated communications via e-mail as indicated in the appropriate form.

Purpose: the processing is carried out in this case for promotional marketing purposes.

Legal basis: the processing is based on consent, however, the user can always change his mind and ask not to receive such information.

The user can revoke consent at any time, as well as exercise his rights, by sending an email to the address of the Data Controller indicated above, or by clicking on the unsubscribe link included in the emails he receives. Of course, the processing carried out prior to the revocation remains unaffected.

1. Personal data entered on the “Work with us” page

In the “Work with us” section you can submit your self-application, for which we may process your personal data (e.g. name and surname), contact data (e-mail) as well as your CV.

For your self-application, you are not required to indicate sensitive personal data (so-called particular, as qualified by Article 9 of Reg. 2016/679), including your state of health.

This is without prejudice to the hypothesis in which these personal data must be known due to the establishment of an employment relationship.

Purpose: to proceed with the verification of the conditions for hiring and/or starting a collaboration.

Legal basis: the processing is based on pre-contractual measures.

3. Mandatory or optional nature of the provision of data

With the exception of browsing data (the provision and collection of which are regulated in more detail in the “Cookie Policy” section of this page), the provision of personal data collected through the Website both to respond to requests and queries and for marketing purposes, is free, optional and optional. Failure to provide such data does not therefore limit the use of the Site, but may make it impossible to respond to requests for information and queries, or to send information material, updates and newsletters.

The provision of personal data, in particular personal data, e-mail address, telephone number and other data provided, is necessary if they are requested for contractual reasons through the Site.

Some of these data may also be indispensable to comply with obligations deriving from laws or regulations (tax compliance and anti-money laundering legislation).

4. Categories of recipients of personal data

The Data Controller communicates the personal data of users of the Site only within the limits permitted by law and in accordance with the provisions below. In particular, personal data may be known by:

• employees and collaborators, who will operate as subjects authorised to process data for the internal organisation of company activities;
• companies that carry out specific technical and organisational services related to the activities of the Website (assistance and maintenance) on behalf of the Data Controller, as data processors.

We share data with them, always within the limits of the purposes for which we collected them, only when it is strictly necessary to ensure the maximum functionality of our services and in accordance with the security measures and good practices adopted.

The data will not be disseminated in any way and, should there be transfers outside the EU, the presence of suitable guarantees will be verified that involve adequate levels of protection and safeguards for the protection of the data themselves, in accordance with current legislation.

5. How long we will keep the data

We will process your data for the time necessary to achieve the purposes indicated for which they were collected and will be stored for the entire duration of the contractual relationship. They may also be maintained even after the termination of the relationship for the entire duration necessary for the extinction of the contractual obligations assumed and to carry out the related obligations provided for by the laws in force. At the end of the period, the data will be destroyed, returned or processed ensuring compliance with the principle of minimization to protect the rights and freedoms of the data subject and always safeguarding them with adequate technical and organizational security measures. For promotional activities, which you can always ask us to stop, we will keep the data until the revocation of the same and in any case no longer than 24 months from the consent given.

6. Rights

You can always exercise your rights by sending us an email to the DPO’s address:

• privacy@labottega.com

In certain cases, we may need, in accordance with Applicable Law, certain specific information to help us confirm your identity and ensure that you are exercising the rights you have:

• You have the right to access information about you. This includes the right to ask us for further information regarding:
• the categories of data we process;
• the purposes of the processing;
• the categories of any recipients to whom the data may be communicated;
• the period for which the data will be retained or, failing that, the criteria for determining that period;
• your other rights regarding the use of your data.

We will provide you with the information within 30 days of your request, unless it would affect the rights and freedoms of others (e.g. another person’s privacy or intellectual property rights) or if we are required to do so by law or for other justified reasons. We will inform you in advance in case we are unable to comply with your request in time for these reasons.

• You have the right to obtain the correction of your data, if it is inaccurate or out of date.
• You have the right to obtain the erasure of your personal data (right to be forgotten)

You may, at any time, ask us to delete the personal data we hold about you, in the event that the retention of your personal data is no longer necessary for the purposes of the processing.

• You have the right to “take back” your data or transfer it to another operator (Data portability)

In the event that the processing of your data is based on your consent or on the contract of sale, you have the right to receive your data in an interoperable format or to request that it be directly transferred to another operator. At your request and if technically possible, we will transfer the data directly to the new provider. We will not proceed with any transfer, in the event that the portability of your data also involves the dissemination of the personal data of other individuals.

• You have the right to object to our processing of your personal data (e.g. for direct marketing purposes) and to object to the use of your data by automated decision-making.

Finally, you can always contact the Supervisory Authority to submit any complaints you may have (http://www.gpdp.it). Before doing so, please contact us! We will be happy to resolve any issues you may have regarding the processing of your personal data.