Data Controller

CREMERIA ALPI di Stefania Alibrandi – Via Ettore Colla 5, 00125 Roma. P.iva 10744021006 – Cod. Fis. LBRSFN69C45H501T

E-mail: cremeriaalpi@cremeriaalpi.it

Types of collected data

Among the Personal Data collected in this website directly or by third-parties there are: usage data, tracking technologies, name, last name, telephone, address, email.

Detailed info on each type of collected data can be found in dedicated sections of this Privacy Policy or through information pop-up texts that come up before data collection.
Personal data can be provided by the customer while Usage Data are automatically gathered when browsing this website
In this website, the required Data are specified. If the user denies to provide them, it might be that the Services of this website cannot be provided.
If some data are optional, the user is free to miss the Data and the services will be provided anyway. If the user has any doubt on which are the required Data, he/she can contact the Data Controller at any time.
Cookies, identifiers and other tracking technologies by this website or by third-party service providers in this website, if not specified, are used to provide the services asked by the users and other purposes listed in this document and in the Cookie Policy.

The User is responsible of third party Personal Data collected, published and shared through this website and guarantees the right to disclose such data releasing the Website controller from any responsability with third parties.

How and where collected data are processed

Way of data processing

The data controller takes appropriate security measures to prevent non authorized access, disclosure, change and destruction of Personal Data through computer and telematic tools with procedures and policies strictly related to the indicated purposes.
In some cases, beside the Data Controller, also other subjects involved in the organization of this website may have access to the Data (administrative, commercial, marketing or legal staff or web masters) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller. The Data Controller may always be requested to provide the updated list of Processors.

Legal basis of processing

User’s Personal Data can be processed by the Controller when:

• The User has given consent for one or more specific purposes. Note: under some jurisdictions, the Controller may be authorized to process Personal Data without the User’s consent or another of the legal bases specified below, until the User objects (“opt-out”) to such processing. However, this does not apply if the processing of Personal Data is subject to the European data pro
• The data colletion is necessary for the fulfilment of a contract with the User and/or for pre-contractual measures resulting therefrom.
• Processing is required to fulfil legal obligations the Controller is subjected to comply with.
• Processing is required to fulfil a task in the Public interest or to excercise official authority the Controller is vested.
• Processing is necessary to safeguard the legitimate interests of the Controller or third parties.

However, the User can always ask the Data Controller to explain the precise legal basis for any processing and above all to explain the purpose of the processing ( by law, expected or required to conclude a contract.

Location

Data are processed at the operating premises of the Controller and in any other location where the interested parties may be based. For further information, please contact the Data Controller.
The User’s Personal Data could be transferred to a different country from which the User is located. For further information, the User can refer to the section concerning the processing of Personal Data.

The User is entitled to obtain information about the legal basis for Data transfer outside the European Union, or to an international organization ruled by international law or including two or more countries Auchan ad UNO, along with the security measures adopted by the Controller to protect such Data.

The User can verify if such transfers have been made by referring to the section in this document about Personal Data processing details or may ask for information by contacting the Controller at the contact details shown above.

Data retention period

Data are processed and stored as long as it is required to achieve the purposes for which they were collected.

Pertanto:

• Personal Data collected for the purposes related to a contract between the Controller and the User will be stored until such a contract has been completely fulfilled.
• Data collected by the Controller for his/her legitimate interest to provide its services, will be stored until the end of this interest. The User can ask for more information about the legitimate interest pursued by the Controller in specific sections of this document or contacting the Controller.

The Controller may keep Personal Data for an additional period whenever the User has given consent to such processing, until the consent is not withdrawn. Furthermore, the Controller may be obliged by law to keep Personal Data for a longer period in compliance with a legal obligation or by order of an Authority.
At the end of the Storage Period, Personal Data will be deleted. Therefore, by this time, the right to have access, cancel, edit, and to data portability can no longer be exercised.

Purposes of the collected data processing

User’s Data are collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforceable actions, protect their rights and interests (both those of Users and third parties), identify any malicious or fraudulent activities, and for the following purposes: displaying contents from external platforms, contacting the User and for analytics.

For detailed information on the purposes of the collected Data processing, the User can refer to the section “Details on the Personal Data Processing”.

Details on the personal data processing

Personal data are collected for the following purposes and using the following services:

User’s rights

Users can excerice the following rights regarding the Data processed by the Controller:

• Revoke User’s consent at any time: the User can revoke the previously accepted consent to the data processing at any time.
• Object to the processing of his/her Data: the User can object to the processing of his/her Data of the processing of it is based on a different legal basis than that of the consent. Further details on the right to object are shown in the section below.
• Access his/her Data: the User has the right to obtain Information on the Personal Data processing and to obtain a copy of the processed Data.
• Verify and ask for correction: the User can verify the Data accuracy and ask for updating or adjustments.
• Ask for restriction of processing: under certain circumstances, the User may request the restriction of processing of his/her Data. In this case, the Controller will process the Data only with the purpose of storage.
• Have Personal Data deleted or removed: under certain circumstances, the User can ask the Controller for the cancellation of his/her Data.
• Receive his/her Data or have them transferred to another Data Controller: the User has the right to get his/her Personal Data in structured, commonly used and readable format and , where technically possibile, to tranfer them from one Controller to another. This is possible when the Data are processed with automated tools and the processing is based either on the User’s consent, or on a contract with the User or on contractual terms connected to it.
• Lodge a complaint: the User can lodge a complaint with the proper data protection supervisory authority or file a legal action.

Details about the right to object

The User can object to Data processing when Personal Data are processed in the public interest, in the excercise of an official authority of the Controller or to pursue legitimate interests of the Controller.

Please note that the User can object to Data processing for direct marketing purposes without providing any reasons. To know whether Personal Data are processed for direct marketing purposes, please read the dedicated sections in this document.

How to excerise rights

To excercise his/her rights, the User can send a request to the Controller, referring to the contact details available in this document.
Requests will be processed by the Controller without any cost, as soon as possible, and always within a month.

Further information on data processing

Legal defense

Personal Data can be used by the Controller in court or in the preparatory steps of legal proceedings for improper use of this website or its related services.
The User is aware that the Controller may be requested by law enforcement agencies to disclose collected Personal Data.

Specific policies

At User’s request, this website may offer further information related to specific services and data collection and processing in addition to this Privacy Policy Notice.

System logs and maintenance

For operation and maintenance purposes, this website and any third-party services may collect system logs, I.e. files that record interactions and that can have Personal Data such as the IP User’s address.

Information not included in this policy notice

Further information about Personal Data processing can be requested any time to the Controller using the contact details in this document.

Answer to the “do not track” requests

This website does not support “Do not track” requests.
To know whether third-party services support them, the User may check their privacy policies.

Changes to this privacy policy

The Data Controller may change this Privacy Policy any time and will inform about it by updating this page and, if technically and legally possible, by sending a notification to the Users using the contact details in its possession.
The User is kindly requested to frequently check this page looking at the date of the last changes at the footer.

If the changes affect processing operations whose legal basis is consent, if necessary, the Data Controller will collect the User’s consent again.