PRIVACY POLICY FOR PERSONAL DATA PROCESSING WEBSITE
(in accordance with Article 13 of EU Regulation 2016/679).
This page describes how the website is managed with reference to the processing of personal data of users who browse it. This information notice is provided pursuant to Article 13 of European Regulation No. 679/2016 ("GDPR") to individuals who interact with the web services of the website of CAUTELA S.A.S. di Cautela Cosimo & C., the data controller, with registered office at Via Aldo Moro, 69 | 98060 Tripi Abakainon (ME), accessible electronically from the address: http://www.pasticceriacautela.it corresponding to the homepage of the company’s official website.

BROWSING DATA

The computer systems and software procedures used to operate the website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses or domain names of the computers used by users connecting to the site, URI - Uniform Resource Identifier - addresses of the requested resources, time of the request, method used in submitting the request to the server, size of the file obtained in response, numerical code indicating the status of the server response - success, error, etc. - and other parameters relating to the user’s operating system and IT environment). Although such information is not collected to be associated with identified data subjects, by its nature it could, through processing and association with data held by third parties, allow users to be identified.

DATA PROVIDED VOLUNTARILY BY THE USER

No personal data is required from the user to browse the website. However, any contact with Cautela S.A.S. di Cautela Cosimo & C., via social media or the voluntary, explicit and spontaneous sending of messages, emails or traditional mail to the contact details indicated on the website, entails the subsequent acquisition of the sender’s address, including email, or telephone number, necessary to respond to requests, as well as any other personal data included in such communications. Such data will be used solely for the purpose of fulfilling the user’s request and may be disclosed to third parties only if necessary for that purpose.

PURPOSES OF PROCESSING

Browsing data are used solely to obtain anonymous statistical information on website usage and to ensure its proper functioning. Such data are deleted immediately after processing. Data may be used to ascertain liability in the event of hypothetical computer crimes against the website. Voluntarily provided data will be processed exclusively to perform a contract to which you are a party or to take pre-contractual measures at your request, or to provide, manage and administer all requested products/services, including where necessary billing, sending service communications and support, in accordance with this Policy and the specific privacy notices provided when subscribing to individual services.

LEGAL BASIS OF PROCESSING

Processing is carried out based on the legitimate interests of the Data Controller, specifically: handling complaints and disputes, debt recovery, preventing fraud and unlawful activities; exercising rights and protecting the legitimate interests of the Data Controller, such as the right to legal defense; promoting its commercial activities.

PROCESSING METHODS

Data processing is carried out in accordance with fundamental principles and appropriate security standards required by law. The Data Controller ensures the security, confidentiality and protection of personal data at every stage of processing. Data are processed by personnel authorized by Cautela S.A.S. di Cautela Cosimo & C. using procedures, technical and IT tools suitable to safeguard the confidentiality and security of your data. Processing is carried out through the operations listed in Article 4(2) of the Regulation, namely: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction, including the combination of two or more of the above activities.

MANDATORY OR OPTIONAL NATURE OF DATA PROVISION

No personal data is required to browse the website. The data subject may refuse to provide browsing data to the Data Controller by disabling cookies following the instructions provided by the browser in use. Disabling cookies may impair navigation and the use of website features. For voluntarily provided data, your consent is not required as processing is necessary for the performance of a contract to which you are a party or to take pre-contractual measures at your request (Art. 6(1)(b) of the Regulation), as well as, where applicable, to comply with a legal obligation (Art. 6(1)(a) of the Regulation). Therefore, failure to provide such data may fully or partially prevent the fulfilment of your request.

DISCLOSURE TO THIRD PARTIES

The Data Controller, within its activity and for the purposes indicated above, may use services provided by third parties acting on behalf of Cautela S.A.S. di Cautela Cosimo & C. and in accordance with its instructions, as data processors. These are entities providing processing or instrumental services (e.g. customer services, IT services for website operation). A complete and updated list of appointed data processors is available upon request via the contact details provided below.

TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

Data will not be transferred in any way to third countries outside the EU or to international organizations.

RETENTION PERIOD

The Data Controller retains browsing data for the time necessary to obtain anonymous statistical information on website usage and to ensure its proper functioning. Currently, such data are not stored. Voluntarily provided data will be processed for the entire duration of the requested services and retained for 12 months thereafter for administrative purposes, as well as for the time required to comply with legal obligations.

EXISTENCE OF AUTOMATED DECISION-MAKING

The Data Controller does not carry out processing involving automated decision-making.

DATA SUBJECT RIGHTS

With reference to Articles 15 (right of access), 16 (right to rectification), 17 (right to erasure), 18 (right to restriction of processing), 20 (right to data portability), 21 (right to object), and 22 (right not to be subject to automated decision-making) of GDPR 679/16, the data subject may exercise their rights by writing to the Data Controller using the contact details below, or by email, specifying the subject of the request and attaching a copy of an identity document proving the legitimacy of the request.

WITHDRAWAL OF CONSENT

With reference to Article 6 of GDPR 679/16, the data subject may withdraw consent at any time.

RIGHT TO LODGE A COMPLAINT

The data subject has the right to lodge a complaint with the supervisory authority of their country of residence.

DATA CONTROLLER

The identification details of the Data Controller are as follows: Cautela S.A.S. di Cautela Cosimo & C., - Via Aldo Moro, 69 | 98060 Tripi Abakainon (ME) ITALY - Tel. +39 094182024 - Email: info@pasticceriacautela.it