This page describes the website management methods with reference to the processing of personal data of visitors and customers who consult it, as well as the data processing practices transmitted by the interested party to the Data Controller through this site. This is a disclosure made pursuant to articles 13 and 14 EU Regulation 2016/679 (now Regulation) to those who interact with the web services of the company Masioli & Spinelli snc, based in Viale Jacopo Mazzoni 16-17 - 47521 Cesena (FC) – Italy, accessible electronically starting from the address www.bottegadellacanapa.com, corresponding to the home page of the Bottega della Canapa Store of Masioli & Spinelli snc.
The information is provided for the site in question and not for other websites that may be consulted by the user via links.
The data controller of the data collected on the site following consultation, purchase or voluntary registration on it is Masioli & Spinelli snc with registered office in Viale Jacopo Mazzoni 16-17 - 47521 Cesena (FC) – Italy, Tax Code and VAT number 03327710400, email firstname.lastname@example.org.
The reference principles
The treatments carried out by Masioli & Spinelli snc are based on the principles of transparency, pertinence, purpose, verifiability, lawfulness, correctness, purpose limitation and retention, data minimization, accuracy, integrity and confidentiality.
Place of data processing
The treatments connected to the services of this site take place at the registered office of Masioli & Spinelli snc located in Viale Jacopo Mazzoni 16-17 - 47521 Cesena (FC) – Italy, and are only handled by the staff of the Data Controller.
Persons authorized to process, data processors and communication
The processing of the collected data is carried out by Masioli & Spinelli snc internal staff in compliance with current legislation.
For the provision of services, your data could be processed by our selected suppliers who act as data processors (art. 28 of the Regulation). For example:
- professionals or companies providing accounting, administrative, legal, tax, financial, technical assistance and consultancy
- professionals or companies necessary for the provision of the service (e.g. couriers, hosting providers)
- subjects, bodies or authorities, for administrative purposes and for the fulfillment of legal obligations, such as those of an accounting, fiscal nature, or to follow up on requests from the judicial authorities.
In any case, personal data will never be disclosed.
Data processed, purposes and legal bases
Data generated by access to the site
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are cancelled immediately after processing.
Data provided voluntarily by the user
Masioli & Spinelli snc will process the user's personal data for:
- allow browsing, registering an account, purchasing goods and services;
- for the periodic sending, by e-mail, of newsletters and advertising material, subject to specific consent;
- for the communication of availability of items requested with the Notify me service , subject to specific consent;
- store personal data, order history, billing and delivery addresses;
- allow the conclusion of the purchase contract and the correct execution of the obligations arising from this contract (e.g. delivery);
- follow up on requests sent (e.g. customer care).
The legal basis for this processing is the fulfilment of the contract. For this purpose, Masioli & Spinelli snc will process the user's data for the time strictly necessary to carry out the individual processing activities. The provision of data for the aforementioned purposes is optional; however, since their provision is necessary to allow the provision of services, failure to provide them will make it impossible to conclude a purchase contract and/or to receive answers to requests made.
If you provide personal data of third parties, such as those of your family or friends, you must be sure that these subjects have been adequately informed and have consented to their processing in the manner described in this statement. We inform you that Masioli & Spinelli snc does not process personal data relating to minors. If you access www.bottegadellacanapa.com and use the services offered by Masioli & Spinelli snc you declare that you are of legal age.
All information sent to the Masioli & Spinelli snc website is safeguarded and transmitted using the SSL encrypted method. Masioli & Spinelli snc does not record or store credit card information.
Processing methods and data retention times
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected, in compliance with the principle of minimization of data processing. Specific security measures are observed in order to avoid data loss, illicit or incorrect use and unauthorized access.
Rights of the interested parties
Pursuant to articles 15, 16, 17, 18, 19, 20 and 21 of the Regulation, the data subject has the right to
- obtain confirmation as to whether or not personal data is being processed and, if so, to obtain access to personal data;
- obtain the rectification of inaccurate data;
- obtain the cancellation of personal data (oblivion);
- obtain the limitation of the treatment;
- receive personal data concerning him in a structured, commonly used format and transmit this data to another holder (portability)
At any time, the user can revoke the consent given. Requests must be sent in writing to the following address: email@example.com
You can initiate a procedure for deleting your personal data directly in your Reserved Area (requires login). All your data will be deleted from our archives within 30 days of receiving your request.
This information may undergo changes and additions over time, therefore we invite you to periodically check the contents. Where possible, we will try to inform you promptly about the changes we make.
Last updated: August 3, 2023
Consult the full text of EU Regulation 2016/679 (GDPR) in the Official Journal of the European Union .